Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS201320.roa
File: AS201320.roa (raw, json)
Hash identifier: QyEfd5MpvM1/2Q+eWdH2aKhAZ19CcNjA/P/kFKy9gwc=
Subject key identifier: 05:A8:C0:38:C6:7F:E6:DA:7B:1F:92:DD:63:ED:8D:33:60:14:3F:A2
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 463CDB2F8B6616935A1230B013FE8CAB6AAD320A
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS201320.roa
Signing time: Fri 17 Apr 2026 14:47:05 +0000
ROA not before: Fri 17 Apr 2026 14:42:05 +0000
ROA not after: Fri 16 Apr 2027 14:47:05 +0000
asID: 201320
IP address blocks: 191.101.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:3c:db:2f:8b:66:16:93:5a:12:30:b0:13:fe:8c:ab:6a:ad:32:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 17 14:42:05 2026 GMT
Not After : Apr 16 14:47:05 2027 GMT
Subject: CN=05A8C038C67FE6DA7B1F92DD63ED8D3360143FA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:97:2f:da:31:e9:76:f9:db:27:b9:5d:77:4e:
07:e4:ec:b5:70:1a:71:ee:2c:cf:e8:05:93:18:4f:
59:3f:a6:2b:44:c0:db:89:32:30:ad:b0:3c:2e:94:
69:ef:3f:ba:eb:ad:25:b0:a7:4b:1e:4d:91:a8:ac:
8c:2a:da:a0:54:7b:5a:05:a9:31:34:5b:6a:04:15:
55:4e:1c:ba:f7:fb:9f:e6:c0:d6:1f:97:eb:a3:52:
9c:96:fc:75:a1:aa:86:6b:11:00:70:40:ac:dc:93:
93:d5:a1:ef:45:82:ba:fe:f2:6d:0f:fc:58:2e:1f:
41:20:5a:d4:f6:2c:9b:69:c4:4d:2c:69:e6:f2:5a:
44:1e:74:71:78:6a:26:c4:d3:ac:aa:16:90:25:80:
e6:5d:13:cf:8b:a5:bb:54:ec:53:4a:44:a3:45:d1:
10:f0:58:a9:b9:b7:cb:70:94:4c:19:ca:d1:5f:ae:
c1:3a:20:79:fd:09:bf:b9:e9:62:ca:d3:20:fc:d1:
ea:54:a6:50:14:6f:60:3b:b1:14:9c:2e:ad:45:47:
dd:74:8e:f3:ac:60:a1:b9:44:25:08:a5:6b:70:81:
b2:b0:b6:74:2c:9f:34:12:5e:7f:e1:20:da:1b:a6:
fd:e1:df:5b:bb:be:ec:d7:75:31:33:e3:c8:25:71:
6c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A8:C0:38:C6:7F:E6:DA:7B:1F:92:DD:63:ED:8D:33:60:14:3F:A2
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS201320.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.86.0/24
Signature Algorithm: sha256WithRSAEncryption
81:30:ba:1c:e9:80:51:1b:10:a5:63:4a:5a:46:03:24:82:0b:
0e:5c:d0:fd:51:ee:a0:c6:28:8b:62:20:85:dc:19:a5:2c:cd:
27:70:9f:8b:27:ab:d5:70:d1:7d:42:50:23:aa:bd:f6:02:f2:
10:a7:2b:fa:1a:5a:4f:e5:73:50:6e:b9:e1:04:72:33:ba:79:
80:7e:16:37:19:63:5d:fa:42:c5:29:e0:5f:ac:fc:c6:10:11:
3e:d8:42:b7:63:dc:54:03:86:01:4d:aa:0f:bf:5f:f1:6c:8e:
ad:71:6d:a8:b9:22:24:a9:07:45:5f:97:7a:49:88:7e:72:6f:
e1:cd:53:9d:1a:5f:f9:98:22:a1:f8:0a:6c:95:f9:a3:81:1d:
16:f4:9e:21:b0:c8:33:00:ba:db:fb:4a:7d:da:c7:d9:25:28:
3e:70:0a:77:61:b9:68:37:c2:2a:41:40:31:09:76:69:14:4f:
7d:68:73:54:99:95:59:b7:1e:dc:ff:e5:c2:ca:24:90:90:b3:
22:c2:2e:a3:57:3c:e5:2f:a1:50:c5:a0:bc:fe:ea:86:32:0b:
f6:2a:65:23:ea:b1:b4:77:79:4c:1a:ca:0d:ac:b2:c7:57:6f:
cf:98:85:ab:6b:2a:a1:49:53:0e:fa:df:c9:bf:6a:7f:53:e1:
07:5c:97:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:54:36 2026 by rpki-client