Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202673.roa
File: AS202673.roa (raw, json)
Hash identifier: 1nzhO4R6bPSStG1saH/yfmZ97Pyl+1jNLNJx9cBE/0I=
Subject key identifier: D8:88:F8:2F:D9:A8:7B:EF:D1:B1:93:5F:DD:6F:78:84:69:B5:D6:51
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 758CF96CF0982F5730E935570AF3731B9D9836B0
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202673.roa
Signing time: Sat 09 Aug 2025 17:25:27 +0000
ROA not before: Sat 09 Aug 2025 17:20:27 +0000
ROA not after: Sat 08 Aug 2026 17:25:27 +0000
asID: 202673
IP address blocks: 5.181.135.0/24 maxlen: 24
191.101.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:23:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:8c:f9:6c:f0:98:2f:57:30:e9:35:57:0a:f3:73:1b:9d:98:36:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 9 17:20:27 2025 GMT
Not After : Aug 8 17:25:27 2026 GMT
Subject: CN=D888F82FD9A87BEFD1B1935FDD6F788469B5D651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f8:8b:9d:a0:a3:ba:22:fc:60:3b:93:00:a6:
99:bc:8c:5e:05:a8:34:bf:34:c3:e9:73:ba:cb:30:
5e:7b:ce:72:10:dc:7a:d1:4f:a6:b1:8b:91:03:5e:
00:49:96:59:51:42:1e:26:1c:ce:e2:1a:82:87:8f:
18:31:7d:35:c5:e1:64:13:6b:cb:eb:fc:21:b0:a3:
fa:4c:44:44:df:b6:5f:7c:a3:40:93:a6:46:83:6c:
26:5f:ad:8e:b1:a0:02:c0:33:18:37:b9:95:95:13:
e0:b6:d0:39:d5:a1:64:9e:8e:ae:44:3a:b4:44:1d:
44:94:26:6b:8f:fc:4d:35:3d:5d:96:c7:cb:3c:a7:
01:b3:ac:91:a5:46:04:18:4a:cf:d5:f3:34:9e:66:
9d:31:cd:7d:60:7f:1e:9d:be:e2:06:d0:3f:41:be:
8e:af:aa:79:ab:f9:c2:50:4f:18:83:24:12:a1:15:
94:0b:ce:9e:67:e0:a9:4b:10:fe:e1:0d:92:61:06:
f0:11:74:b8:f0:7f:ea:b8:70:a7:71:48:19:2f:1d:
ce:9b:92:02:a7:9a:36:a5:45:61:81:0a:6c:ae:21:
3e:d5:c5:bb:f7:cc:29:40:d3:d2:df:e8:6a:3d:bb:
55:87:5c:67:4c:44:75:ee:07:82:32:e3:47:6b:1a:
7e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:88:F8:2F:D9:A8:7B:EF:D1:B1:93:5F:DD:6F:78:84:69:B5:D6:51
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202673.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.135.0/24
191.101.251.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:cf:0b:fc:28:4f:2b:69:50:7a:51:11:b6:07:80:b9:b0:be:
af:ad:70:dd:e2:fc:a6:b3:e6:5c:48:21:a3:b6:de:0a:5e:d9:
99:eb:9b:ef:8d:4d:8d:e2:91:02:8b:8e:33:21:6d:3d:56:83:
de:e5:05:d5:4c:69:68:d9:c2:b4:00:c2:85:9c:f9:bc:ec:9b:
20:9d:49:cd:d1:87:a7:1f:57:4c:81:13:48:04:65:19:cc:62:
c7:5f:72:ab:35:89:47:0e:6d:a1:7d:c1:fc:87:03:67:90:28:
1b:d5:c8:c3:3a:5f:87:9b:c5:c3:9a:51:31:21:38:3a:b4:ed:
5a:84:10:05:f7:5b:34:00:8e:42:40:f0:0a:23:47:15:b7:1f:
9f:e6:e0:40:55:7b:5c:16:27:f5:d9:ea:ea:35:95:3a:97:4b:
0c:3a:2a:ef:21:bc:f7:a0:cd:a4:a0:c4:9b:e9:fb:56:28:73:
35:11:e5:39:c6:38:5d:de:bd:a8:f3:9f:12:91:61:88:2a:be:
14:63:16:13:3c:db:25:9d:f8:73:38:5d:87:c0:95:d2:a8:72:
cd:94:55:0d:8b:46:5b:3e:cb:3d:c9:99:97:fd:03:b1:90:29:
89:d9:d3:29:ab:fc:64:5f:45:e2:6f:74:86:cf:ef:68:dd:2e:
de:10:ec:e0
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUdYz5bPCYL1cw6TVXCvNzG52YNrAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNTA4MDkxNzIwMjdaFw0yNjA4MDgxNzI1MjdaMDMxMTAvBgNV
BAMTKEQ4ODhGODJGRDlBODdCRUZEMUIxOTM1RkRENkY3ODg0NjlCNUQ2NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI+IudoKO6IvxgO5MAppm8jF4F
qDS/NMPpc7rLMF57znIQ3HrRT6axi5EDXgBJlllRQh4mHM7iGoKHjxgxfTXF4WQT
a8vr/CGwo/pMRETftl98o0CTpkaDbCZfrY6xoALAMxg3uZWVE+C20DnVoWSejq5E
OrREHUSUJmuP/E01PV2Wx8s8pwGzrJGlRgQYSs/V8zSeZp0xzX1gfx6dvuIG0D9B
vo6vqnmr+cJQTxiDJBKhFZQLzp5n4KlLEP7hDZJhBvARdLjwf+q4cKdxSBkvHc6b
kgKnmjalRWGBCmyuIT7Vxbv3zClA09Lf6Go9u1WHXGdMRHXuB4Iy40drGn7TAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQU2Ij4L9moe+/RsZNf3W94hGm11lEwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjAyNjczLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbWH
AwQAv2X7MA0GCSqGSIb3DQEBCwUAA4IBAQBvzwv8KE8raVB6URG2B4C5sL6vrXDd
4vyms+ZcSCGjtt4KXtmZ65vvjU2N4pECi44zIW09VoPe5QXVTGlo2cK0AMKFnPm8
7JsgnUnN0YenH1dMgRNIBGUZzGLHX3KrNYlHDm2hfcH8hwNnkCgb1cjDOl+Hm8XD
mlExITg6tO1ahBAF91s0AI5CQPAKI0cVtx+f5uBAVXtcFif12erqNZU6l0sMOirv
Ibz3oM2koMSb6ftWKHM1EeU5xjhd3r2o858SkWGIKr4UYxYTPNslnfhzOF2HwJXS
qHLNlFUNi0ZbPss9yZmX/QOxkCmJ2dMpq/xkX0Xib3SGz+9o3S7eEOzg
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:51:56 2025 by rpki-client