Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: ZYHHFYMd6NOjyhUGpBvBNvCwWEOOAmE4ag/N7O/z+z4=
Subject key identifier: 96:B7:84:D4:6F:68:28:A4:8A:61:70:85:4C:E1:8E:1C:16:CC:FB:01
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 535D3FEC6EC7F3B7CFBC83BF5D75F9F8A562F9CC
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402265.roa
Signing time: Sun 30 Aug 2026 12:36:46 +0000
ROA not before: Sun 30 Aug 2026 12:31:46 +0000
ROA not after: Sun 29 Aug 2027 12:36:46 +0000
asID: 402265
IP address blocks: 181.41.212.0/24 maxlen: 24
181.214.164.0/24 maxlen: 24
181.214.213.0/24 maxlen: 24
181.215.176.0/24 maxlen: 24
181.215.185.0/24 maxlen: 24
191.96.99.0/24 maxlen: 24
191.96.182.0/24 maxlen: 24
191.96.185.0/24 maxlen: 24
191.101.135.0/24 maxlen: 24
191.101.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:5d:3f:ec:6e:c7:f3:b7:cf:bc:83:bf:5d:75:f9:f8:a5:62:f9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 30 12:31:46 2026 GMT
Not After : Aug 29 12:36:46 2027 GMT
Subject: CN=96B784D46F6828A48A6170854CE18E1C16CCFB01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:45:e1:20:28:0b:2e:ae:45:13:75:0b:19:32:
8e:31:3d:4e:e6:71:24:ce:62:fc:88:26:b2:6f:40:
0d:57:b5:74:e3:8e:7f:e9:43:31:ca:60:66:20:75:
dd:e1:56:64:10:6d:87:73:1b:13:87:17:7b:45:15:
e5:6c:f8:5e:ae:0a:21:46:1c:55:ed:84:a4:03:80:
a7:4e:f0:59:93:17:13:a5:de:cf:90:06:b6:04:08:
ee:aa:c1:9b:6e:fb:91:51:94:0a:e4:95:8c:ca:e3:
e0:b3:b8:0a:67:f9:ef:a4:32:c4:3a:24:71:b9:d6:
14:fd:a4:46:a8:4e:b0:48:70:80:7c:1f:e5:f4:33:
d4:36:07:a8:b9:7a:e8:b5:b6:d6:16:94:4a:a5:cd:
e2:ec:a6:0c:bf:85:34:0f:e4:43:21:35:7d:4f:b4:
0f:bd:39:51:01:e3:d2:b6:80:f8:2a:b7:21:7d:a3:
27:fd:14:2f:54:33:82:f0:35:cd:25:f3:0c:72:88:
70:f4:25:24:e9:35:f9:7f:13:83:09:d8:57:f8:02:
7c:be:5d:08:73:01:a0:6b:e5:b5:7a:2c:e5:41:0a:
6e:0b:53:74:9b:b3:af:08:ba:54:17:90:ab:4d:00:
9f:29:09:1e:6c:e3:68:33:23:f9:ed:11:ae:15:91:
ec:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B7:84:D4:6F:68:28:A4:8A:61:70:85:4C:E1:8E:1C:16:CC:FB:01
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.212.0/24
181.214.164.0/24
181.214.213.0/24
181.215.176.0/24
181.215.185.0/24
191.96.99.0/24
191.96.182.0/24
191.96.185.0/24
191.101.135.0/24
191.101.209.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:e6:55:55:52:10:7b:51:69:99:ca:6e:7b:43:e9:9c:91:e3:
8c:19:76:1e:3c:71:a2:99:ba:d4:13:ef:45:50:fe:10:af:4a:
0f:ad:70:4d:77:16:95:25:d5:a9:2b:a0:41:b7:92:41:b6:95:
a1:8e:4f:f1:06:5f:d9:ce:66:5a:d3:dd:ed:d9:70:79:0a:9f:
46:f6:11:9d:6f:66:33:9f:5c:dd:67:c2:c8:de:bc:6f:bb:8f:
d3:78:d4:b0:2c:c2:eb:ed:26:06:23:3e:9b:10:e3:66:d2:ef:
27:b6:19:c2:42:5f:b5:32:7c:c2:08:e7:81:4f:0a:3f:4c:13:
d5:f5:5f:b6:6a:e7:44:80:61:a1:71:9d:ba:ae:2a:d0:35:07:
ed:a0:35:81:dc:a4:4c:4f:99:65:88:b1:b1:e4:c4:b5:f6:17:
8b:d9:28:e7:87:d9:a4:33:bc:4e:70:33:46:86:be:43:5a:43:
c4:41:5e:2e:55:de:e5:4e:cd:72:67:5d:4e:28:60:95:14:00:
80:6c:d0:04:42:9a:6b:1c:04:0a:d8:6d:b3:ce:b0:bd:14:43:
3f:16:bd:77:95:51:01:56:6f:c5:88:94:a9:6d:3a:1b:54:a6:
21:70:60:b4:12:a3:61:c4:13:45:f9:1f:c1:d8:bf:38:ce:9c:
81:d7:49:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 12:34:26 2026 by rpki-client