Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402857.roa
File: AS402857.roa (raw, json)
Hash identifier: PK49/X37PP14zpT/iN4gauMnkZ5XauvamqZT1J5QdIU=
Subject key identifier: DC:B4:62:71:6F:E5:8E:55:FD:79:26:17:46:83:92:7E:42:30:D8:18
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 676894DCA3D9F94E1096BA4073F1A7683090AA7F
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402857.roa
Signing time: Thu 20 Aug 2026 12:01:27 +0000
ROA not before: Thu 20 Aug 2026 11:56:27 +0000
ROA not after: Thu 19 Aug 2027 12:01:27 +0000
asID: 402857
IP address blocks: 179.61.208.0/24 maxlen: 24
181.214.182.0/24 maxlen: 24
181.215.170.0/24 maxlen: 24
191.101.137.0/24 maxlen: 24
191.101.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 18:31:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:68:94:dc:a3:d9:f9:4e:10:96:ba:40:73:f1:a7:68:30:90:aa:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 20 11:56:27 2026 GMT
Not After : Aug 19 12:01:27 2027 GMT
Subject: CN=DCB462716FE58E55FD7926174683927E4230D818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:46:18:ba:ce:85:d7:21:14:22:51:d0:c2:06:
8c:67:05:ee:8c:85:b9:b3:87:e4:f1:3b:f3:0e:01:
5f:0d:84:43:ac:19:4a:54:96:1f:e0:06:49:1e:cf:
ae:5a:29:0a:30:60:8a:a5:c6:78:39:fc:5e:bc:b0:
98:92:a9:34:67:4a:b3:19:3d:db:f3:e0:78:d2:cc:
d3:d6:a9:50:4e:1c:07:94:83:75:2c:fa:dc:b2:f2:
a3:00:f0:f4:bb:0a:93:ba:b6:24:aa:81:dc:f0:d9:
b6:a9:36:25:75:ac:1d:68:7e:bf:9f:1e:05:b2:11:
9a:07:59:52:98:12:b8:8e:0b:10:fe:69:db:7a:4a:
6d:67:6b:fe:54:6d:16:9f:15:ff:f6:4d:0c:ab:c2:
c7:33:d9:8c:d0:8a:54:ab:a6:25:82:e0:ed:e8:02:
5b:c5:93:53:b1:47:23:bf:da:67:fc:3f:c6:cb:e7:
f5:4e:fa:4f:0a:bb:74:2d:4c:ce:6d:ed:21:39:84:
c5:1e:f9:76:ba:c5:99:96:35:09:e1:d8:a0:e6:20:
83:74:e7:d4:65:44:92:6e:b0:51:0f:c7:6b:3a:1a:
52:a2:80:1e:8b:39:de:b6:78:99:fc:89:80:43:d5:
71:f2:47:eb:e3:40:d7:f7:72:c4:e0:9b:4f:97:fb:
2d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B4:62:71:6F:E5:8E:55:FD:79:26:17:46:83:92:7E:42:30:D8:18
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402857.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.208.0/24
181.214.182.0/24
181.215.170.0/24
191.101.137.0/24
191.101.176.0/24
Signature Algorithm: sha256WithRSAEncryption
34:51:4d:d8:86:f7:18:9b:1c:0b:62:c5:b4:7c:1b:e6:bb:ee:
5b:a3:80:98:99:c2:21:83:3a:91:f2:5b:84:61:65:7b:da:33:
2a:6a:aa:00:3d:86:ad:c0:8f:f1:be:33:fb:17:90:7b:71:68:
3c:27:eb:2f:74:32:8b:86:ef:3a:0d:a3:03:af:11:99:57:38:
05:76:11:1b:de:20:02:6f:cb:ee:12:aa:a9:26:71:a7:75:a1:
40:84:d2:a1:62:13:91:a1:38:1a:38:05:93:9b:2b:cb:aa:ec:
72:a9:6f:12:74:32:e8:a3:db:63:4f:55:d2:e8:09:e6:29:ec:
de:2f:a0:88:a1:1f:cf:1f:1a:6f:8b:91:7d:50:a6:85:08:83:
6b:9e:d2:a4:6c:2a:c5:30:f3:aa:9d:27:79:b4:47:7c:31:5a:
44:d1:04:ec:aa:29:9a:65:16:ac:b6:c1:66:64:82:34:4e:0c:
11:66:e0:35:2d:69:b0:92:63:79:70:14:5c:b6:1f:e8:5c:28:
f4:ea:dc:3e:0e:11:d7:b2:de:8f:c2:90:2a:ba:1d:54:08:b2:
76:6e:fe:5f:2a:2f:72:66:2f:90:ac:6d:de:8a:53:15:15:e5:
54:b8:7b:14:c0:e5:03:e8:7c:5c:e3:1b:f3:1d:67:f9:1e:82:
2c:82:6d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:10 2026 by rpki-client