Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202051.roa
File: AS202051.roa (raw, json)
Hash identifier: zN2MJE9qL1SGhXk6xmYKAbzY9m8S8q4/y4fuB2UCkX4=
Subject key identifier: E4:5D:92:7B:08:CF:3A:C1:F5:CA:9D:FE:4B:A9:E0:C3:42:6E:8B:F2
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 24D2CA812FB988C308F0868F8B38102077FF67A0
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202051.roa
Signing time: Mon 16 Feb 2026 13:30:48 +0000
ROA not before: Mon 16 Feb 2026 13:25:48 +0000
ROA not after: Mon 15 Feb 2027 13:30:48 +0000
asID: 202051
IP address blocks: 179.61.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 01:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:d2:ca:81:2f:b9:88:c3:08:f0:86:8f:8b:38:10:20:77:ff:67:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 16 13:25:48 2026 GMT
Not After : Feb 15 13:30:48 2027 GMT
Subject: CN=E45D927B08CF3AC1F5CA9DFE4BA9E0C3426E8BF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:41:fd:09:8c:de:cd:87:e2:a9:76:ff:43:0e:
a9:d8:a3:f9:9a:ec:37:e8:01:4f:02:f3:2c:08:a4:
3a:80:bb:2f:ae:ee:e6:42:4c:7e:b1:0e:5e:ef:b9:
77:6b:b1:54:7a:bd:b9:c9:6c:af:87:07:5c:16:ac:
53:43:76:80:fd:82:c3:c1:8b:6f:f4:7e:b3:41:05:
20:cc:83:4e:16:c7:94:6a:2f:b3:6a:ee:1c:f0:42:
89:8b:d9:aa:0e:80:91:7a:0a:ad:6c:12:3b:20:13:
32:6e:94:43:41:a8:86:15:54:78:27:d5:da:93:7d:
86:a6:f1:1f:d5:85:e2:bf:e7:fe:1c:89:8e:90:5a:
22:ad:96:66:8a:29:91:2a:71:6a:25:b3:82:a8:be:
fb:cd:d6:62:b9:8c:c1:1d:86:90:c6:20:b4:9a:ca:
33:2d:43:58:6b:78:f7:43:2b:b7:e1:b4:45:e8:2f:
15:a0:19:6c:f1:c9:5e:0c:78:1b:58:11:e1:e2:0e:
7f:42:9c:da:df:9d:df:30:47:70:2e:dc:8f:0c:9f:
8d:90:0d:de:92:1d:fa:74:ba:5f:3e:26:d7:53:8e:
8b:71:da:cd:92:51:86:d6:6d:ed:9f:72:5a:80:a0:
fa:06:76:9c:82:37:ed:0b:e7:8f:91:18:27:a5:94:
0f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5D:92:7B:08:CF:3A:C1:F5:CA:9D:FE:4B:A9:E0:C3:42:6E:8B:F2
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202051.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.145.0/24
Signature Algorithm: sha256WithRSAEncryption
12:1c:94:25:26:c9:b8:dc:1b:1f:57:15:9a:84:00:eb:31:99:
a3:47:9f:2c:60:c3:88:b9:32:f1:df:45:eb:66:3a:da:c6:20:
60:6d:46:bd:8c:90:fa:40:e8:f9:41:b4:a4:0d:b6:70:96:f0:
e3:d5:f1:11:fa:10:d8:65:ce:31:71:2c:65:72:cd:89:06:e5:
ca:a5:21:e6:17:06:a7:7a:fb:5b:f3:53:c0:4e:41:35:7c:b4:
25:44:59:a9:a2:96:cc:f8:53:65:31:43:61:32:fb:d3:3e:d7:
ab:d5:4d:aa:e5:2d:4b:60:fe:9c:91:42:df:bb:ef:4b:93:cd:
9d:db:c1:72:74:22:42:64:ea:6b:f1:8a:34:0a:9f:47:0a:2d:
d9:03:ac:53:89:ca:d1:b8:e7:85:b0:2a:df:54:06:12:dc:da:
62:5b:ee:4c:87:df:56:32:b4:35:39:52:b2:e4:aa:1a:2b:17:
de:99:d1:f4:4a:ed:b9:16:d1:88:e7:d7:a8:db:57:89:40:df:
90:d1:72:7f:f7:d3:f0:68:87:ed:12:6c:54:a0:4b:25:a3:58:
27:73:dd:e0:1c:08:a7:fb:85:a4:80:c1:e5:ce:15:aa:75:f9:
c7:ba:4a:e2:95:e9:46:38:1b:5c:c2:19:90:d5:a6:4f:ea:01:
c3:a1:e3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:33:53 2026 by rpki-client