Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS132825.roa
File: AS132825.roa (raw, json)
Hash identifier: F1BbZwZxILlKxmyJtZlTLoc1q3KjKwWBhQ/GUZU75B8=
Subject key identifier: 7E:CF:7F:7F:24:12:6A:21:3C:19:2B:49:D6:F7:E4:0C:18:8D:19:79
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 416EFBCFAF7C27414FA74DFB928712ABA54E4E3F
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS132825.roa
Signing time: Wed 04 Nov 2026 09:49:40 +0000
ROA not before: Wed 04 Nov 2026 09:44:40 +0000
ROA not after: Wed 03 Nov 2027 09:49:40 +0000
asID: 132825
IP address blocks: 181.215.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:53:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:6e:fb:cf:af:7c:27:41:4f:a7:4d:fb:92:87:12:ab:a5:4e:4e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 4 09:44:40 2026 GMT
Not After : Nov 3 09:49:40 2027 GMT
Subject: CN=7ECF7F7F24126A213C192B49D6F7E40C188D1979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2c:15:ad:e2:b7:58:61:cf:f8:7e:c3:75:80:
ba:7d:cc:48:98:2c:85:0f:c9:f7:ee:66:43:83:7a:
66:cd:05:e3:90:a8:b4:6a:54:26:e3:f9:23:ae:d9:
72:20:3f:bf:7e:9b:31:a4:f5:2f:73:1b:7e:a6:4f:
fa:dd:8c:24:45:22:44:d5:51:01:1f:f9:94:1d:b6:
8c:56:8e:0c:40:f3:5c:49:69:ce:ef:da:cb:58:56:
08:f5:c7:d0:0c:f7:c2:aa:0d:26:80:bf:17:4a:b2:
68:6e:97:0a:0d:73:80:6c:01:09:20:ea:7f:08:c2:
42:bd:e4:81:ef:b1:9d:e6:ac:8e:d4:92:26:17:35:
b5:dd:db:1b:e9:c5:6a:dc:aa:a5:3c:fc:a6:3d:d9:
46:72:79:35:34:17:ab:a5:6b:8e:dd:86:a8:4c:dc:
66:91:7f:de:18:be:e4:19:b6:68:cb:b3:a6:e7:25:
41:a1:14:d2:c0:87:dc:e7:05:bf:5b:88:71:cc:9e:
33:26:e1:bd:bf:61:20:58:d4:8a:a0:42:8d:3d:f8:
39:28:43:af:cd:6b:a2:09:b1:12:ca:46:15:1d:35:
73:cd:86:ab:96:16:21:92:3a:4c:79:42:8d:dc:e0:
cb:77:10:34:11:07:50:97:7f:08:9f:0e:9d:1a:ed:
d8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CF:7F:7F:24:12:6A:21:3C:19:2B:49:D6:F7:E4:0C:18:8D:19:79
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS132825.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.252.0/24
Signature Algorithm: sha256WithRSAEncryption
67:0e:65:d9:3f:ad:a3:72:5e:f0:55:9f:3f:12:bc:c3:88:da:
88:4a:d1:29:27:0c:2b:d2:40:f7:b1:37:2f:8d:58:a6:42:21:
e4:85:8e:a2:ae:3e:e0:90:7c:63:91:e5:ae:7b:4d:f3:1e:01:
ef:1d:95:05:d1:b9:76:b9:07:3e:df:92:15:cf:85:b2:62:0b:
db:2d:15:eb:06:7c:4e:ef:ad:74:3d:e1:10:aa:82:38:19:f5:
65:76:e7:b8:39:93:ea:67:40:81:4b:43:0e:d7:e9:98:7e:fc:
1e:23:1a:91:ad:d1:58:7e:f2:19:0c:46:2b:40:12:00:b7:ad:
27:83:f9:01:42:b6:11:1e:74:e2:84:c1:7d:33:b2:64:3f:1b:
ff:b9:bc:b7:ba:fc:aa:91:53:46:a2:f0:db:3c:1e:b6:e7:d1:
88:a1:16:ef:4c:a1:fc:38:61:58:94:0c:15:4d:0d:db:22:08:
fc:ff:68:d8:67:ca:04:d0:d6:83:08:d9:fa:d6:8e:10:9d:bb:
fd:12:91:2a:6c:e5:70:ae:64:8e:0b:3d:cb:71:32:07:c2:3b:
ba:d2:38:c8:f9:38:c3:ad:f4:f9:77:6d:78:5d:14:84:b9:83:
9d:5b:2c:d1:c8:e4:c6:87:97:c8:cb:45:8e:97:03:fd:ce:e7:
69:60:e4:2d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUQW77z698J0FPp037kocSq6VOTj8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjExMDQwOTQ0NDBaFw0yNzExMDMwOTQ5NDBaMDMxMTAvBgNV
BAMTKDdFQ0Y3RjdGMjQxMjZBMjEzQzE5MkI0OUQ2RjdFNDBDMTg4RDE5NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDALBWt4rdYYc/4fsN1gLp9zEiY
LIUPyffuZkODembNBeOQqLRqVCbj+SOu2XIgP79+mzGk9S9zG36mT/rdjCRFIkTV
UQEf+ZQdtoxWjgxA81xJac7v2stYVgj1x9AM98KqDSaAvxdKsmhulwoNc4BsAQkg
6n8IwkK95IHvsZ3mrI7UkiYXNbXd2xvpxWrcqqU8/KY92UZyeTU0F6ula47dhqhM
3GaRf94YvuQZtmjLs6bnJUGhFNLAh9znBb9biHHMnjMm4b2/YSBY1IqgQo09+Dko
Q6/Na6IJsRLKRhUdNXPNhquWFiGSOkx5Qo3c4Mt3EDQRB1CXfwifDp0a7diDAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUfs9/fyQSaiE8GStJ1vfkDBiNGXkwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTMyODI1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtdf8
MA0GCSqGSIb3DQEBCwUAA4IBAQBnDmXZP62jcl7wVZ8/ErzDiNqIStEpJwwr0kD3
sTcvjVimQiHkhY6irj7gkHxjkeWue03zHgHvHZUF0bl2uQc+35IVz4WyYgvbLRXr
BnxO7610PeEQqoI4GfVldue4OZPqZ0CBS0MO1+mYfvweIxqRrdFYfvIZDEYrQBIA
t60ng/kBQrYRHnTihMF9M7JkPxv/uby3uvyqkVNGovDbPB6259GIoRbvTKH8OGFY
lAwVTQ3bIgj8/2jYZ8oE0NaDCNn61o4Qnbv9EpEqbOVwrmSOCz3LcTIHwju60jjI
+TjDrfT5d214XRSEuYOdWyzRyOTGh5fIy0WOlwP9zudpYOQt
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:54:31 2026 by rpki-client