Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402187.roa
File: AS402187.roa (raw, json)
Hash identifier: S8lMfOzAjF0jTymv2ADaCsTzR8vjtTJ3fdPGsBICOXY=
Subject key identifier: 68:EE:E4:E5:C0:C6:6A:8F:B4:F3:C4:57:75:AE:E4:53:01:D9:7C:7D
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1D9C8C45B67670819C63FC6FE7456B5A0E46F423
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402187.roa
Signing time: Tue 24 Mar 2026 07:36:56 +0000
ROA not before: Tue 24 Mar 2026 07:31:56 +0000
ROA not after: Tue 23 Mar 2027 07:36:56 +0000
asID: 402187
IP address blocks: 191.96.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:9c:8c:45:b6:76:70:81:9c:63:fc:6f:e7:45:6b:5a:0e:46:f4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 24 07:31:56 2026 GMT
Not After : Mar 23 07:36:56 2027 GMT
Subject: CN=68EEE4E5C0C66A8FB4F3C45775AEE45301D97C7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:05:00:54:eb:49:bb:77:3f:35:f8:65:30:43:
6a:06:50:3d:22:4c:55:bf:f7:57:9e:f0:c2:c3:4c:
7e:9b:f3:e7:ed:fd:39:35:14:68:67:9a:9d:2a:1c:
c1:80:62:48:04:0a:34:5b:7d:26:57:dd:06:be:0e:
cf:55:95:ec:9a:ea:fc:75:cd:16:d7:8d:b4:5f:36:
c8:7f:00:40:25:6e:47:63:58:34:fa:77:55:99:db:
ce:34:3e:4d:0c:67:55:4f:83:7d:36:63:99:d5:9c:
d1:4b:27:4c:11:c3:4e:d5:7b:d1:58:9c:21:98:0d:
fc:1f:03:39:59:df:50:c6:dd:da:c4:7e:71:40:b8:
22:f9:cc:c2:ae:82:46:8a:03:23:fa:68:aa:9c:f1:
91:ee:33:44:b0:e4:31:6d:92:d8:18:e6:c2:c3:1a:
6f:a5:fb:21:ee:e4:d1:dc:5c:6e:0f:73:7c:74:61:
46:86:38:00:76:74:4c:01:ee:be:47:46:25:c3:89:
79:a2:df:a2:ba:8c:4b:35:cb:a2:6a:35:da:51:94:
b6:1c:ea:00:0c:3f:8c:87:e3:af:7e:0e:00:6b:be:
85:83:19:54:03:0a:8b:f4:d2:65:02:9d:bb:18:39:
f7:e1:74:60:52:ea:03:45:ba:59:e2:cb:2b:c0:53:
2b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EE:E4:E5:C0:C6:6A:8F:B4:F3:C4:57:75:AE:E4:53:01:D9:7C:7D
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402187.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.105.0/24
Signature Algorithm: sha256WithRSAEncryption
13:80:17:c3:dd:86:e5:4c:22:0f:6c:20:26:12:05:47:11:87:
7d:fc:60:3e:5f:70:77:36:1e:31:e4:20:ec:29:30:a5:a8:43:
39:49:b9:7b:e1:e6:ff:24:9f:d2:3d:a8:48:27:0e:b4:db:f5:
ac:d0:b5:7e:7d:d6:39:f3:fa:82:cf:2c:4c:1b:ea:e5:46:87:
ff:9a:e5:62:8b:09:8f:ab:00:68:49:f6:69:8f:ad:54:f9:83:
f6:31:95:1a:d9:0e:0a:a7:fa:d2:f2:3a:2c:35:05:15:5e:63:
dd:05:d0:68:27:3c:24:fb:ad:2e:07:c0:f0:0f:fa:cd:ed:3d:
7a:aa:1a:85:51:4b:14:cc:ff:3e:bc:f9:2a:4e:71:be:6a:00:
f6:22:fe:76:23:79:19:4e:f4:8b:37:2b:ab:67:e2:ef:b6:84:
7c:e9:1f:6a:9d:2f:c4:23:38:13:23:f6:3c:ff:30:c2:af:d1:
c2:f1:8c:86:71:4a:c5:c8:65:36:64:34:79:00:5d:f9:65:ba:
55:ae:f3:6f:89:28:91:de:7d:d8:75:a5:71:ab:b5:95:2e:99:
00:8f:73:43:9c:ac:c4:0e:fc:14:1f:0d:93:08:d7:de:fb:00:
65:2a:eb:56:2d:09:9f:03:f1:fb:42:5c:ea:6c:43:19:f4:2c:
f7:66:5c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:04:28 2026 by rpki-client