Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS400040.roa
File: AS400040.roa (raw, json)
Hash identifier: IAnaICKoVK+OE1V1YNsxCnR2JhUwvwji4DsX3gDLiJw=
Subject key identifier: 5C:ED:97:0C:BD:3F:CA:3F:77:97:EF:33:7C:52:36:81:68:62:AD:10
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3BBA81E89157504F3347060EB7F9A449F2A763F2
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS400040.roa
Signing time: Fri 05 Jun 2026 00:01:26 +0000
ROA not before: Thu 04 Jun 2026 23:56:26 +0000
ROA not after: Fri 04 Jun 2027 00:01:26 +0000
asID: 400040
IP address blocks: 181.214.84.0/24 maxlen: 24
191.96.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:ba:81:e8:91:57:50:4f:33:47:06:0e:b7:f9:a4:49:f2:a7:63:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 4 23:56:26 2026 GMT
Not After : Jun 4 00:01:26 2027 GMT
Subject: CN=5CED970CBD3FCA3F7797EF337C5236816862AD10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8e:cb:42:fc:65:ae:35:91:7f:ad:4b:f2:03:
74:e3:5a:dd:b1:5e:cf:f6:75:80:24:8f:0f:3d:14:
ab:14:b4:b4:2d:33:81:cc:66:74:92:4f:c6:49:b9:
3f:90:da:4f:c2:d5:df:92:c9:1a:15:ca:09:3e:ce:
92:01:4b:a8:77:83:25:30:2f:29:01:94:16:16:79:
29:bb:26:9b:c4:a1:88:f4:59:7c:3b:0e:8d:b5:ac:
7d:96:22:4c:bc:1f:fa:0c:16:1f:ed:ff:5a:79:5c:
66:69:5d:05:b5:48:09:9b:00:7d:2d:e1:18:a4:8c:
a5:76:c8:32:6b:68:f6:04:8e:7b:cd:ce:c9:da:01:
4e:94:81:62:06:b4:88:b5:73:44:89:0c:eb:a5:85:
f5:be:0a:c5:a3:45:57:f3:44:cb:f4:a6:21:c5:85:
67:d2:db:72:87:9c:99:20:51:17:e6:80:5c:4d:80:
78:b1:e5:ac:00:1c:0c:e2:f4:b5:13:57:a6:c2:53:
3e:3b:59:b1:42:de:1f:39:75:74:58:b5:3f:1f:18:
34:d5:2f:54:0b:05:c0:10:37:e0:67:5c:5f:f8:6f:
64:d2:03:44:61:3e:fb:16:90:71:79:1d:26:f9:d7:
11:dd:0b:82:02:69:38:63:50:d8:b0:ae:99:24:da:
b8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:ED:97:0C:BD:3F:CA:3F:77:97:EF:33:7C:52:36:81:68:62:AD:10
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS400040.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.84.0/24
191.96.223.0/24
Signature Algorithm: sha256WithRSAEncryption
00:26:ea:39:10:63:dd:53:03:95:6e:4f:54:57:aa:2d:27:3a:
54:73:c3:d3:bd:0f:33:65:da:d1:4a:da:74:1e:0c:9c:85:8a:
df:c1:c9:6c:8d:94:1a:a4:59:c2:b9:41:3f:3b:49:cb:b5:f3:
07:69:5a:1c:36:a0:f6:15:cb:09:07:4e:cf:90:f3:b3:7b:f6:
9f:2d:5b:e4:6f:55:94:55:7e:8d:ed:83:6a:c4:20:e9:29:49:
9d:10:24:8d:d0:7d:36:22:04:23:17:40:b4:de:85:49:9e:a3:
99:86:d5:fc:7f:8b:90:af:1f:4a:49:94:55:7d:ac:ad:9a:e7:
5b:8c:6c:cf:de:b2:fb:3c:c3:79:82:40:86:d6:30:87:8d:70:
74:06:99:89:f7:8e:36:cc:7b:62:fd:f0:04:76:8f:01:94:d4:
51:ba:bc:0f:b1:f6:4c:37:a8:23:92:e9:31:81:43:34:da:59:
8d:26:e1:ab:31:33:58:b9:87:10:e0:89:01:c2:fa:a1:7c:b0:
48:eb:ca:ef:48:d7:9b:71:a2:a1:e8:77:bc:4b:96:f7:6f:1a:
2a:c4:ce:b9:3b:8c:37:e4:6b:d7:83:eb:d3:6b:df:aa:91:c2:
fc:15:16:eb:fb:95:38:d9:f6:ed:d7:7c:e4:18:10:87:b9:d2:
2e:7f:4f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:03:00 2026 by rpki-client