Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402642.roa
File: AS402642.roa (raw, json)
Hash identifier: Hw8+u6KYv6XRpJbitR4noM411bv1eEEXt7rgKZkkYAs=
Subject key identifier: 0E:A4:56:FE:0F:5E:1A:99:8E:A7:4F:EA:36:55:69:A9:F6:40:B6:DC
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 22AD417FB23038C4873A64F8C3DC3E100F83BDC5
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402642.roa
Signing time: Fri 10 Jul 2026 09:04:56 +0000
ROA not before: Fri 10 Jul 2026 08:59:56 +0000
ROA not after: Fri 09 Jul 2027 09:04:56 +0000
asID: 402642
IP address blocks: 2a03:fbc0::/29 maxlen: 48
2a0a:7a00::/29 maxlen: 48
2a0a:9200::/29 maxlen: 48
2a0a:a600::/29 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 12:11:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:ad:41:7f:b2:30:38:c4:87:3a:64:f8:c3:dc:3e:10:0f:83:bd:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 10 08:59:56 2026 GMT
Not After : Jul 9 09:04:56 2027 GMT
Subject: CN=0EA456FE0F5E1A998EA74FEA365569A9F640B6DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a1:75:c3:5a:3a:da:a4:de:bc:b6:59:82:1e:
91:be:78:81:b8:eb:c0:17:2b:33:04:66:e9:f7:0f:
fb:17:b0:bf:07:18:4d:49:7d:55:a0:82:d0:e7:60:
1d:63:a4:86:00:7f:96:6a:10:0c:3b:46:5d:19:4a:
22:0a:36:cd:37:c2:bb:f3:00:eb:6e:72:e3:7d:28:
7b:fd:83:50:fd:ba:d6:9d:90:38:dd:0d:d4:ab:63:
12:98:94:ba:84:25:82:9d:70:8b:4b:6f:00:a9:b7:
dc:a8:f0:3c:03:00:61:1f:62:39:b5:8c:8e:78:33:
c9:41:d5:b8:fe:17:62:e2:9d:b4:80:4e:9c:fd:22:
d5:97:1b:08:e2:d6:32:31:c7:f4:42:7b:aa:9a:98:
d8:02:07:81:25:80:43:00:be:07:37:7f:e5:3f:51:
de:77:e3:c8:04:d8:d2:97:81:11:ab:97:f5:6a:7d:
26:ba:aa:04:e8:95:ea:ab:02:31:a7:ad:9e:19:a7:
8b:ac:a1:97:e3:b9:82:f7:22:36:99:86:f8:7a:05:
ae:f1:7d:ce:70:11:f4:34:11:f4:c3:df:7f:29:31:
19:89:d5:d3:07:f9:52:f1:e1:bf:3a:3c:1e:45:42:
2e:76:92:a0:4f:9c:e4:53:8b:d5:03:fd:62:6e:f6:
2e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A4:56:FE:0F:5E:1A:99:8E:A7:4F:EA:36:55:69:A9:F6:40:B6:DC
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402642.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:fbc0::/29
2a0a:7a00::/29
2a0a:9200::/29
2a0a:a600::/29
Signature Algorithm: sha256WithRSAEncryption
27:81:ed:79:b8:28:e5:ee:72:e3:4b:15:97:ed:7b:7c:b3:54:
35:79:73:80:4e:fa:96:3b:5d:b1:97:0d:14:48:ee:7f:28:c7:
0d:ea:fa:ce:6b:d2:00:26:3a:0f:49:94:90:4b:5e:2b:12:e3:
cf:3f:ae:ca:3b:69:3e:b3:12:f5:9f:84:69:11:8e:2b:3c:b5:
42:26:48:26:b9:c2:22:0c:40:fe:40:be:cf:7a:02:d6:dd:0e:
27:75:d4:2b:b0:9d:d6:83:fc:78:f0:1e:e3:7c:ea:9c:44:21:
09:b2:f8:74:03:d3:03:0a:34:74:af:2e:69:fd:35:ad:7a:78:
28:51:94:f3:cb:af:f0:31:5b:24:84:60:c0:ed:d2:4f:df:6a:
22:e2:53:1e:1e:16:73:de:6c:3c:71:b3:00:ca:2a:9c:d7:63:
b2:85:79:67:5b:2c:6b:3b:62:9e:36:63:d9:7f:e8:ff:44:c3:
0a:28:2d:b6:c5:db:b7:3a:10:f0:85:e1:38:7d:35:27:47:30:
49:ab:00:3c:e5:e8:42:09:c7:7c:b6:cc:0c:b0:a5:8c:12:6c:
d1:a8:ac:c9:ca:e8:01:59:fe:16:d4:df:a5:52:8c:0e:d1:08:
ea:15:fd:71:99:03:09:c1:5d:4a:5e:dd:e6:e8:b4:68:64:50:
b7:d9:03:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 23:19:14 2026 by rpki-client