Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS401362.roa
File: AS401362.roa (raw, json)
Hash identifier: /5G+dNcUJT2GF2/JcJ9B1fnTSS0gS/7RhLpQEjZaYIg=
Subject key identifier: FB:7F:49:39:21:B7:A4:C4:4A:D7:76:75:08:A1:9D:0A:9A:5C:9D:7C
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7DC15607D96C3DF41B9CDD42363A803118926871
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS401362.roa
Signing time: Tue 27 Oct 2026 08:21:02 +0000
ROA not before: Tue 27 Oct 2026 08:16:02 +0000
ROA not after: Tue 26 Oct 2027 08:21:02 +0000
asID: 401362
IP address blocks: 92.119.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:c1:56:07:d9:6c:3d:f4:1b:9c:dd:42:36:3a:80:31:18:92:68:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 27 08:16:02 2026 GMT
Not After : Oct 26 08:21:02 2027 GMT
Subject: CN=FB7F493921B7A4C44AD7767508A19D0A9A5C9D7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4b:aa:80:f4:f6:eb:15:8a:3d:71:5b:cb:3e:
d0:f9:b4:0f:b0:3b:f9:5c:f2:ba:0f:56:38:50:54:
6f:68:31:ad:86:e1:8d:2d:52:8c:a4:01:6b:7f:ed:
9d:b7:99:02:03:36:9d:73:5b:26:91:60:1f:f8:18:
78:51:49:5a:47:eb:2d:84:b2:51:0a:9e:9d:09:bf:
db:04:e4:f6:03:70:99:60:76:72:2a:f0:92:ff:28:
d5:ed:15:25:c2:d4:71:5b:9b:2b:ba:43:eb:06:1f:
aa:26:fc:70:2f:22:54:74:4a:1d:80:af:cc:df:b9:
9b:a3:e9:96:6f:d3:83:8f:85:f4:4e:8c:53:be:9b:
08:d7:57:39:d5:a1:c5:f1:d1:e6:9f:17:f1:11:27:
c9:67:9b:57:d4:ff:0a:71:b9:db:8d:4c:00:f0:96:
af:19:21:3c:e0:b7:ee:65:f8:be:1a:71:b2:25:4f:
b1:f3:4b:5f:06:55:63:af:7b:0a:34:12:2c:75:1d:
9a:60:7a:52:14:1b:38:2a:8c:d0:e3:7e:17:be:bd:
17:cb:2f:5a:98:e3:02:6d:f4:6b:20:b5:ca:1f:7f:
84:1e:48:7d:61:1c:ae:64:f8:7c:fe:eb:db:c2:e9:
08:d7:cb:e7:24:4b:a9:74:74:fb:cb:f8:d0:d0:0a:
46:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7F:49:39:21:B7:A4:C4:4A:D7:76:75:08:A1:9D:0A:9A:5C:9D:7C
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS401362.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.34.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:ab:d5:7e:e1:f3:b1:60:da:e5:77:49:2f:5b:5e:41:77:2a:
b1:2e:3c:84:87:59:d1:c6:23:94:47:d9:c6:cd:d7:7b:25:0a:
74:73:b6:6e:f1:4a:34:20:f3:99:cc:3f:7b:71:a1:f0:be:16:
f7:39:93:d2:13:b9:2e:ea:39:58:24:40:99:2c:9a:e0:0b:a8:
1f:b2:b0:8d:6d:24:03:91:e5:c8:52:5b:81:76:8f:5a:e2:9e:
53:65:96:41:2d:f9:f0:66:72:cc:74:76:a6:8a:4e:fd:6a:40:
e7:77:7c:aa:a0:02:27:c0:a5:ca:e7:a7:9d:4e:0d:64:88:91:
0b:4a:41:48:db:75:2b:c8:3b:99:b5:bb:20:21:dc:ff:0b:61:
58:b1:5e:d4:2d:b9:26:c3:22:63:9c:e2:0b:70:cf:b7:18:5a:
39:8a:72:d5:07:57:77:c3:9d:38:97:3e:8f:68:d2:a3:de:35:
fd:03:8e:fc:9e:e7:90:36:c6:b4:84:fe:b1:83:77:a7:f7:ba:
f9:bf:23:5a:40:24:59:8a:a7:e9:19:98:e7:e4:b0:e3:4b:f3:
98:76:70:0f:70:35:40:97:3b:c9:14:62:fb:96:33:4a:c4:bd:
c9:90:e8:95:01:10:27:6f:b9:b9:ec:95:82:a0:00:e1:a3:07:
02:15:27:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:14:54 2026 by rpki-client