Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: Px2S41qjd449/RTmUT/f9mJ2n86BBsUSqKDpFji8m/U=
Subject key identifier: 27:1B:92:D3:3B:DC:75:70:4D:B5:FC:72:57:10:E6:59:84:07:0F:F2
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1EF8FDC92FEB91DBD857F2A4268773710A76C0AF
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402265.roa
Signing time: Sun 04 Oct 2026 16:31:59 +0000
ROA not before: Sun 04 Oct 2026 16:26:59 +0000
ROA not after: Sun 03 Oct 2027 16:31:59 +0000
asID: 402265
IP address blocks: 191.96.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:f8:fd:c9:2f:eb:91:db:d8:57:f2:a4:26:87:73:71:0a:76:c0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 4 16:26:59 2026 GMT
Not After : Oct 3 16:31:59 2027 GMT
Subject: CN=271B92D33BDC75704DB5FC725710E65984070FF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9e:88:fb:7a:81:94:8c:a6:e1:52:f0:24:a9:
eb:e5:4d:0c:54:67:03:14:d0:3b:2a:14:4f:12:af:
3f:1c:a8:37:cd:a5:00:f0:d9:aa:2b:da:97:c9:62:
73:82:ba:5e:81:86:73:29:29:d2:e7:4d:5f:63:ab:
e8:66:95:71:c8:84:c2:eb:78:fc:87:d2:4a:3f:c6:
75:15:d9:ca:9d:3f:b4:ae:0b:66:bf:19:ee:35:34:
ad:05:5c:8c:19:ec:14:d6:e3:2c:bc:48:76:c8:9a:
ea:68:60:21:e5:8d:92:77:a8:83:07:62:c0:54:21:
42:78:26:fd:21:1f:7c:9a:ed:14:33:25:8c:fc:be:
17:01:ff:44:c5:09:6a:7f:a6:5a:bc:b6:4b:9b:cc:
4f:5a:42:b7:ad:64:41:45:57:23:07:1a:49:5f:2a:
d9:c3:e8:bc:d4:5e:24:ac:ad:9b:bd:18:a5:9b:b6:
e3:b9:d7:79:e4:f5:6c:ba:e1:5b:0f:0b:24:22:34:
46:8c:89:de:2b:f9:fb:19:f4:0a:6e:be:70:4d:b6:
bf:29:67:9b:3e:08:10:b2:3b:e7:69:2e:55:08:f8:
3d:50:9c:26:a5:27:f9:d1:da:60:9e:fa:d5:98:9a:
b7:a6:ce:c9:dc:be:8c:2c:29:db:f2:6a:97:e8:e5:
41:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1B:92:D3:3B:DC:75:70:4D:B5:FC:72:57:10:E6:59:84:07:0F:F2
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.157.0/24
Signature Algorithm: sha256WithRSAEncryption
90:2a:be:de:a5:01:45:3b:54:f9:e7:de:e7:c5:8e:89:4e:29:
9c:dc:ab:3f:40:0f:ee:98:7b:74:86:6d:0d:9d:36:e0:f7:b1:
39:1b:cb:26:77:14:24:50:b5:96:0c:3e:60:4d:7b:9d:5d:9b:
04:38:70:0b:68:8c:29:7d:cb:d3:f6:12:52:01:5c:e1:50:ea:
19:94:78:37:e8:06:86:60:6a:7f:65:34:70:29:9a:ed:6f:6b:
26:93:a1:7a:41:f9:4a:6b:44:58:4e:71:45:21:c7:2c:e8:ea:
fe:ee:06:a7:63:6b:c1:4a:25:1f:29:9d:61:aa:a7:b4:30:29:
8e:b4:27:63:96:a9:01:9b:73:16:96:4b:eb:96:25:0c:3e:ea:
56:c9:57:02:4b:31:1d:3c:df:f8:b3:b5:ce:b1:fb:a5:dd:18:
4c:a0:05:f4:8e:ab:3a:ec:14:4d:12:d5:c9:2e:fd:ef:6b:08:
87:e6:b8:98:68:dc:c1:7d:39:ee:a9:da:a4:c6:5f:b0:e2:60:
82:e4:c0:18:3d:d4:3f:17:b0:c0:46:4a:f5:7e:a2:39:f0:28:
a3:ee:5e:eb:ef:9f:66:e4:66:e1:e9:fd:64:4e:2e:c7:46:e2:
b3:d4:f9:27:81:80:31:3f:36:2e:a7:35:bd:03:68:a0:79:68:
2e:fc:24:59
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUHvj9yS/rkdvYV/KkJodzcQp2wK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjEwMDQxNjI2NTlaFw0yNzEwMDMxNjMxNTlaMDMxMTAvBgNV
BAMTKDI3MUI5MkQzM0JEQzc1NzA0REI1RkM3MjU3MTBFNjU5ODQwNzBGRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsnoj7eoGUjKbhUvAkqevlTQxU
ZwMU0DsqFE8Srz8cqDfNpQDw2aor2pfJYnOCul6BhnMpKdLnTV9jq+hmlXHIhMLr
ePyH0ko/xnUV2cqdP7SuC2a/Ge41NK0FXIwZ7BTW4yy8SHbImupoYCHljZJ3qIMH
YsBUIUJ4Jv0hH3ya7RQzJYz8vhcB/0TFCWp/plq8tkubzE9aQretZEFFVyMHGklf
KtnD6LzUXiSsrZu9GKWbtuO513nk9Wy64VsPCyQiNEaMid4r+fsZ9ApuvnBNtr8p
Z5s+CBCyO+dpLlUI+D1QnCalJ/nR2mCe+tWYmremzsncvowsKdvyapfo5UFHAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUJxuS0zvcdXBNtfxyVxDmWYQHD/IwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNDAyMjY1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAv2Cd
MA0GCSqGSIb3DQEBCwUAA4IBAQCQKr7epQFFO1T5597nxY6JTimc3Ks/QA/umHt0
hm0NnTbg97E5G8smdxQkULWWDD5gTXudXZsEOHALaIwpfcvT9hJSAVzhUOoZlHg3
6AaGYGp/ZTRwKZrtb2smk6F6QflKa0RYTnFFIccs6Or+7ganY2vBSiUfKZ1hqqe0
MCmOtCdjlqkBm3MWlkvrliUMPupWyVcCSzEdPN/4s7XOsful3RhMoAX0jqs67BRN
EtXJLv3vawiH5riYaNzBfTnuqdqkxl+w4mCC5MAYPdQ/F7DARkr1fqI58Cij7l7r
759m5Gbh6f1kTi7HRuKz1PkngYAxPzYupzW9A2igeWgu/CRZ
-----END CERTIFICATE-----
Generated at Tue Oct 20 12:22:13 2026 by rpki-client