Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS268581.roa
File: AS268581.roa (raw, json)
Hash identifier: cvIFMahz5svIYTDE34nkWpDQRCk23p2Kn8ZjemGr2PY=
Subject key identifier: 81:74:38:37:74:ED:4B:82:08:7D:F9:24:99:A0:9D:38:D8:BF:19:63
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7193631B8FA231BA6A4DF58854906F68C3066448
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS268581.roa
Signing time: Mon 14 Sep 2026 13:36:19 +0000
ROA not before: Mon 14 Sep 2026 13:31:19 +0000
ROA not after: Mon 13 Sep 2027 13:36:19 +0000
asID: 268581
IP address blocks: 181.214.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:93:63:1b:8f:a2:31:ba:6a:4d:f5:88:54:90:6f:68:c3:06:64:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 14 13:31:19 2026 GMT
Not After : Sep 13 13:36:19 2027 GMT
Subject: CN=8174383774ED4B82087DF92499A09D38D8BF1963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:da:bb:ed:26:ee:0d:ff:92:72:5c:ca:8d:0c:
7f:d3:14:48:c6:f5:6c:9d:26:03:e0:06:a3:b6:29:
92:2a:7a:23:93:89:59:c9:51:40:8e:9f:06:ff:44:
7d:f9:0c:ea:b2:20:dd:a2:85:87:34:00:41:24:fc:
1d:74:ab:52:bb:90:c3:0e:5e:61:a1:0e:1e:49:21:
a0:26:cf:40:10:21:b6:18:7d:19:13:09:45:a1:c0:
14:48:6c:fa:cc:70:74:28:76:57:f8:81:95:71:ca:
45:20:aa:38:37:c0:30:5c:87:75:22:fe:fb:a5:ac:
8f:4b:bb:75:78:95:75:8a:0c:ef:a4:b4:ff:8e:ba:
ee:fa:81:12:25:f6:0d:f6:f6:10:d9:48:8a:80:fc:
49:4d:af:61:72:2a:25:78:99:6a:76:75:be:71:6c:
83:27:7f:23:7f:72:49:7e:e1:4a:35:15:ec:85:c1:
b2:6c:6f:5d:ca:c3:a3:0d:6b:e9:ca:1c:9d:af:aa:
75:9c:c2:7a:78:3f:3c:54:65:4d:5a:f4:60:80:3d:
a4:c9:0b:11:34:0a:76:e5:84:5c:e3:3e:d4:41:38:
42:ce:b3:d8:c4:44:66:37:b0:65:40:96:54:f5:a6:
d0:f1:cd:e6:22:3d:0a:43:1e:7b:59:35:48:16:e5:
54:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:74:38:37:74:ED:4B:82:08:7D:F9:24:99:A0:9D:38:D8:BF:19:63
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS268581.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.227.0/24
Signature Algorithm: sha256WithRSAEncryption
51:0b:ab:59:9d:1a:7e:92:b0:0a:3b:0b:f7:a5:d9:6b:21:da:
f6:9b:6c:57:49:9a:dc:8d:9e:21:6d:2e:d6:1f:44:f2:eb:22:
1b:78:c1:70:ae:7e:90:02:68:49:1c:67:07:a8:45:12:f5:66:
04:6b:35:90:6a:e0:31:3d:3a:4c:97:67:1a:1b:3b:cb:57:76:
2b:5b:1d:f4:03:1b:61:42:b6:b1:e1:9c:91:2a:6c:62:f3:a7:
05:75:8c:4b:43:01:d4:92:49:51:ae:00:85:06:5a:df:6a:c3:
c8:26:b8:3e:60:6b:93:ff:84:fc:91:7e:b3:3b:58:0d:11:26:
e9:8e:db:68:f7:d7:f1:45:45:7d:6d:34:69:bd:8d:56:e1:4b:
ea:84:15:40:e4:6e:84:f2:4a:b1:78:94:3a:64:29:74:67:d3:
62:1f:d8:a0:74:5d:c8:87:ef:e5:b2:5d:0d:2e:1b:90:73:08:
77:9d:34:62:03:09:5b:be:86:dc:44:14:c5:00:fd:4e:4c:f8:
20:d6:4a:bd:1d:3a:2e:58:e0:02:76:9a:ed:11:dc:a3:4b:83:
d2:38:64:fc:17:62:29:a5:f0:a2:8d:5c:bc:3d:89:dd:ce:2e:
cc:39:5a:62:f6:ca:49:25:37:3d:63:6f:88:d9:56:77:b5:d3:
0a:9c:60:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:26:07 2026 by rpki-client