Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS401362.roa
File: AS401362.roa (raw, json)
Hash identifier: GFUy0RguMOJBFxgiSIO0pHGFRVdmtNjxlV/BCJBxKq4=
Subject key identifier: 62:59:C0:63:57:77:F1:AA:B7:E8:FE:DD:82:FE:6D:70:09:F7:71:67
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 47622F2A604F8BB40492125D0BED9BF25AB4DEB1
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS401362.roa
Signing time: Thu 10 Sep 2026 08:16:45 +0000
ROA not before: Thu 10 Sep 2026 08:11:45 +0000
ROA not after: Thu 09 Sep 2027 08:16:45 +0000
asID: 401362
IP address blocks: 185.174.63.0/24 maxlen: 24
191.96.69.0/24 maxlen: 24
191.101.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:62:2f:2a:60:4f:8b:b4:04:92:12:5d:0b:ed:9b:f2:5a:b4:de:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 10 08:11:45 2026 GMT
Not After : Sep 9 08:16:45 2027 GMT
Subject: CN=6259C0635777F1AAB7E8FEDD82FE6D7009F77167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6a:48:12:93:d0:e2:2b:66:c7:da:8f:5f:44:
33:46:61:d2:d2:63:d4:d3:56:ff:c1:47:a0:e7:6a:
c0:6a:5c:a1:bc:f4:34:eb:aa:11:52:6e:94:8b:7d:
f2:41:07:04:ec:af:0d:2e:5b:e5:83:06:f5:1d:c4:
0d:ab:87:f8:18:1c:64:44:ac:ab:67:74:92:68:f1:
3a:09:e8:89:a3:2c:56:98:d6:a5:1b:f0:e4:2a:3a:
28:4e:50:c8:0c:e4:ce:8e:4e:23:66:72:cc:70:2d:
1d:f8:9d:c6:c0:61:ad:e0:a1:96:12:c3:fa:b2:c5:
d5:95:e3:6a:38:18:e0:4a:b2:67:6b:9c:3a:15:57:
5a:2a:3f:e4:d4:d8:71:10:37:22:23:6a:c5:bc:81:
19:b6:8e:1c:39:1d:f6:8c:80:b7:f1:2b:7a:b9:62:
15:5d:01:1a:3a:7a:e9:8c:80:85:c8:9c:3e:55:51:
19:73:55:66:1d:af:0a:04:d7:2f:8b:d2:5b:62:ff:
21:7f:7c:ed:b5:37:2c:0d:fb:b1:e0:0e:d3:c8:de:
69:a1:02:0d:7a:8a:7f:22:be:75:71:db:7e:dd:7b:
6c:d7:ae:15:be:10:1a:c9:81:c5:fb:ed:db:57:34:
b2:86:22:f5:e0:b1:ae:20:79:e7:80:f9:12:16:1f:
60:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:59:C0:63:57:77:F1:AA:B7:E8:FE:DD:82:FE:6D:70:09:F7:71:67
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS401362.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.63.0/24
191.96.69.0/24
191.101.83.0/24
Signature Algorithm: sha256WithRSAEncryption
37:58:08:6d:de:ee:7c:16:6d:a4:78:24:d1:73:54:b1:98:b6:
66:04:17:a9:66:b0:0b:6b:3c:d6:98:21:ef:b7:2e:d6:c0:7e:
87:45:f7:57:f3:08:f8:cd:54:e7:85:8a:1b:f9:33:a7:ba:21:
00:a1:fd:78:28:5d:63:18:72:02:88:07:8d:fc:24:fa:65:15:
21:c9:e3:fb:f5:0c:e3:03:63:7b:4c:ef:73:9b:f8:de:8b:4e:
54:d4:31:f6:27:9b:ad:d5:36:b5:9a:fa:93:a0:f6:1c:5e:7a:
c1:31:39:68:68:c7:73:05:63:e2:df:e2:ac:9c:bf:2e:bd:fa:
63:a9:95:bc:78:76:5f:a8:31:d0:98:bc:c5:39:1b:e7:ae:c9:
25:5f:26:55:73:34:22:3a:50:68:29:20:14:42:d0:a8:7b:d6:
81:34:9c:b3:67:4e:64:dc:b5:f6:5c:0e:38:24:3f:58:e4:93:
00:58:03:fd:75:b9:30:11:ac:ec:ce:f5:cc:30:ea:79:4a:89:
a0:60:af:c8:29:c6:ef:4d:d4:08:27:6e:f8:93:4d:14:36:5e:
bb:66:84:ee:84:2e:de:9f:50:7b:fa:00:4d:74:e8:eb:1f:a8:
b2:5f:df:90:03:e3:d6:9b:d5:55:32:5e:3f:41:83:01:dc:f9:
ce:d9:61:42
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUR2IvKmBPi7QEkhJdC+2b8lq03rEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA5MTAwODExNDVaFw0yNzA5MDkwODE2NDVaMDMxMTAvBgNV
BAMTKDYyNTlDMDYzNTc3N0YxQUFCN0U4RkVERDgyRkU2RDcwMDlGNzcxNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOakgSk9DiK2bH2o9fRDNGYdLS
Y9TTVv/BR6DnasBqXKG89DTrqhFSbpSLffJBBwTsrw0uW+WDBvUdxA2rh/gYHGRE
rKtndJJo8ToJ6ImjLFaY1qUb8OQqOihOUMgM5M6OTiNmcsxwLR34ncbAYa3goZYS
w/qyxdWV42o4GOBKsmdrnDoVV1oqP+TU2HEQNyIjasW8gRm2jhw5HfaMgLfxK3q5
YhVdARo6eumMgIXInD5VURlzVWYdrwoE1y+L0lti/yF/fO21NywN+7HgDtPI3mmh
Ag16in8ivnVx237de2zXrhW+EBrJgcX77dtXNLKGIvXgsa4geeeA+RIWH2DVAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUYlnAY1d38aq36P7dgv5tcAn3cWcwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNDAxMzYyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAua4/
AwQAv2BFAwQAv2VTMA0GCSqGSIb3DQEBCwUAA4IBAQA3WAht3u58Fm2keCTRc1Sx
mLZmBBepZrALazzWmCHvty7WwH6HRfdX8wj4zVTnhYob+TOnuiEAof14KF1jGHIC
iAeN/CT6ZRUhyeP79QzjA2N7TO9zm/jei05U1DH2J5ut1Ta1mvqToPYcXnrBMTlo
aMdzBWPi3+KsnL8uvfpjqZW8eHZfqDHQmLzFORvnrsklXyZVczQiOlBoKSAUQtCo
e9aBNJyzZ05k3LX2XA44JD9Y5JMAWAP9dbkwEazszvXMMOp5SomgYK/IKcbvTdQI
J274k00UNl67ZoTuhC7en1B7+gBNdOjrH6iyX9+QA+PWm9VVMl4/QYMB3PnO2WFC
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:25:46 2026 by rpki-client