Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402369.roa
File: AS402369.roa (raw, json)
Hash identifier: t5RIj7TgipJC+dXF6eeQ3g9HA2BDjqPljA3NhrnCTgM=
Subject key identifier: 7C:70:C6:46:9B:93:84:EB:8F:DB:9D:EB:D9:D3:7B:A8:C3:8F:A3:64
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6D4A2710E11629B450D2F3E24E036ED30D2E0576
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402369.roa
Signing time: Fri 08 May 2026 06:39:07 +0000
ROA not before: Fri 08 May 2026 06:34:07 +0000
ROA not after: Fri 07 May 2027 06:39:07 +0000
asID: 402369
IP address blocks: 181.214.254.0/24 maxlen: 24
191.96.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:4a:27:10:e1:16:29:b4:50:d2:f3:e2:4e:03:6e:d3:0d:2e:05:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: May 8 06:34:07 2026 GMT
Not After : May 7 06:39:07 2027 GMT
Subject: CN=7C70C6469B9384EB8FDB9DEBD9D37BA8C38FA364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:5b:ff:76:20:0a:08:d5:07:4d:bb:92:11:
d0:a6:40:87:52:9f:ee:52:3b:2e:4b:01:38:07:d4:
b3:71:8f:6c:28:ed:eb:76:ee:93:8b:3e:6c:a9:d2:
1e:7b:fa:e7:8c:5a:eb:26:39:12:f4:5f:0f:8d:5e:
a7:5b:db:0d:d3:b2:9a:7b:bc:57:c2:fa:b8:0c:9a:
dd:08:1b:55:d8:f5:6f:b2:b2:e1:92:b1:7b:75:82:
af:11:84:26:5e:d3:a0:e3:b3:3d:c5:c4:dc:24:42:
b0:53:29:34:b3:0b:cb:bb:e0:a4:cd:12:91:be:1a:
9f:ac:e1:2a:f1:e6:8b:e6:da:4f:a6:35:0d:b0:43:
d1:e9:a6:c5:34:75:db:9a:fb:a3:71:56:e9:86:6f:
00:88:31:90:60:d6:c0:f7:71:92:80:09:1d:e8:ee:
72:5e:09:80:77:e7:d1:55:fd:d6:0f:03:29:3f:99:
b3:10:37:e0:8f:dc:70:85:6d:a5:cb:ff:4f:4f:fd:
80:ef:cf:a7:9c:f0:1b:61:0a:fd:3a:45:46:c4:e4:
f5:55:23:7a:0f:02:8f:99:57:57:67:14:d3:4f:0c:
f6:3d:0a:4d:4e:61:7d:9e:4b:79:97:cd:25:12:e8:
6e:8b:65:6c:48:31:d0:bf:1c:0d:22:ce:43:88:4a:
aa:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:70:C6:46:9B:93:84:EB:8F:DB:9D:EB:D9:D3:7B:A8:C3:8F:A3:64
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402369.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.254.0/24
191.96.4.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:4a:eb:97:c7:cd:c3:97:a6:7e:83:bf:5d:9a:d3:16:91:9a:
74:20:84:f4:5c:14:73:11:5f:87:fa:85:27:88:68:9a:e0:62:
03:c0:98:88:80:10:c1:13:17:78:7a:fe:05:32:44:f3:3a:3a:
47:32:ca:63:63:57:5d:b0:ea:41:aa:69:4e:c9:07:71:4d:2d:
9e:86:1c:37:89:83:13:fa:cc:e9:5a:54:37:d6:4f:4b:81:85:
2b:79:6b:c6:58:67:58:4b:b7:e6:2a:c8:34:3a:50:91:04:26:
a4:76:d1:8b:03:03:d2:c3:83:cd:60:8c:b7:a0:c5:d6:b9:a1:
8f:71:1a:e3:8d:69:0f:b6:f1:e1:13:42:2a:4a:f8:5a:a1:9d:
10:b2:e5:c1:74:16:71:33:70:60:59:15:7e:b1:5d:71:05:f0:
1d:63:6f:cc:55:4b:4c:8e:15:b0:41:bb:b6:5c:06:26:57:77:
6b:4b:5c:81:86:35:c9:e0:fb:25:ef:30:07:55:4a:cd:7f:57:
35:74:e7:8c:72:4c:57:52:ba:83:3f:41:82:85:44:94:b1:58:
8b:9e:9b:1d:65:2a:ef:3b:fe:d6:ee:cd:88:fb:89:a6:2f:4e:
af:8f:d9:c2:03:95:f8:90:53:03:3a:b9:02:d9:51:df:7b:4f:
71:55:41:c5
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUbUonEOEWKbRQ0vPiTgNu0w0uBXYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA1MDgwNjM0MDdaFw0yNzA1MDcwNjM5MDdaMDMxMTAvBgNV
BAMTKDdDNzBDNjQ2OUI5Mzg0RUI4RkRCOURFQkQ5RDM3QkE4QzM4RkEzNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzZ1v/diAKCNUHTbuSEdCmQIdS
n+5SOy5LATgH1LNxj2wo7et27pOLPmyp0h57+ueMWusmORL0Xw+NXqdb2w3Tspp7
vFfC+rgMmt0IG1XY9W+ysuGSsXt1gq8RhCZe06Djsz3FxNwkQrBTKTSzC8u74KTN
EpG+Gp+s4Srx5ovm2k+mNQ2wQ9HppsU0ddua+6NxVumGbwCIMZBg1sD3cZKACR3o
7nJeCYB359FV/dYPAyk/mbMQN+CP3HCFbaXL/09P/YDvz6ec8BthCv06RUbE5PVV
I3oPAo+ZV1dnFNNPDPY9Ck1OYX2eS3mXzSUS6G6LZWxIMdC/HA0izkOISqrTAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUfHDGRpuThOuP253r2dN7qMOPo2QwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNDAyMzY5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAtdb+
AwQAv2AEMA0GCSqGSIb3DQEBCwUAA4IBAQB+SuuXx83Dl6Z+g79dmtMWkZp0IIT0
XBRzEV+H+oUniGia4GIDwJiIgBDBExd4ev4FMkTzOjpHMspjY1ddsOpBqmlOyQdx
TS2ehhw3iYMT+szpWlQ31k9LgYUreWvGWGdYS7fmKsg0OlCRBCakdtGLAwPSw4PN
YIy3oMXWuaGPcRrjjWkPtvHhE0IqSvhaoZ0QsuXBdBZxM3BgWRV+sV1xBfAdY2/M
VUtMjhWwQbu2XAYmV3drS1yBhjXJ4Psl7zAHVUrNf1c1dOeMckxXUrqDP0GChUSU
sViLnpsdZSrvO/7W7s2I+4mmL06vj9nCA5X4kFMDOrkC2VHfe09xVUHF
-----END CERTIFICATE-----
Generated at Fri May 8 15:15:14 2026 by rpki-client