Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS154361.roa
File: AS154361.roa (raw, json)
Hash identifier: 4//JnnvGTSxBvGC1pgOgh5Z24LzTwMQPUbEkFnLZCM4=
Subject key identifier: F5:A2:EB:67:41:D3:A3:53:BB:DB:E3:A3:A1:63:71:97:E2:EC:C5:5E
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 249B38E4F0BF47B6278F638F819A1498A3D383CC
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS154361.roa
Signing time: Sat 24 Oct 2026 00:05:54 +0000
ROA not before: Sat 24 Oct 2026 00:00:54 +0000
ROA not after: Sat 23 Oct 2027 00:05:54 +0000
asID: 154361
IP address blocks: 181.41.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:9b:38:e4:f0:bf:47:b6:27:8f:63:8f:81:9a:14:98:a3:d3:83:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 24 00:00:54 2026 GMT
Not After : Oct 23 00:05:54 2027 GMT
Subject: CN=F5A2EB6741D3A353BBDBE3A3A1637197E2ECC55E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:94:94:30:49:8f:9c:25:49:b6:f8:84:dc:24:
da:26:b9:a5:5e:5d:93:09:03:c4:fb:17:fd:7d:54:
26:5a:47:43:90:09:b1:66:ec:ca:da:b1:5d:8c:56:
3c:ce:f9:e1:72:79:71:73:1f:95:d3:66:ee:f2:be:
2d:bc:c9:a4:d3:f3:7c:d5:47:95:34:48:1a:d2:66:
fd:e8:9b:2c:05:26:26:5e:16:3d:6f:4a:a8:e5:8e:
ab:e7:39:3c:43:d3:d1:33:f4:54:45:d9:4a:b5:df:
99:b5:21:41:dc:33:72:dc:6c:21:62:0d:64:27:b3:
ec:44:d8:07:e1:86:58:b7:20:61:bb:8c:26:84:34:
3c:5d:bf:92:36:0e:a7:a0:cb:59:1f:33:1f:ae:e4:
98:ac:2c:5f:d0:4c:9c:d4:ea:84:ee:21:3a:48:78:
c8:ae:2b:24:a1:39:bd:ba:bd:21:ef:c5:9b:0c:d9:
9e:21:33:1b:15:65:27:e7:0f:67:1f:8c:17:3a:d6:
d1:2c:c7:ba:05:6f:80:1e:7d:4d:83:32:2a:1d:28:
5a:07:1e:d7:91:0b:c2:21:bb:2b:5f:c0:1c:fa:a8:
6c:43:0f:14:0b:85:a6:85:24:f6:90:a1:02:ba:be:
70:7c:c6:19:66:0c:bf:05:fc:74:b0:e4:da:a7:24:
c4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A2:EB:67:41:D3:A3:53:BB:DB:E3:A3:A1:63:71:97:E2:EC:C5:5E
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS154361.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.200.0/24
Signature Algorithm: sha256WithRSAEncryption
74:7c:df:b1:cc:c6:ba:2b:aa:38:69:8c:80:bb:33:c9:85:66:
3d:fa:03:8b:fa:bc:22:a2:e6:aa:de:1e:cc:f8:d8:2a:2a:2c:
03:ba:8d:9b:fc:63:53:fa:9e:f4:b3:3c:f9:e3:49:6b:91:a0:
7a:53:6e:fb:ec:d9:a6:51:17:b2:0c:52:36:e0:9f:4f:80:4d:
d5:d1:19:fd:d5:d6:3e:1e:e0:c3:dd:52:3d:1c:75:b6:c3:cd:
6c:cb:06:7a:c5:7a:88:f8:c5:9e:85:7e:44:38:8c:4b:bc:3a:
1b:5d:0d:78:04:64:20:80:dd:3f:f5:ca:3d:34:73:c1:50:04:
36:4a:07:29:b4:49:81:96:2a:0f:67:bc:97:a9:eb:a1:f4:98:
04:02:fa:9c:03:58:61:a5:97:9d:ce:bd:48:b5:66:9a:73:ff:
aa:8d:c3:55:f0:cf:97:64:ad:95:7f:01:af:1c:2f:27:08:e6:
a8:6b:c5:f0:01:62:e1:2b:20:ee:6c:2c:ba:85:99:47:50:76:
6c:39:ed:2c:13:a8:c9:53:dd:6e:52:f4:20:34:04:f1:e7:fe:
8d:e9:07:ba:a7:0b:77:8c:ca:e0:44:13:0b:70:a0:83:fa:2b:
90:96:36:6c:32:13:af:1c:e7:06:d0:82:c1:70:15:88:9c:82:
13:e7:04:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:54:52 2026 by rpki-client