Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS263702.roa
File: AS263702.roa (raw, json)
Hash identifier: 46gQvpJutpV0KLb2c0h0uqGFZugjshV+N6IiEkSwMBM=
Subject key identifier: 0E:4C:CE:D4:FB:B8:A3:F4:3E:B1:A1:D7:00:4F:04:83:F4:B1:65:49
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1DFB5FF2E5F2DC9ADD606C2E786DA6C72676490D
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS263702.roa
Signing time: Wed 04 Nov 2026 09:49:39 +0000
ROA not before: Wed 04 Nov 2026 09:44:39 +0000
ROA not after: Wed 03 Nov 2027 09:49:39 +0000
asID: 263702
IP address blocks: 179.61.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:fb:5f:f2:e5:f2:dc:9a:dd:60:6c:2e:78:6d:a6:c7:26:76:49:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 4 09:44:39 2026 GMT
Not After : Nov 3 09:49:39 2027 GMT
Subject: CN=0E4CCED4FBB8A3F43EB1A1D7004F0483F4B16549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f4:8a:69:05:31:b7:3c:ea:65:c7:de:b2:d5:
81:31:c0:6b:4b:c7:a9:2f:13:d1:13:0f:99:9e:f0:
10:02:3b:f3:60:67:cd:5b:5e:fd:7d:f4:8d:27:36:
13:8e:1b:04:24:f1:e6:60:af:6d:8c:e4:b2:41:d6:
b7:61:fb:0e:1a:81:00:17:7e:5f:80:03:78:a4:0a:
fe:c3:97:ba:97:ee:dc:c5:df:4e:75:e2:4f:74:f5:
04:36:9b:33:c3:fb:60:e0:fa:7b:44:09:79:c7:76:
96:a7:4a:4a:cd:e3:20:39:ca:66:1e:54:91:c5:99:
67:a2:4e:1e:35:fb:25:20:c5:37:e8:02:e3:de:c3:
2f:c1:26:23:fe:36:8a:47:b7:6f:88:ff:f7:c3:54:
c8:f4:b8:4b:f9:65:e4:b9:4e:1a:85:dc:ba:8e:72:
03:aa:b5:3c:fa:ea:20:59:2b:3c:93:3f:58:79:7a:
87:bb:ad:27:56:e5:61:65:50:1a:68:93:89:47:9b:
19:be:81:88:a2:a5:66:00:a0:80:3b:6b:ac:3a:e3:
ca:c7:b2:54:6d:7d:2a:28:96:80:7a:ea:32:38:dd:
f1:d6:16:4e:a4:7b:50:d3:3b:c5:93:70:ec:55:79:
89:c9:e3:3d:f6:6a:b9:c0:90:cf:6d:5f:7b:c0:06:
d0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4C:CE:D4:FB:B8:A3:F4:3E:B1:A1:D7:00:4F:04:83:F4:B1:65:49
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS263702.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.200.0/24
Signature Algorithm: sha256WithRSAEncryption
28:1d:6f:73:60:4c:ad:0e:60:96:b0:1a:dd:98:c5:15:2b:02:
6b:bf:31:de:be:39:58:67:e5:45:98:c2:72:92:12:ed:93:03:
26:1d:b9:2f:4a:20:ef:55:60:d0:06:a1:8d:19:4e:84:88:c4:
21:bf:5c:ba:d7:1e:90:f6:70:14:41:3d:e4:f8:17:e6:31:be:
04:4b:cf:28:23:d9:07:e4:05:8b:0f:13:19:93:b5:bc:5a:2a:
86:29:b8:57:20:be:1c:af:ff:a8:77:e1:cc:e9:fb:f7:30:27:
4d:25:b7:d9:6d:43:ec:41:f4:ff:68:12:4e:ad:e9:b0:e0:da:
bd:c4:7d:f1:4e:7c:f3:06:c3:df:ad:19:b3:c8:2a:a3:15:d5:
b2:7e:bf:dd:29:e3:a5:9b:9c:2e:a5:4c:9d:a0:ed:78:f6:17:
e4:3d:b4:9b:98:e2:34:97:92:75:9f:63:9b:62:d8:cb:57:f2:
bc:5d:c1:15:30:7f:d3:25:ca:4d:0c:3a:4d:81:3a:36:2a:eb:
1f:73:e5:ba:d5:5a:fe:46:be:82:45:e3:d7:3a:d0:3d:63:3f:
72:55:0b:bc:2e:7a:ed:92:f2:a6:2a:ab:3a:35:36:e1:a6:60:
a7:69:4e:d2:15:8e:25:45:16:c8:ad:c1:b1:c6:86:20:24:33:
06:af:22:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 15:41:17 2026 by rpki-client