Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402394.roa
File: AS402394.roa (raw, json)
Hash identifier: JvzwadIhqtI4DhkulpChRIQ69IHJJwhuaFyF4GEq4us=
Subject key identifier: A7:0A:7A:BC:50:34:45:F0:4F:92:5B:AA:48:79:EB:3D:84:BE:1B:4D
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 221DB929C35F365F7F722E98F5B310B6D20D9FA3
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402394.roa
Signing time: Fri 03 Jul 2026 08:01:16 +0000
ROA not before: Fri 03 Jul 2026 07:56:16 +0000
ROA not after: Fri 02 Jul 2027 08:01:16 +0000
asID: 402394
IP address blocks: 179.61.225.0/24 maxlen: 24
179.61.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 07:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:1d:b9:29:c3:5f:36:5f:7f:72:2e:98:f5:b3:10:b6:d2:0d:9f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 3 07:56:16 2026 GMT
Not After : Jul 2 08:01:16 2027 GMT
Subject: CN=A70A7ABC503445F04F925BAA4879EB3D84BE1B4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4e:d4:47:19:01:f9:78:62:24:a9:a8:76:4e:
41:a4:07:ed:02:45:ea:3b:f5:67:dc:2c:97:21:24:
12:72:5b:29:40:22:52:9f:51:bf:31:01:10:71:28:
ce:a6:a8:c3:ce:0c:7d:b3:fe:6f:7e:c1:65:b4:47:
ce:a9:96:cc:a7:a6:fe:d9:f8:f2:18:28:67:be:5c:
18:7b:69:d2:0f:09:08:e5:4e:1e:5f:01:0d:a1:b9:
a9:af:e6:91:7d:60:19:3a:bf:49:32:d5:e6:53:f3:
07:57:70:83:3c:7e:82:b3:62:97:eb:01:13:32:87:
fa:75:d3:d4:98:62:34:e7:c7:21:6a:09:a6:59:cd:
24:bb:83:2f:4a:15:1a:6c:99:a2:a6:51:63:c0:7f:
cb:f7:a7:97:8e:c6:3f:37:5e:15:38:7c:3b:1c:d9:
49:85:09:3c:f1:d2:c7:d7:93:74:6a:cc:b7:09:ff:
55:87:40:18:7c:8c:26:6b:d3:e5:5f:66:06:16:00:
aa:a5:2e:4d:b7:db:8c:d9:c6:39:8e:85:24:c5:3c:
88:e7:b7:a9:3e:33:da:5c:9d:ff:a7:7e:73:e9:bf:
39:57:2f:2c:39:c5:15:69:eb:af:86:33:2a:83:60:
8c:49:6d:b8:bb:e9:e9:01:93:6a:50:7a:89:00:c9:
11:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0A:7A:BC:50:34:45:F0:4F:92:5B:AA:48:79:EB:3D:84:BE:1B:4D
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402394.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.225.0/24
179.61.241.0/24
Signature Algorithm: sha256WithRSAEncryption
57:1c:0b:19:1d:4f:3d:e3:ba:ef:d5:cb:72:1f:b5:ea:68:d2:
23:2f:03:56:cc:a0:ff:27:7a:4c:d8:32:e2:83:81:08:0c:c1:
4c:af:11:5a:b4:96:c5:3d:f2:7a:9d:8f:4f:b4:f4:b3:a2:f6:
57:63:0f:85:d0:34:3f:a9:98:84:83:d0:a0:01:b6:c1:85:7d:
43:be:3d:af:99:73:c0:60:6d:0f:bb:40:c8:77:63:8c:0f:5f:
19:c8:38:b2:2b:0f:17:21:be:28:37:c1:61:0a:5e:18:99:3b:
ff:f7:d1:2c:87:a3:f5:67:6a:c3:dc:91:7a:d6:d2:6d:4f:28:
37:28:d7:ae:24:16:5d:de:8b:c6:5b:c0:51:5e:36:ee:90:9a:
f3:b7:a4:1c:96:14:98:c7:7d:92:2e:a6:7b:5d:0d:e2:bc:e4:
c6:7f:8e:20:76:47:87:f6:b9:9c:2b:4a:f9:d2:21:0c:7a:99:
c6:52:62:4a:1a:f1:78:dd:3f:f6:61:ea:1c:92:31:c7:b7:83:
77:54:08:d5:86:48:e0:84:32:48:3a:3d:8d:88:87:60:0a:ad:
69:44:2f:b3:54:7d:83:a2:8a:3b:2b:6b:cc:7e:95:c8:a8:52:
04:94:e9:06:e7:cc:1e:b7:22:f8:97:ef:9f:09:64:ba:f9:9d:
e3:98:3c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 16:37:56 2026 by rpki-client