Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402487.roa
File: AS402487.roa (raw, json)
Hash identifier: X9ORUVARACta+z6xdBnoE/ZjygScbCybrha2NSy/lNA=
Subject key identifier: FC:66:55:91:E1:4B:31:F6:1E:0F:62:47:39:56:E8:6E:91:22:0F:47
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 39CB672EFEA22FF1759F776F37076046DDC3883A
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402487.roa
Signing time: Wed 08 Jul 2026 00:04:46 +0000
ROA not before: Tue 07 Jul 2026 23:59:46 +0000
ROA not after: Wed 07 Jul 2027 00:04:46 +0000
asID: 402487
IP address blocks: 179.61.237.0/24 maxlen: 24
181.214.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:cb:67:2e:fe:a2:2f:f1:75:9f:77:6f:37:07:60:46:dd:c3:88:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 7 23:59:46 2026 GMT
Not After : Jul 7 00:04:46 2027 GMT
Subject: CN=FC665591E14B31F61E0F62473956E86E91220F47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4a:ca:fb:47:65:a8:21:bc:20:e5:3a:bc:6f:
23:a3:df:54:e3:6d:16:f6:b1:2c:14:38:78:66:43:
a4:9f:67:d7:95:1a:70:4a:1f:c9:f4:0b:1e:eb:1a:
5c:a6:a2:48:58:a4:1b:23:30:a9:b0:af:4e:af:b5:
f6:d2:12:b9:8d:23:47:96:c3:13:4c:9c:d4:33:58:
9c:3f:23:4b:d5:cf:6c:55:7d:ab:70:9b:94:24:09:
37:72:76:5f:d3:91:24:c0:29:1d:d1:1b:a4:a0:dc:
4e:6d:e1:81:d6:8d:1f:92:be:53:00:6a:cc:f4:fe:
1c:e3:e3:73:2a:0b:45:dc:95:16:8a:68:9c:1f:5a:
48:09:30:f0:8b:62:e2:e4:e3:fe:2a:be:4d:57:17:
52:32:ef:3e:56:22:5a:52:08:9e:ae:f6:9d:bc:12:
14:b3:b1:05:95:15:69:67:49:f9:44:5a:42:1d:84:
18:42:cd:db:e8:23:dd:9c:6b:1f:58:39:e2:06:66:
6c:87:a6:b8:71:75:47:0c:8a:cc:71:22:77:9d:f1:
9d:8d:a4:14:a0:48:ab:e3:0f:13:ec:cd:bd:6b:5a:
c7:74:83:18:8a:3e:a8:12:58:23:11:7d:dd:c6:ee:
9c:48:62:f7:7c:f0:8d:16:2d:94:ca:82:ae:c5:a2:
ff:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:66:55:91:E1:4B:31:F6:1E:0F:62:47:39:56:E8:6E:91:22:0F:47
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402487.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.237.0/24
181.214.240.0/24
Signature Algorithm: sha256WithRSAEncryption
99:17:fd:ec:49:84:65:3f:31:fb:fb:9c:d4:a2:f9:66:52:56:
ad:34:10:95:1c:f6:76:20:2f:8a:8b:4f:3f:ae:08:4a:86:cd:
ff:54:df:a8:9e:b7:b4:21:20:20:31:f5:66:1c:02:c5:c7:3f:
9b:25:37:b3:59:41:d4:86:b4:f0:9a:20:1c:f1:7a:96:71:07:
19:f0:80:8e:be:94:20:e6:19:61:56:09:30:de:df:85:9c:8d:
d4:ae:9d:45:bc:40:e2:d0:3f:ab:d6:44:33:ff:f0:ea:d8:15:
04:1a:3c:76:6b:12:9e:4f:58:6c:c9:ad:8f:cc:35:c2:c5:c3:
ad:61:5c:be:56:6d:9d:23:15:7c:51:23:d1:a4:0c:6b:2f:84:
06:0f:84:e0:a7:ff:d6:85:2b:8c:22:d4:3f:62:9b:41:67:c0:
25:4b:30:69:05:08:42:b1:a7:8c:c9:00:1d:c6:24:16:92:f0:
ec:76:90:6b:cc:65:86:f6:d7:0a:50:99:e8:7b:16:5d:15:55:
b3:22:98:32:76:f1:26:f6:6e:77:43:2e:e0:b0:2e:b1:77:06:
8f:a5:be:e2:88:e3:9c:b6:38:9b:cc:4a:a6:0b:27:ac:c4:64:
22:6a:e2:67:87:c6:1b:ab:91:75:e7:11:3a:5f:3e:25:04:48:
3e:1d:3c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:30:24 2026 by rpki-client