Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS401824.roa
File: AS401824.roa (raw, json)
Hash identifier: Qkk/5Bn2FkgTBJpfOGkLZK8Frag3eJWNiZf4zPWQOUs=
Subject key identifier: 62:86:87:E1:DC:2D:03:F5:22:99:1A:B9:D9:3C:CF:6A:9E:B0:65:52
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1EC68FB90E0C1F88990CA4608A5FD5F18AF08B87
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS401824.roa
Signing time: Sun 19 Jul 2026 15:49:13 +0000
ROA not before: Sun 19 Jul 2026 15:44:13 +0000
ROA not after: Sun 18 Jul 2027 15:49:13 +0000
asID: 401824
IP address blocks: 191.96.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:c6:8f:b9:0e:0c:1f:88:99:0c:a4:60:8a:5f:d5:f1:8a:f0:8b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 19 15:44:13 2026 GMT
Not After : Jul 18 15:49:13 2027 GMT
Subject: CN=628687E1DC2D03F522991AB9D93CCF6A9EB06552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b9:f4:2d:ca:4f:21:10:6c:e9:03:66:78:93:
b8:c2:31:52:3a:9d:ce:d7:cb:f5:ee:11:38:1a:92:
3e:ae:34:27:a4:1d:26:2b:7c:5b:21:fd:67:43:0e:
66:bb:9d:2b:74:f2:cb:11:23:24:c9:75:40:41:93:
63:87:e3:01:02:ff:9a:5d:99:a4:c7:b5:65:da:bc:
64:09:b0:30:4d:76:41:fd:ef:97:58:da:4c:62:e1:
98:e3:f2:ce:60:fd:8c:10:60:f7:8d:e8:55:7f:b3:
9e:c2:59:91:31:1e:c8:2f:51:ca:8b:9c:82:fc:e9:
6a:71:c0:6d:4a:09:6f:d2:00:6d:a8:c2:1f:c4:d6:
67:88:8c:78:cf:3f:bc:94:5b:41:db:e0:84:ef:83:
d8:10:52:9a:7f:63:ea:d1:88:20:4d:02:83:89:11:
e7:1d:ef:e6:5f:0e:7c:d7:32:41:bd:3c:22:ff:48:
c3:47:ba:ff:ef:e0:74:2f:f6:a4:db:c2:1b:09:98:
37:6e:c1:ce:13:3f:b6:ef:3a:b0:ad:a9:5f:e3:0b:
c3:52:05:3d:e2:b0:14:2c:1e:47:ef:d1:c6:10:9b:
2c:6a:a3:3e:64:05:cf:1f:67:99:a0:c5:55:db:1b:
de:ba:cd:e2:38:ec:48:de:9c:6c:89:d1:bf:82:21:
d4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:86:87:E1:DC:2D:03:F5:22:99:1A:B9:D9:3C:CF:6A:9E:B0:65:52
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS401824.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.231.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ca:88:c3:d2:5a:e5:e9:8e:ed:5f:a9:9d:ca:6b:62:5f:dd:
ac:1e:00:f6:26:c7:56:4a:a7:af:c6:3b:89:d5:24:ab:e6:50:
3c:f2:c4:74:a2:7f:74:96:88:39:d2:b3:91:57:85:f1:65:1f:
cf:60:47:8c:11:2b:a8:8b:61:41:e0:b0:46:84:d2:53:e4:50:
55:e6:ce:05:22:49:2a:08:2f:90:05:9a:d1:ae:e7:a0:04:65:
97:34:48:6f:c7:81:06:25:2f:ed:8a:9a:26:56:9c:24:de:72:
6d:b6:af:d1:88:47:09:c5:b6:1a:9f:7d:17:7b:75:b0:c5:c9:
45:9b:ab:1b:4a:a4:aa:5c:7c:50:c4:6c:04:fd:4f:ee:5b:87:
4c:0c:63:51:5f:82:69:5d:3e:ad:71:bd:6b:29:31:d1:28:fd:
04:a0:e2:e7:28:b4:60:5d:f2:7f:e1:6f:26:8d:7e:97:a4:12:
cc:48:88:d5:ed:5b:02:21:24:d1:b6:99:bf:c8:bf:bc:3d:2c:
53:1b:0f:c8:4f:bb:f4:fc:ce:92:96:50:c1:10:34:c6:9e:19:
ad:0e:c1:b0:bb:83:ea:09:c2:c8:af:35:a8:7a:21:cb:2f:4b:
99:2c:9a:cc:16:67:9f:93:f5:12:e4:31:7a:2d:29:0d:3c:25:
2d:87:34:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:55:42 2026 by rpki-client