Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS153656.roa
File: AS153656.roa (raw, json)
Hash identifier: qmxIgIR6kG7+QRFm5NDaBDz55YMpkPipXCi/bSJk08Y=
Subject key identifier: A3:BE:0F:12:CF:68:67:FE:1E:19:E4:1C:E2:12:8D:83:F0:40:13:EB
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2310B7B6B5169D651811CB53E995BCFC29DFA3FF
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS153656.roa
Signing time: Thu 16 Apr 2026 13:47:05 +0000
ROA not before: Thu 16 Apr 2026 13:42:05 +0000
ROA not after: Thu 15 Apr 2027 13:47:05 +0000
asID: 153656
IP address blocks: 179.61.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:10:b7:b6:b5:16:9d:65:18:11:cb:53:e9:95:bc:fc:29:df:a3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 16 13:42:05 2026 GMT
Not After : Apr 15 13:47:05 2027 GMT
Subject: CN=A3BE0F12CF6867FE1E19E41CE2128D83F04013EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:92:c0:39:66:e8:30:d6:6f:8c:1b:63:3f:36:
79:52:5b:df:48:2c:b4:6b:9c:f0:57:2f:06:3b:49:
75:3d:68:76:d4:48:61:97:5d:57:1a:01:89:c6:0f:
a1:c1:0b:bc:76:0c:f5:05:dd:15:35:76:1d:13:97:
e6:99:5f:db:28:19:8e:46:58:c7:9b:2b:55:1d:19:
69:6c:81:59:81:d7:44:58:3d:d3:8c:7e:fb:8e:e6:
62:4f:e1:73:59:f5:7f:d0:cd:da:7e:40:34:5e:e6:
9f:7a:10:16:e4:c3:31:7b:b3:28:e2:60:96:0b:66:
f8:95:cb:ad:ab:dc:97:d1:ed:fb:a1:0e:3d:de:d8:
2d:5e:56:9f:5a:43:9f:89:b4:bb:61:2b:32:60:ca:
dc:31:5b:7d:2e:87:65:31:52:a6:ce:c8:a4:57:0d:
36:2f:45:f0:13:f3:88:41:82:a8:ce:ab:03:89:82:
35:0c:de:f2:0d:8b:a9:b1:ee:fb:b1:56:29:1b:9d:
af:4a:13:a7:0b:58:75:77:9b:44:43:af:ca:f6:d5:
f2:f5:e5:ee:0d:70:1a:05:77:52:6d:de:ab:98:94:
c1:21:7d:84:4b:95:cf:ce:69:35:65:63:f9:65:92:
15:01:22:d6:89:d6:1d:dd:2e:90:6d:c1:cf:71:af:
ca:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BE:0F:12:CF:68:67:FE:1E:19:E4:1C:E2:12:8D:83:F0:40:13:EB
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS153656.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.182.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:c2:9a:9e:71:02:39:4b:7c:a5:a8:14:f9:1d:ce:42:c7:eb:
b8:b1:34:f4:fc:5b:45:89:76:df:51:ca:91:f0:2c:79:b7:3f:
9a:8b:e5:0a:02:a4:0d:0a:c8:cf:89:93:53:ef:57:e8:39:38:
73:e1:2b:81:23:5c:44:af:6e:d8:8a:98:b4:9c:9e:e4:0a:dd:
69:f6:50:27:e4:25:f9:8b:01:ca:8e:c3:f4:6f:d2:32:85:18:
31:5f:64:d2:46:36:ba:5b:cd:4f:af:57:87:4f:96:e7:1a:62:
01:40:3f:9b:b9:82:41:31:72:d0:6a:f5:90:74:fc:d1:bc:64:
60:1a:85:6d:5f:2c:41:aa:5e:5c:31:12:24:9c:af:4a:e5:bb:
32:2e:7a:c7:b3:82:64:0a:62:07:0f:cf:57:ea:bc:bb:0a:fc:
9f:0d:a5:4d:39:3e:9e:6a:9c:db:a9:29:22:52:ee:bf:b1:06:
1e:35:47:d6:3a:c1:51:e7:4b:c1:4c:e6:c6:8c:bc:cc:a4:9b:
51:28:91:cc:ad:5d:b6:ca:a6:d7:d8:2e:0a:32:ec:55:14:a1:
c0:60:db:5e:46:3c:6a:e7:59:f3:29:64:39:90:4e:48:db:49:
46:67:7d:e1:b5:9f:b4:68:e7:da:64:65:f3:18:33:6d:13:2e:
60:3d:d2:8d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUIxC3trUWnWUYEctT6ZW8/Cnfo/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA0MTYxMzQyMDVaFw0yNzA0MTUxMzQ3MDVaMDMxMTAvBgNV
BAMTKEEzQkUwRjEyQ0Y2ODY3RkUxRTE5RTQxQ0UyMTI4RDgzRjA0MDEzRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRksA5Zugw1m+MG2M/NnlSW99I
LLRrnPBXLwY7SXU9aHbUSGGXXVcaAYnGD6HBC7x2DPUF3RU1dh0Tl+aZX9soGY5G
WMebK1UdGWlsgVmB10RYPdOMfvuO5mJP4XNZ9X/Qzdp+QDRe5p96EBbkwzF7syji
YJYLZviVy62r3JfR7fuhDj3e2C1eVp9aQ5+JtLthKzJgytwxW30uh2UxUqbOyKRX
DTYvRfAT84hBgqjOqwOJgjUM3vINi6mx7vuxVikbna9KE6cLWHV3m0RDr8r21fL1
5e4NcBoFd1Jt3quYlMEhfYRLlc/OaTVlY/llkhUBItaJ1h3dLpBtwc9xr8rjAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUo74PEs9oZ/4eGeQc4hKNg/BAE+swHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTUzNjU2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsz22
MA0GCSqGSIb3DQEBCwUAA4IBAQClwpqecQI5S3ylqBT5Hc5Cx+u4sTT0/FtFiXbf
UcqR8Cx5tz+ai+UKAqQNCsjPiZNT71foOThz4SuBI1xEr27Yipi0nJ7kCt1p9lAn
5CX5iwHKjsP0b9IyhRgxX2TSRja6W81Pr1eHT5bnGmIBQD+buYJBMXLQavWQdPzR
vGRgGoVtXyxBql5cMRIknK9K5bsyLnrHs4JkCmIHD89X6ry7CvyfDaVNOT6eapzb
qSkiUu6/sQYeNUfWOsFR50vBTObGjLzMpJtRKJHMrV22yqbX2C4KMuxVFKHAYNte
Rjxq51nzKWQ5kE5I20lGZ33htZ+0aOfaZGXzGDNtEy5gPdKN
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:37:50 2026 by rpki-client