Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402186.roa
File: AS402186.roa (raw, json)
Hash identifier: vqt1Oqe6ULdxmDczv35BRzdmx/RUXAlBUcuMfrlqWO4=
Subject key identifier: A4:80:1C:01:6B:E1:95:55:90:6F:E1:5B:CA:29:F8:1A:E7:0A:3D:C9
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 34F19AB2742CBF5DB7986F024DE6CCCDFB2323AF
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402186.roa
Signing time: Tue 24 Mar 2026 07:35:53 +0000
ROA not before: Tue 24 Mar 2026 07:30:53 +0000
ROA not after: Tue 23 Mar 2027 07:35:53 +0000
asID: 402186
IP address blocks: 179.61.225.0/24 maxlen: 24
179.61.241.0/24 maxlen: 24
191.96.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:f1:9a:b2:74:2c:bf:5d:b7:98:6f:02:4d:e6:cc:cd:fb:23:23:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 24 07:30:53 2026 GMT
Not After : Mar 23 07:35:53 2027 GMT
Subject: CN=A4801C016BE19555906FE15BCA29F81AE70A3DC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:85:82:1a:de:33:75:c2:ac:cf:5c:95:6c:42:
23:1d:9b:5d:3f:61:fe:f0:19:a5:dc:b2:ff:cb:d9:
9d:b2:77:25:2a:4a:cd:57:6a:a3:fb:9b:dd:09:27:
29:6f:cd:87:be:08:ca:97:e6:0b:10:25:14:ee:63:
e3:d2:88:bb:a4:48:fb:12:99:be:9b:83:43:2a:d9:
30:ca:39:92:40:fa:63:bd:8a:42:ed:01:d4:22:91:
12:db:54:51:98:1c:d7:0e:9b:2e:e4:06:a9:3f:26:
83:7b:23:42:12:8e:fc:6e:dc:cf:d4:4c:ae:dd:c8:
70:eb:04:f4:46:13:3e:a0:6e:8e:c8:3c:b9:c7:34:
3c:d3:05:6b:1d:fe:62:45:f1:21:16:04:b2:d6:12:
3f:9f:f0:b5:b1:62:7f:49:85:c0:02:80:18:d4:f5:
d5:8f:bc:ff:81:10:33:8a:dd:24:51:2c:5c:24:b5:
de:63:7f:15:3e:1a:23:ca:37:ae:06:e5:1f:2c:f0:
1c:6e:b2:21:12:0b:c8:de:4b:c2:d7:76:e6:43:09:
a4:7f:41:1f:89:58:6e:86:77:82:3f:d8:9b:d2:ed:
94:4f:59:82:a7:6b:29:7c:06:0e:4b:18:ba:3a:1b:
b0:dd:25:91:f2:fe:f7:96:89:eb:b6:c2:19:57:5b:
8f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:80:1C:01:6B:E1:95:55:90:6F:E1:5B:CA:29:F8:1A:E7:0A:3D:C9
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402186.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.225.0/24
179.61.241.0/24
191.96.13.0/24
Signature Algorithm: sha256WithRSAEncryption
48:a3:5c:52:75:57:09:71:32:b8:df:f4:ef:88:d0:bc:e8:36:
06:bd:e6:4b:4c:0a:da:34:6c:cf:1c:a6:84:6a:da:03:8e:93:
99:2a:db:42:48:ef:de:eb:fe:91:ab:f7:4f:ee:c8:28:0d:4d:
fa:2b:7f:e2:c9:09:27:11:d3:12:f0:d1:6d:5f:15:4c:b9:49:
23:de:0e:8e:05:ba:65:ec:56:c8:ad:3a:22:5f:d9:54:12:1e:
d5:55:4e:03:b7:b5:3f:54:d5:96:fa:46:49:fb:ac:c8:08:09:
1c:bc:14:6b:55:3e:b3:bc:11:fe:31:23:9d:4e:6d:b6:2d:15:
57:f7:f3:d2:f1:c2:ef:87:15:a0:74:50:3a:5c:6a:94:8c:ac:
cd:b0:fd:2a:85:6b:32:ca:d1:49:52:28:53:c8:5f:b0:e3:09:
65:33:c5:be:01:3b:25:e2:3f:d1:c3:94:33:9e:cc:71:ac:06:
c8:cf:ea:c0:fa:91:60:b3:93:e9:17:b4:18:12:a7:92:7f:86:
be:51:3c:5b:a1:c8:f2:dd:4b:7e:92:6e:18:57:3f:3a:f0:4f:
6e:41:6f:67:80:c6:5e:ce:07:65:86:9d:43:17:06:ba:d5:fa:
38:6e:48:51:81:03:5a:fe:e0:16:33:f7:e2:ff:ab:06:58:e8:
47:e2:31:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:00:14 2026 by rpki-client