Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: 5HQtNp9ZqUnLx5q/ptgceC1Pg5Vu8qhvBrNaM97I6eQ=
Subject key identifier: 7B:EC:59:DF:61:0C:7B:CC:BF:EE:8A:37:EE:2A:3F:C5:4C:E4:78:6A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 240FF2A40B7239CB23FEFD90B91A86A1130F4F2A
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402265.roa
Signing time: Tue 22 Sep 2026 12:21:55 +0000
ROA not before: Tue 22 Sep 2026 12:16:55 +0000
ROA not after: Tue 21 Sep 2027 12:21:55 +0000
asID: 402265
IP address blocks: 181.41.212.0/24 maxlen: 24
181.214.213.0/24 maxlen: 24
181.215.84.0/24 maxlen: 24
181.215.176.0/24 maxlen: 24
181.215.185.0/24 maxlen: 24
191.96.99.0/24 maxlen: 24
191.96.143.0/24 maxlen: 24
191.96.145.0/24 maxlen: 24
191.96.157.0/24 maxlen: 24
191.96.182.0/24 maxlen: 24
191.101.135.0/24 maxlen: 24
191.101.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:0f:f2:a4:0b:72:39:cb:23:fe:fd:90:b9:1a:86:a1:13:0f:4f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 22 12:16:55 2026 GMT
Not After : Sep 21 12:21:55 2027 GMT
Subject: CN=7BEC59DF610C7BCCBFEE8A37EE2A3FC54CE4786A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:95:82:27:0c:fd:b8:e3:4c:90:5c:9e:4e:c3:
e9:d0:58:93:3c:2c:6b:9c:2a:a2:e1:72:ef:0b:3a:
09:3e:2d:ca:6e:92:32:ce:16:1d:68:7a:43:15:20:
6c:07:85:2b:ff:f4:bc:2f:d8:53:31:b7:03:f0:5f:
da:8a:ed:cb:39:57:51:7c:5b:be:44:ed:8b:e1:90:
5c:d0:fc:25:e9:ab:27:9a:bf:cb:ee:cb:b1:ee:5d:
4c:f3:4a:45:c6:f5:ca:b8:20:ab:07:90:e7:2b:bd:
4c:89:ae:c1:a5:95:05:66:23:28:31:48:30:78:3b:
ae:c0:d2:7b:22:22:a2:13:cd:4d:02:18:dc:3c:e9:
7a:a4:c5:29:6d:f2:90:83:a8:db:d0:79:2c:d4:3f:
9a:21:ff:25:09:04:8a:cf:6b:e2:d6:88:9e:55:3c:
db:e7:35:50:25:aa:18:93:94:f4:d6:f3:a5:4e:75:
4a:f8:6b:98:13:74:64:e3:a6:90:70:4b:20:cc:f4:
45:c0:b2:6e:58:97:73:b1:6f:79:53:f4:84:46:e7:
92:b3:dd:99:47:67:6d:20:6c:43:0c:d5:7b:42:83:
4b:f7:8a:11:e9:2f:55:e8:9d:89:63:8f:c0:c2:72:
cf:2c:28:a1:47:2b:a3:2d:89:fa:8e:ee:f9:a6:16:
80:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EC:59:DF:61:0C:7B:CC:BF:EE:8A:37:EE:2A:3F:C5:4C:E4:78:6A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.212.0/24
181.214.213.0/24
181.215.84.0/24
181.215.176.0/24
181.215.185.0/24
191.96.99.0/24
191.96.143.0/24
191.96.145.0/24
191.96.157.0/24
191.96.182.0/24
191.101.135.0/24
191.101.209.0/24
Signature Algorithm: sha256WithRSAEncryption
57:14:06:16:9e:79:19:2b:e7:ef:77:24:7e:19:7e:d6:30:ae:
00:05:dd:9c:1d:58:d9:22:7a:5c:12:ca:23:5d:63:3c:fe:fa:
1d:9c:b0:18:7a:f2:33:ba:b8:eb:7d:d5:68:9a:f7:69:a5:1b:
ed:9c:fe:7a:fc:bb:03:d5:d3:5b:01:8d:a1:5c:94:ea:8d:d1:
75:13:17:6d:ab:c4:c4:2a:bc:be:8e:23:28:98:04:91:40:38:
eb:41:fd:a9:b1:bd:c0:51:e3:a7:2a:5e:c8:03:d0:51:46:6f:
d8:cb:3f:89:a8:d2:8b:a6:00:f1:65:88:7b:31:97:b3:13:52:
52:f5:cb:df:5c:58:92:ea:b6:07:b7:d4:0d:9a:0c:5d:5d:79:
20:b0:39:ac:d6:d9:f7:0f:1c:21:d9:06:34:33:c4:6d:dc:30:
52:36:d7:09:d1:5f:d8:d1:01:85:61:49:74:7d:fe:f8:0d:9e:
3f:8a:c3:99:84:b1:13:f6:a0:9b:5f:5d:55:e1:cf:b2:79:7d:
c9:66:a8:9a:04:8b:30:ca:4b:e0:07:b3:12:39:42:97:7a:32:
67:0a:e6:50:7c:71:45:69:ea:03:32:3a:df:81:63:6b:4f:97:
f0:88:1b:5f:34:d4:8c:71:88:19:41:fb:a3:f3:c1:d3:3d:93:
1c:a9:b5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:16:39 2026 by rpki-client