Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402215.roa
File: AS402215.roa (raw, json)
Hash identifier: mUZuR6jZCwYCOfA+YZqRoQIBEmhkkVZZQKcK2dfYh/8=
Subject key identifier: 63:19:97:01:19:E9:97:54:B8:57:3D:86:C1:52:47:C4:A9:75:5C:3A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6DC4166BA622E4D30AE13D08AE779E6155D4C987
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402215.roa
Signing time: Tue 25 Aug 2026 09:34:10 +0000
ROA not before: Tue 25 Aug 2026 09:29:10 +0000
ROA not after: Tue 24 Aug 2027 09:34:10 +0000
asID: 402215
IP address blocks: 181.214.4.0/24 maxlen: 24
181.215.3.0/24 maxlen: 24
191.96.61.0/24 maxlen: 24
191.101.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:c4:16:6b:a6:22:e4:d3:0a:e1:3d:08:ae:77:9e:61:55:d4:c9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 25 09:29:10 2026 GMT
Not After : Aug 24 09:34:10 2027 GMT
Subject: CN=6319970119E99754B8573D86C15247C4A9755C3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0d:38:1a:53:3b:c0:a9:2e:0b:e7:6c:fc:b8:
32:0f:ae:cc:12:98:9a:22:b2:c8:02:4f:66:39:1f:
c0:b6:51:3b:4f:73:dd:b4:28:e1:d4:4c:2f:35:fc:
82:5b:26:35:95:76:00:be:28:a8:e7:e5:93:c2:d1:
92:ce:49:57:8f:f3:89:fe:6f:e1:eb:68:c5:cb:4c:
e1:19:df:09:79:88:7c:32:bb:7f:c5:95:57:e5:40:
bf:a7:42:b0:6d:71:f8:de:d9:2c:2f:58:4b:33:2e:
51:27:50:7a:b8:d9:7a:fb:64:b6:dc:1f:7c:8d:a4:
45:7d:9a:ff:b5:49:45:ad:6f:a9:c7:36:65:c5:30:
e2:aa:73:13:08:a3:b4:1a:76:79:df:b1:1e:43:cb:
09:99:3c:b7:6b:11:4f:7b:ac:7b:97:04:39:db:7e:
33:1a:9d:9f:b3:f1:86:e2:f9:ed:e1:3b:a1:9e:13:
58:ba:b6:fb:ab:f3:6f:74:88:b8:26:5f:66:48:62:
88:c8:41:01:7d:ab:1d:d9:ca:9c:7b:8a:a9:4a:a4:
90:5f:74:08:a6:ef:3e:6c:96:74:4e:d2:40:ed:b3:
f5:26:5c:f3:c1:1d:6a:f6:0e:d5:60:dc:c6:c2:44:
ac:ec:18:3e:93:32:0a:6c:9a:ce:dd:bb:a7:83:ad:
24:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:19:97:01:19:E9:97:54:B8:57:3D:86:C1:52:47:C4:A9:75:5C:3A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402215.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.4.0/24
181.215.3.0/24
191.96.61.0/24
191.101.9.0/24
Signature Algorithm: sha256WithRSAEncryption
78:f0:c7:07:37:d7:05:8b:c5:2d:55:ca:68:6b:24:ed:0c:98:
7c:15:20:c7:b3:18:d4:29:14:13:fd:7a:e3:2d:2e:00:a6:58:
a2:12:02:f4:e3:d9:dc:a0:9e:06:c8:fb:88:56:6f:53:20:3d:
5a:21:8f:d5:68:92:8b:0c:a6:77:7c:22:84:b2:93:b8:c3:5b:
0a:1d:03:62:d6:98:85:c0:0e:88:92:b8:b1:5c:ba:88:a4:22:
88:11:a5:83:df:5d:83:b6:06:b4:cd:a6:39:e2:f5:9e:1f:dd:
92:f2:37:f7:49:a3:dd:5a:12:eb:ff:06:b3:15:9e:14:6b:c6:
93:47:8d:3c:92:d6:80:09:aa:24:cb:8d:1a:53:c0:84:39:26:
e3:ca:e0:46:ac:95:bd:91:53:d2:9a:6a:8a:f7:5b:3b:8c:84:
29:a8:a1:1f:90:b3:90:d5:89:bd:d5:62:64:85:3b:b4:98:90:
06:43:50:e9:90:fa:bf:6a:90:f4:62:98:aa:55:90:5a:d5:7d:
fe:7f:76:8d:80:b2:91:65:2f:6a:53:ce:6d:f4:fc:84:d0:b7:
0e:9b:3e:76:c0:f3:9b:83:9c:1b:45:6e:03:67:2c:9c:64:83:
9a:61:81:81:c0:8b:ea:e8:54:93:18:a7:a1:0b:f2:bc:dd:79:
14:d2:b1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:44:48 2026 by rpki-client