Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS132335.roa
File: AS132335.roa (raw, json)
Hash identifier: VWpCW06pQCr6xVKjsOYn9vl+35V66yqj/o6hnIglMl8=
Subject key identifier: 90:85:22:9D:B0:B9:D2:18:23:C2:CF:71:19:56:8D:E6:3C:D5:6C:38
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7938DDDABFABB63657AC065E8AB97DD084CF21D9
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS132335.roa
Signing time: Mon 23 Feb 2026 21:55:39 +0000
ROA not before: Mon 23 Feb 2026 21:50:39 +0000
ROA not after: Mon 22 Feb 2027 21:55:39 +0000
asID: 132335
IP address blocks: 181.214.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:38:dd:da:bf:ab:b6:36:57:ac:06:5e:8a:b9:7d:d0:84:cf:21:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 23 21:50:39 2026 GMT
Not After : Feb 22 21:55:39 2027 GMT
Subject: CN=9085229DB0B9D21823C2CF7119568DE63CD56C38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2c:53:fc:85:6c:ba:77:f5:0d:58:82:4e:07:
b6:0e:75:80:91:04:6d:de:bc:4e:50:19:2a:e1:8e:
ec:72:cf:60:cc:8b:64:d3:a5:0d:0b:33:58:5c:aa:
41:03:15:e4:89:49:0f:34:dc:a2:f6:cd:8c:1a:da:
cd:f7:a6:9d:08:f1:13:db:18:bb:1e:6d:7c:90:0c:
3d:bc:38:53:e6:c0:6b:f7:5f:79:22:5a:fd:44:07:
4a:67:66:90:04:9d:0c:60:32:91:94:98:61:cf:2e:
0f:69:3d:d3:dc:49:32:a0:4f:72:c0:46:be:c8:13:
d7:19:2e:66:a1:f4:4a:b1:bc:3a:f5:dc:13:a7:53:
3e:67:42:04:0e:11:88:69:9f:33:49:5b:2e:20:5d:
9d:91:00:63:e0:5b:38:24:51:92:b8:2a:3a:d2:16:
ae:84:16:bf:b0:e2:b7:ff:56:a4:be:27:ea:49:2b:
48:ae:5b:bd:de:eb:80:e4:b3:18:70:66:81:9b:04:
9a:d0:6a:f2:49:98:ea:f5:c0:20:27:44:85:06:ef:
f2:e1:be:e1:97:be:bd:dc:ec:18:cf:7d:55:c7:84:
7c:c4:fe:74:a8:07:01:a0:40:f7:20:b4:f0:a6:38:
45:ec:c7:b3:89:fd:fc:9f:86:6f:c3:cf:c1:59:e4:
d1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:85:22:9D:B0:B9:D2:18:23:C2:CF:71:19:56:8D:E6:3C:D5:6C:38
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS132335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.44.0/24
Signature Algorithm: sha256WithRSAEncryption
06:28:fd:fe:46:cd:95:36:7e:aa:09:e0:0f:19:2c:ee:00:ce:
a3:ed:8f:cb:58:0c:4f:50:3d:9e:98:f5:fb:95:fb:52:07:5f:
4c:3b:19:16:9a:09:cc:c6:1c:2e:cf:e6:75:bb:50:1d:50:79:
fe:f4:f4:77:ba:77:50:51:4b:69:89:37:9b:41:5c:df:a1:61:
74:6f:62:37:61:6c:02:fc:e9:17:e0:b3:a8:78:4a:d2:4b:5b:
89:fa:3a:6a:c3:53:98:d5:0e:b7:06:55:40:ce:e2:eb:3d:50:
29:48:c4:3e:f6:3a:fc:7a:cf:f4:f9:7f:5f:26:a4:cf:0d:e9:
22:7b:56:85:d4:fe:1a:9a:9f:18:38:c8:99:28:8f:8b:27:75:
98:67:9f:4e:5f:1d:f8:30:5f:46:b1:86:a5:25:77:2c:ea:ea:
28:1f:42:75:02:b1:39:ad:8d:b1:3e:9b:04:eb:6f:f4:ee:d0:
f2:42:42:9a:67:f9:1d:0a:60:0b:7d:61:7b:e2:3c:4e:bf:54:
05:e4:d0:71:8c:bb:91:25:a1:40:93:25:8e:62:05:3d:e7:21:
ea:09:df:03:46:68:80:60:ba:06:1e:23:de:39:38:10:7d:27:
05:09:52:f5:6e:d3:32:56:c4:ac:9a:a1:04:aa:91:26:74:80:
72:d3:38:ee
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUeTjd2r+rtjZXrAZeirl90ITPIdkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjAyMjMyMTUwMzlaFw0yNzAyMjIyMTU1MzlaMDMxMTAvBgNV
BAMTKDkwODUyMjlEQjBCOUQyMTgyM0MyQ0Y3MTE5NTY4REU2M0NENTZDMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkLFP8hWy6d/UNWIJOB7YOdYCR
BG3evE5QGSrhjuxyz2DMi2TTpQ0LM1hcqkEDFeSJSQ803KL2zYwa2s33pp0I8RPb
GLsebXyQDD28OFPmwGv3X3kiWv1EB0pnZpAEnQxgMpGUmGHPLg9pPdPcSTKgT3LA
Rr7IE9cZLmah9EqxvDr13BOnUz5nQgQOEYhpnzNJWy4gXZ2RAGPgWzgkUZK4KjrS
Fq6EFr+w4rf/VqS+J+pJK0iuW73e64DksxhwZoGbBJrQavJJmOr1wCAnRIUG7/Lh
vuGXvr3c7BjPfVXHhHzE/nSoBwGgQPcgtPCmOEXsx7OJ/fyfhm/Dz8FZ5NG1AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUkIUinbC50hgjws9xGVaN5jzVbDgwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTMyMzM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtdYs
MA0GCSqGSIb3DQEBCwUAA4IBAQAGKP3+Rs2VNn6qCeAPGSzuAM6j7Y/LWAxPUD2e
mPX7lftSB19MOxkWmgnMxhwuz+Z1u1AdUHn+9PR3undQUUtpiTebQVzfoWF0b2I3
YWwC/OkX4LOoeErSS1uJ+jpqw1OY1Q63BlVAzuLrPVApSMQ+9jr8es/0+X9fJqTP
Dekie1aF1P4amp8YOMiZKI+LJ3WYZ59OXx34MF9GsYalJXcs6uooH0J1ArE5rY2x
PpsE62/07tDyQkKaZ/kdCmALfWF74jxOv1QF5NBxjLuRJaFAkyWOYgU95yHqCd8D
RmiAYLoGHiPeOTgQfScFCVL1btMyVsSsmqEEqpEmdIBy0zju
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:02:48 2026 by rpki-client