Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402187.roa
File: AS402187.roa (raw, json)
Hash identifier: K4bla5EWPD7jyWXr4y5l4yDeeEKdxxX02Xkd/5+/8KA=
Subject key identifier: 4D:8F:7A:F5:08:AA:22:82:CC:4D:53:2A:E6:6D:D2:FB:15:9B:0E:54
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1D75ADBC174A46747244FD5BC2F862986F33484A
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402187.roa
Signing time: Thu 23 Apr 2026 05:48:17 +0000
ROA not before: Thu 23 Apr 2026 05:43:17 +0000
ROA not after: Thu 22 Apr 2027 05:48:17 +0000
asID: 402187
IP address blocks: 191.96.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:75:ad:bc:17:4a:46:74:72:44:fd:5b:c2:f8:62:98:6f:33:48:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 23 05:43:17 2026 GMT
Not After : Apr 22 05:48:17 2027 GMT
Subject: CN=4D8F7AF508AA2282CC4D532AE66DD2FB159B0E54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:12:91:27:6c:54:1a:ee:b0:a6:51:94:b0:f2:
de:d6:91:eb:d4:bb:fd:29:6e:d5:86:a2:13:ce:fe:
4d:bd:94:ff:f4:4a:95:ef:3c:90:53:15:5f:9a:39:
f9:ee:2f:b3:df:fe:34:4f:93:a5:cf:0a:1b:8c:d4:
17:05:bc:ab:7f:d4:e9:0a:2b:e5:e8:a9:65:7f:0e:
0c:3e:55:b7:da:35:17:91:d8:81:9d:c8:7a:09:f3:
36:13:80:38:77:85:9e:f6:57:81:14:12:2a:d2:f0:
76:b7:89:eb:6a:9a:d9:f9:d9:f1:6f:e1:e2:4f:13:
51:3b:69:36:29:47:29:d0:b3:b6:64:05:8b:bf:ab:
77:d5:22:2a:e8:66:80:97:47:6e:e8:c9:98:a9:6c:
8e:48:95:82:a2:81:46:0c:13:7c:56:55:53:32:99:
93:40:43:a4:03:d7:a7:5a:68:10:cc:f2:43:f4:02:
32:fe:92:4e:b6:65:61:18:41:c1:cb:4b:a5:00:ac:
01:95:67:55:25:ee:25:97:07:5c:97:80:99:ff:a8:
6d:ee:d6:ad:67:e0:fb:f2:d8:2d:85:40:ce:80:bf:
02:7b:98:1a:30:bb:6a:90:94:ec:c5:45:fc:4b:af:
c4:2e:29:6b:57:95:7f:6b:80:b5:2c:5d:68:26:c5:
b8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8F:7A:F5:08:AA:22:82:CC:4D:53:2A:E6:6D:D2:FB:15:9B:0E:54
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402187.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.105.0/24
Signature Algorithm: sha256WithRSAEncryption
89:3d:a7:2e:d5:02:75:2a:39:6b:14:6d:e8:75:ae:91:84:54:
5a:07:b7:fd:ae:a5:a0:03:dd:26:c1:52:97:06:bb:a8:c7:fe:
2a:d4:2f:ef:9f:87:1e:c6:fe:e8:41:5d:25:97:1c:2f:40:0d:
05:49:80:58:2d:d1:e9:f7:dd:a0:30:48:79:84:22:4d:1b:41:
e6:dd:3c:91:f8:f1:fe:46:b9:80:6f:fe:dd:99:68:a2:4c:ec:
ce:42:11:26:80:30:88:cf:27:5e:47:0c:ba:56:e8:f6:b3:05:
ef:f9:6a:03:75:9a:93:5e:74:bc:37:9d:ca:84:d0:3d:5a:55:
7d:30:0e:f3:5a:96:d7:69:11:c3:7d:34:8a:50:16:40:22:68:
78:f9:09:9a:8f:f9:08:a7:41:92:81:ca:39:f3:59:84:0d:4e:
7a:91:e5:a7:87:b4:ef:77:9b:88:49:b1:41:23:21:fb:64:ca:
33:fa:76:7f:3b:d1:be:7a:5c:55:bf:6e:d7:4f:28:fe:b2:6e:
06:a5:aa:2b:9c:82:a4:fe:1d:8a:43:10:d4:8c:c5:77:4c:67:
bf:b2:18:20:19:ed:ef:5e:d8:e2:af:72:9a:74:21:4e:a4:af:
c3:c4:a7:01:a0:4f:6a:4e:07:56:e6:e0:1f:e3:53:2a:5e:74:
2b:e4:34:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:05:06 2026 by rpki-client