Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS401776.roa
File: AS401776.roa (raw, json)
Hash identifier: 3Zi1Fh+TpfvMak7XX172g0MusWoDMytKn1vW8K7WK+g=
Subject key identifier: E7:DD:FD:86:00:3B:8D:2D:50:78:BC:D5:9E:16:0B:02:0C:31:F0:96
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 57F43E8AB213C106D265E7B7458CE6D1EA31ABBB
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS401776.roa
Signing time: Wed 13 May 2026 07:44:53 +0000
ROA not before: Wed 13 May 2026 07:39:53 +0000
ROA not after: Wed 12 May 2027 07:44:53 +0000
asID: 401776
IP address blocks: 45.153.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 06:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:f4:3e:8a:b2:13:c1:06:d2:65:e7:b7:45:8c:e6:d1:ea:31:ab:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: May 13 07:39:53 2026 GMT
Not After : May 12 07:44:53 2027 GMT
Subject: CN=E7DDFD86003B8D2D5078BCD59E160B020C31F096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2c:82:12:9b:77:ed:ac:a3:6a:c2:d9:d8:3e:
fa:bf:33:be:02:9f:ea:d1:0f:36:6f:2d:1b:44:7a:
99:90:fb:5b:82:ce:3a:0f:08:30:b0:28:79:56:1b:
31:54:43:81:2e:93:f9:19:01:41:ba:12:84:b9:f1:
34:43:32:64:95:15:aa:bf:9b:a6:b9:86:09:8f:eb:
09:79:27:3d:35:6a:a4:df:3a:3b:86:df:5b:14:d9:
0d:5d:6e:eb:0f:41:73:67:1e:5d:61:ca:5f:0e:bc:
96:9e:ab:3b:cb:c8:30:c5:d5:1c:d8:b8:9a:6e:bc:
60:7a:44:7b:3e:6c:23:ab:ed:2e:89:a7:60:da:a1:
55:b2:60:7f:1f:28:c6:a8:b6:b5:9f:dc:a8:c7:35:
c4:73:37:32:58:e4:6a:a3:96:7f:cf:b2:f7:11:37:
9a:5e:ed:3c:55:18:40:6d:12:8e:92:05:6b:fd:d1:
f9:58:9e:6d:46:52:a3:62:0c:41:e7:0b:cd:70:72:
2b:28:b3:f3:b8:f0:a1:0c:4b:ea:fd:a9:df:3f:f6:
71:87:27:4d:7d:af:44:b5:ee:ed:23:6c:e0:96:73:
42:cb:5f:80:40:65:b8:ba:dd:28:f7:eb:98:c4:ff:
e4:a6:ff:09:65:96:ef:9f:2f:cb:17:bc:6c:9e:b8:
46:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DD:FD:86:00:3B:8D:2D:50:78:BC:D5:9E:16:0B:02:0C:31:F0:96
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS401776.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.5.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:58:3d:8d:66:bb:01:c8:e3:4f:da:18:a1:b5:bc:db:e5:61:
8b:b5:2f:6c:2a:af:29:0f:9a:38:02:11:b7:60:8a:70:21:e7:
19:3d:1f:77:11:8d:6e:2f:44:27:0a:88:12:6f:64:1d:d2:3d:
2a:9d:4a:a7:ef:42:e5:e2:47:6e:05:86:ae:db:bb:c7:84:03:
0b:b1:a2:10:32:f3:0d:af:13:a5:2a:5a:4e:24:42:89:ad:42:
2f:03:43:2d:95:72:8d:4b:b8:3e:f8:b5:67:2d:66:e8:ae:c9:
59:2f:2e:b1:10:aa:6b:26:9f:23:81:42:9b:39:65:57:17:b7:
f3:ee:c3:d9:b1:10:75:7d:c4:35:64:c3:db:90:3d:bf:56:45:
ad:be:a1:94:d9:04:67:d8:58:ad:43:f3:bf:48:dc:28:fb:25:
ae:d5:76:8e:82:0a:f1:bb:51:94:4a:b5:cd:ba:ee:5b:05:57:
f3:32:1d:2c:a7:83:1a:97:1a:32:28:af:26:2a:52:eb:28:49:
ed:0b:9a:90:89:82:63:07:f4:7f:b8:25:b8:c8:af:4a:20:44:
32:75:c9:bf:a5:17:37:57:70:cc:1d:0b:dd:c4:cf:8a:54:e0:
e2:90:b4:0f:95:63:5f:84:1e:f5:40:60:67:26:00:d2:56:84:
0e:ad:96:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:01:42 2026 by rpki-client