Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS400308.roa
File: AS400308.roa (raw, json)
Hash identifier: U1nV+ygWmE5NyoR/fuNyHnCqcZO9kyPuLHgQav7uuZ8=
Subject key identifier: 51:70:62:2A:82:57:0F:AC:C4:BC:7E:A2:A6:08:1B:60:87:05:10:B0
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 53F7FD1A94F8895CF887FC8D01A7D93F789214A9
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS400308.roa
Signing time: Sun 22 Feb 2026 09:42:19 +0000
ROA not before: Sun 22 Feb 2026 09:37:19 +0000
ROA not after: Sun 21 Feb 2027 09:42:19 +0000
asID: 400308
IP address blocks: 179.61.203.0/24 maxlen: 24
191.96.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 01:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:f7:fd:1a:94:f8:89:5c:f8:87:fc:8d:01:a7:d9:3f:78:92:14:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 22 09:37:19 2026 GMT
Not After : Feb 21 09:42:19 2027 GMT
Subject: CN=5170622A82570FACC4BC7EA2A6081B60870510B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:04:e0:7c:99:84:27:f0:e8:df:f3:97:7a:3d:
1a:0f:6e:e5:03:7b:2a:0b:25:fe:85:b9:fb:dd:de:
e5:8b:1a:ee:fd:26:dc:6b:e5:cf:6e:f1:6b:c8:c2:
f5:98:3b:e6:6e:45:31:4a:43:29:84:3d:c9:2e:94:
17:f2:d4:68:4d:59:79:a5:8d:92:45:41:89:bd:51:
3a:85:f3:cf:f6:74:ef:c7:4e:64:bf:ef:bc:15:f2:
83:76:6d:a6:cc:65:1e:00:14:e0:53:43:a5:5b:a8:
a2:ca:37:72:f5:d1:2c:b7:5c:f9:48:68:40:7f:bb:
41:55:3a:81:b9:90:b8:43:fb:2a:4e:3c:d5:e7:96:
28:68:17:49:71:26:5d:e6:11:bc:db:54:04:3b:60:
cd:ee:24:ff:ed:08:43:d0:a2:28:ce:d7:3f:06:41:
6b:ac:cb:8c:ce:43:a7:6f:ad:b3:e5:3e:37:63:d3:
e4:21:d9:4b:1f:1e:2a:61:9b:59:51:87:2e:c2:63:
e3:b4:44:4c:6a:76:9a:4a:88:f2:9e:91:90:4e:c5:
a0:88:89:4b:ac:37:d2:85:eb:96:65:2a:e3:38:4e:
9e:b5:9c:28:b9:a9:66:4f:9f:94:f1:1e:fa:fd:e1:
51:87:ae:b7:13:16:22:67:71:4d:41:da:7c:9a:1d:
8e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:70:62:2A:82:57:0F:AC:C4:BC:7E:A2:A6:08:1B:60:87:05:10:B0
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS400308.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.203.0/24
191.96.3.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:98:3d:4f:9b:45:a5:80:73:fe:31:34:2d:61:21:4a:f2:13:
65:f9:46:e3:a8:d6:51:95:12:8b:bd:50:d3:a8:c4:de:b1:f2:
74:8c:7b:a8:1a:81:d2:81:86:f4:72:09:f0:fc:b5:70:16:1b:
88:32:fa:6a:60:c6:7e:25:df:ac:6d:d9:9e:f7:d9:ae:fe:6a:
ca:34:84:97:ef:be:ba:75:57:66:15:16:ac:38:14:02:8c:a8:
10:25:fc:62:fc:fa:3d:90:13:cf:21:d7:1a:c7:32:a3:17:c0:
4e:4d:39:ad:13:ab:ca:46:b9:f1:d3:e6:3f:e9:13:08:58:19:
ad:b5:0a:6f:3b:c3:3a:55:98:a1:47:dc:78:27:22:91:b6:ef:
30:e7:4a:6d:1c:34:7b:34:a7:5c:01:fc:1f:18:93:db:1f:dc:
b3:90:ee:12:6c:7c:3b:5a:64:2f:84:4a:6e:6d:14:fe:ab:63:
7b:31:d2:2a:2d:4b:d0:0f:d3:d5:c6:3b:aa:71:ce:a5:c2:a2:
2d:03:78:11:e7:6e:78:45:14:3e:0a:bc:e6:b1:90:05:18:34:
96:55:4b:cb:2a:fc:d2:2e:fa:af:d8:c9:45:bc:b5:01:16:ef:
fd:d9:04:4d:54:11:1b:40:22:d8:3b:52:31:f0:4a:f2:b5:22:
38:f9:ab:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:33:54 2026 by rpki-client