Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS401776.roa
File: AS401776.roa (raw, json)
Hash identifier: UGKZdKRZuvZ6SHW+D2gc/dEVz3AhVweuLU+BI7fAsQI=
Subject key identifier: 8F:38:84:93:AB:39:DA:09:8D:CE:D5:D7:7B:47:00:16:20:4D:A9:42
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 75D980AB86117B3F87D48BF6C1413744F11222B8
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS401776.roa
Signing time: Thu 10 Sep 2026 00:00:16 +0000
ROA not before: Wed 09 Sep 2026 23:55:16 +0000
ROA not after: Thu 09 Sep 2027 00:00:16 +0000
asID: 401776
IP address blocks: 2a0a:9a00::/29 maxlen: 48
2a0a:9e00::/29 maxlen: 48
2a0b:8700::/29 maxlen: 48
2a0d:4c40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:d9:80:ab:86:11:7b:3f:87:d4:8b:f6:c1:41:37:44:f1:12:22:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 9 23:55:16 2026 GMT
Not After : Sep 9 00:00:16 2027 GMT
Subject: CN=8F388493AB39DA098DCED5D77B470016204DA942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:af:58:41:20:55:19:3b:c3:d1:f0:a0:78:d7:
30:ae:db:27:e3:36:67:f5:55:21:e7:46:d0:8e:ff:
9d:cb:b0:3e:a9:8a:47:12:95:2c:ed:0c:9c:e7:30:
71:3b:97:eb:4d:02:3d:87:c0:9a:02:e1:fa:dd:9f:
3e:66:75:5e:c7:5c:13:ec:03:e7:65:90:d7:09:b0:
06:bd:d7:b1:8d:c5:70:f4:76:b7:ce:89:e3:c0:6e:
03:65:4d:87:31:dc:0a:58:82:f1:2d:00:eb:cf:b0:
e4:71:e6:d2:ac:d6:11:ee:19:c6:da:c9:2c:3a:68:
5b:78:df:9a:50:16:22:80:c3:25:ed:88:48:04:1d:
85:c0:ea:fd:9a:6a:a9:60:b5:12:76:e2:83:ef:41:
6d:98:9b:33:b7:d3:6e:56:ae:18:d0:2e:4e:ec:58:
26:dd:54:84:ac:59:41:08:78:37:d8:41:ba:0f:16:
fa:e1:47:37:d0:d0:c2:14:4c:bd:20:17:4b:e6:d1:
69:9e:94:57:56:cc:99:30:36:e0:a6:f9:d7:73:83:
08:21:0b:f5:59:89:ab:c4:f4:21:0c:dc:17:56:b9:
f7:bf:e3:88:e7:61:c0:6e:3d:be:95:fd:46:b0:3c:
4f:ba:f8:69:8b:b8:97:9c:54:40:2a:33:1a:5c:ff:
a6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:38:84:93:AB:39:DA:09:8D:CE:D5:D7:7B:47:00:16:20:4D:A9:42
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS401776.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:9a00::/29
2a0a:9e00::/29
2a0b:8700::/29
2a0d:4c40::/29
Signature Algorithm: sha256WithRSAEncryption
b6:ee:64:14:f3:d3:c1:2b:d5:b7:97:9d:4c:c4:68:ce:5c:2e:
2e:47:00:ac:aa:4a:a4:fe:a3:68:05:40:34:46:64:80:c9:9a:
53:3a:3c:6f:c5:f8:7a:f1:4a:84:f3:bb:a5:43:dd:c9:21:28:
86:f0:0e:88:b4:9d:0a:a7:69:57:3e:7f:82:78:bc:bb:bb:c0:
c2:8f:c4:4b:b1:e0:f8:52:84:4f:0c:bf:02:e2:3e:e5:01:aa:
11:15:bd:2f:d1:8e:b2:11:cc:94:11:b1:58:14:35:47:d2:77:
a7:91:63:9d:40:9e:63:8a:c2:1a:f9:a1:08:e7:51:a6:04:e1:
b6:9c:26:3f:76:35:40:76:de:3c:c3:bf:22:c8:1b:dd:c7:8b:
4c:44:0a:1a:fe:f1:f9:8a:47:7f:92:ec:a8:aa:28:4d:40:c1:
3d:b7:40:63:4f:72:dd:f3:4c:6a:f8:3e:33:99:eb:1a:12:a7:
6b:9d:86:2a:06:35:b0:c6:61:e2:70:f2:f5:ff:cb:7d:60:9d:
da:fd:cf:70:fc:54:75:e6:0f:3b:f3:43:b8:75:0d:1e:e4:bf:
29:75:13:20:90:29:a2:67:16:4d:28:5c:30:a2:e6:26:94:ac:
fb:65:7c:86:fd:29:6a:15:63:df:9d:12:b7:74:58:8f:5a:a7:
cd:70:93:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUddmAq4YRez+H1Iv2wUE3RPESIrgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA5MDkyMzU1MTZaFw0yNzA5MDkwMDAwMTZaMDMxMTAvBgNV
BAMTKDhGMzg4NDkzQUIzOURBMDk4RENFRDVENzdCNDcwMDE2MjA0REE5NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEr1hBIFUZO8PR8KB41zCu2yfj
Nmf1VSHnRtCO/53LsD6pikcSlSztDJznMHE7l+tNAj2HwJoC4frdnz5mdV7HXBPs
A+dlkNcJsAa917GNxXD0drfOiePAbgNlTYcx3ApYgvEtAOvPsORx5tKs1hHuGcba
ySw6aFt435pQFiKAwyXtiEgEHYXA6v2aaqlgtRJ24oPvQW2YmzO3025WrhjQLk7s
WCbdVISsWUEIeDfYQboPFvrhRzfQ0MIUTL0gF0vm0WmelFdWzJkwNuCm+ddzgwgh
C/VZiavE9CEM3BdWufe/44jnYcBuPb6V/UawPE+6+GmLuJecVEAqMxpc/6aPAgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQUjziEk6s52gmNztXXe0cAFiBNqUIwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNDAxNzc2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUDKgqa
AAMFAyoKngADBQMqC4cAAwUDKg1MQDANBgkqhkiG9w0BAQsFAAOCAQEAtu5kFPPT
wSvVt5edTMRozlwuLkcArKpKpP6jaAVANEZkgMmaUzo8b8X4evFKhPO7pUPdySEo
hvAOiLSdCqdpVz5/gni8u7vAwo/ES7Hg+FKETwy/AuI+5QGqERW9L9GOshHMlBGx
WBQ1R9J3p5FjnUCeY4rCGvmhCOdRpgThtpwmP3Y1QHbePMO/Isgb3ceLTEQKGv7x
+YpHf5LsqKooTUDBPbdAY09y3fNMavg+M5nrGhKna52GKgY1sMZh4nDy9f/LfWCd
2v3PcPxUdeYPO/NDuHUNHuS/KXUTIJApomcWTShcMKLmJpSs+2V8hv0pahVj350S
t3RYj1qnzXCTmQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:34:16 2026 by rpki-client