Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS45671.roa
File: AS45671.roa (raw, json)
Hash identifier: fE4y0pGn1fx9N4eM5jTHp2sSGVfVcx6vH125DU1bCn8=
Subject key identifier: 05:1E:C6:6D:EB:2B:12:C8:88:BA:25:55:3E:17:D1:F5:48:41:03:67
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7E87A2FCC0DD7E39D03BADBA249D33635A35F502
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS45671.roa
Signing time: Tue 01 Sep 2026 00:14:16 +0000
ROA not before: Tue 01 Sep 2026 00:09:16 +0000
ROA not after: Tue 31 Aug 2027 00:14:16 +0000
asID: 45671
IP address blocks: 179.61.240.0/24 maxlen: 24
181.214.17.0/24 maxlen: 24
181.214.43.0/24 maxlen: 24
181.214.112.0/24 maxlen: 24
181.214.162.0/24 maxlen: 24
181.214.163.0/24 maxlen: 24
181.214.174.0/24 maxlen: 24
181.215.168.0/24 maxlen: 24
191.101.37.0/24 maxlen: 24
191.101.141.0/24 maxlen: 24
191.101.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:87:a2:fc:c0:dd:7e:39:d0:3b:ad:ba:24:9d:33:63:5a:35:f5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 1 00:09:16 2026 GMT
Not After : Aug 31 00:14:16 2027 GMT
Subject: CN=051EC66DEB2B12C888BA25553E17D1F548410367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d1:6e:32:53:7c:da:51:53:97:be:61:d7:f4:
e4:89:6a:94:08:b0:08:33:c7:74:56:27:e4:a6:43:
3b:c1:c9:5e:e2:77:25:34:46:0e:81:3b:7e:3e:32:
05:e6:cd:28:85:52:af:b0:d2:60:d9:f3:61:30:97:
91:6e:b5:40:78:e1:24:cb:c6:22:4d:f8:31:92:c6:
f4:71:25:47:cf:2f:41:9e:40:b2:f3:04:89:75:83:
ac:89:6b:85:83:1e:79:2e:22:0d:b8:39:6c:ad:78:
7a:e5:65:22:63:e5:ee:96:b3:8b:02:db:84:d7:92:
94:bc:de:24:74:b5:26:85:75:84:f2:ab:0d:a2:e1:
67:b6:be:68:0c:58:d3:a6:c4:ce:7a:6c:80:89:a8:
10:0b:74:09:7f:f1:21:51:4f:f9:3d:7e:9e:8c:6e:
16:a8:4a:d0:a4:49:2d:5e:87:5a:db:38:f4:d3:b9:
7f:cd:db:69:f5:75:43:a9:7a:cd:7e:a9:71:a5:76:
15:c9:ab:e2:c6:ec:79:c1:dd:00:8e:5c:2e:42:63:
9a:67:5d:f8:06:37:30:91:a6:ba:d9:df:77:1c:fa:
07:74:fa:55:67:d4:df:ad:a9:87:72:71:28:69:a4:
8b:ef:d2:d5:d5:52:9d:ff:03:3c:ad:f8:b6:59:ea:
8c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1E:C6:6D:EB:2B:12:C8:88:BA:25:55:3E:17:D1:F5:48:41:03:67
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS45671.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.240.0/24
181.214.17.0/24
181.214.43.0/24
181.214.112.0/24
181.214.162.0/23
181.214.174.0/24
181.215.168.0/24
191.101.37.0/24
191.101.141.0/24
191.101.161.0/24
Signature Algorithm: sha256WithRSAEncryption
06:ee:8d:7e:98:36:26:aa:cf:8e:c9:5c:d6:19:11:b7:c8:b0:
71:44:ba:6c:0c:6a:7e:ad:ea:f7:d8:25:eb:13:13:35:43:9b:
90:07:37:f1:b7:35:5d:ea:e0:c6:e9:e9:d0:23:68:07:13:d2:
37:70:70:63:c7:da:21:56:4e:bc:d0:e5:82:59:4d:49:f5:83:
95:00:cd:00:5c:53:8d:16:35:ae:f7:81:b4:40:c1:2c:38:0c:
db:01:f0:73:77:eb:a5:64:6e:73:54:44:cc:8e:e4:56:af:67:
d1:8a:a5:db:ef:e4:2f:28:1c:27:c0:8d:57:24:f1:37:62:50:
86:1d:4e:03:a1:90:b3:66:92:5e:0d:c3:4a:c0:12:54:34:3b:
13:34:bf:d3:5c:b6:4b:7a:24:bf:37:62:bc:36:7d:6f:15:be:
5a:f3:d5:44:4d:00:7c:e4:dd:ed:65:0c:7f:ae:07:75:9a:ae:
90:c7:e5:13:78:36:d7:4c:d1:c3:54:41:c6:36:44:42:13:22:
ac:32:b6:7c:6d:0c:d7:c8:54:2b:ef:3e:d5:ab:ec:4e:ce:35:
5a:c4:7b:f7:91:52:81:84:ae:d6:c7:ad:4a:f5:29:b3:b7:e9:
11:10:d0:cb:3c:51:4c:ab:da:ed:17:af:b4:12:23:bc:13:d4:
6e:e5:af:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:58:04 2026 by rpki-client