Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS201256.roa
File: AS201256.roa (raw, json)
Hash identifier: yo/km2PHT4kEPB3zlZms1BTcY8c6wEyTiAEp8UVZ1ZY=
Subject key identifier: 67:EF:2E:D8:F2:81:7D:4B:A2:6E:4D:D4:7C:6C:35:4D:63:09:61:AD
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3EB9318C2E1579F82E83EC2D3F68B3649CEA1E9D
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS201256.roa
Signing time: Thu 10 Sep 2026 21:00:41 +0000
ROA not before: Thu 10 Sep 2026 20:55:41 +0000
ROA not after: Thu 09 Sep 2027 21:00:41 +0000
asID: 201256
IP address blocks: 179.61.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:b9:31:8c:2e:15:79:f8:2e:83:ec:2d:3f:68:b3:64:9c:ea:1e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 10 20:55:41 2026 GMT
Not After : Sep 9 21:00:41 2027 GMT
Subject: CN=67EF2ED8F2817D4BA26E4DD47C6C354D630961AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a1:a6:45:5f:d1:16:7b:9c:d8:97:92:5f:ef:
de:cc:9e:33:76:99:93:59:a8:45:60:ee:56:07:cb:
de:62:b3:7e:c9:3d:6c:76:22:57:bc:d4:38:4f:c5:
c2:ad:24:09:a7:ef:9b:e5:29:5b:21:37:d7:0f:be:
47:7e:f4:50:d9:76:ae:40:1e:52:15:d8:b1:02:e7:
a1:23:dc:fe:4c:ae:f2:90:28:0f:00:38:2a:ca:8c:
86:8e:e3:93:c5:39:7a:bc:18:50:90:1b:19:14:a0:
5b:f9:42:26:92:b2:88:5a:b1:e7:66:85:bf:16:c7:
94:f0:cf:5b:6c:89:bc:e9:32:1f:61:f1:49:b1:f7:
fd:49:39:5a:48:90:8c:d4:03:65:b7:b4:9b:a0:ec:
0f:be:27:ad:cd:dd:35:a8:d4:e9:b5:ba:2f:63:ed:
62:3a:0a:4d:e3:28:b6:4f:5c:d6:ea:08:ea:fa:df:
0a:e1:e4:4e:0e:41:a1:e7:56:66:60:c0:f8:76:85:
13:3d:70:4b:2c:47:ea:0d:45:2c:3f:21:a8:30:26:
09:bd:0f:c0:33:a2:fe:3a:9d:9d:fe:11:5b:01:11:
81:34:93:a1:ae:c0:bd:24:f2:b9:c5:94:37:40:65:
0f:98:a2:e2:fe:a9:31:ac:63:58:8b:9f:d5:27:da:
7d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EF:2E:D8:F2:81:7D:4B:A2:6E:4D:D4:7C:6C:35:4D:63:09:61:AD
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS201256.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.242.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:db:07:1e:f8:16:e5:7d:9c:ab:fc:10:1a:21:9b:51:63:43:
23:d4:63:c4:30:8a:c2:d5:a0:9d:a2:99:fa:a0:b9:84:b2:12:
0e:2d:83:e8:09:a2:16:dc:6a:cf:40:54:c4:45:f6:86:31:53:
1b:ea:70:bf:ca:80:9e:b1:6e:2a:46:7d:b4:55:64:16:15:55:
aa:11:11:02:4c:99:82:be:8d:f2:c9:b7:71:01:9f:f9:3c:eb:
28:fb:d7:bd:18:36:dc:94:3a:80:e1:b0:5a:79:88:9c:88:ba:
4b:4a:60:5b:05:76:ee:12:91:66:c4:e6:b8:30:08:98:be:bb:
e9:06:ab:3f:c5:78:a7:45:0d:9c:94:81:3c:ab:e0:c9:ec:81:
f4:1d:4c:c6:a8:3c:f4:be:6f:30:40:99:aa:0a:e5:d1:2b:d6:
4f:f7:34:4a:e2:0c:1c:62:ee:43:27:a7:76:85:a7:84:53:0b:
52:5f:10:81:f8:f7:35:e5:50:a3:d4:1b:98:69:fb:c9:51:cd:
61:ad:0c:57:ff:bd:b7:5e:12:1b:20:52:09:5b:8d:e1:7f:a5:
d6:09:e2:bb:73:5f:b0:64:0a:9b:0f:96:56:14:07:c7:7e:ec:
58:4c:34:13:99:06:ad:98:9c:f4:34:83:10:06:f8:31:f7:31:
c2:8a:05:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:25:51 2026 by rpki-client