Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS401819.roa
File: AS401819.roa (raw, json)
Hash identifier: XqchyAXPYV1CIRvesQRhNlIBuBwuu2Re3nayVQ/OLtM=
Subject key identifier: C8:92:76:92:72:16:2A:96:2B:0F:1F:D4:BE:ED:66:B2:48:EA:3C:C6
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 74CAB0C48D72D903329CDE9AF3FD6911581E0D08
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS401819.roa
Signing time: Mon 30 Mar 2026 09:03:02 +0000
ROA not before: Mon 30 Mar 2026 08:58:02 +0000
ROA not after: Mon 29 Mar 2027 09:03:02 +0000
asID: 401819
IP address blocks: 179.61.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:ca:b0:c4:8d:72:d9:03:32:9c:de:9a:f3:fd:69:11:58:1e:0d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 30 08:58:02 2026 GMT
Not After : Mar 29 09:03:02 2027 GMT
Subject: CN=C892769272162A962B0F1FD4BEED66B248EA3CC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0c:32:ac:40:48:03:93:16:1e:93:62:80:04:
8f:e6:d9:5b:46:71:ad:fb:77:1b:8c:00:08:1b:3e:
ad:a9:c4:de:0b:fa:ab:9d:f2:c2:63:4d:fc:c5:d1:
98:37:e0:8b:2a:00:7c:c8:a3:f3:b0:e9:be:d3:c9:
dd:1a:8b:a6:96:3b:75:ba:aa:7d:33:14:05:1e:56:
87:a3:fc:9c:c5:41:b8:b6:bb:42:ce:ee:f9:e6:ef:
b0:40:d8:4f:27:c3:c6:4d:c5:dc:69:09:d5:4c:45:
06:18:8b:a3:da:15:87:95:33:15:32:a8:f4:f6:6f:
7b:f3:c1:07:0f:93:82:32:44:15:a1:9a:c7:26:03:
d3:32:1b:56:e2:89:cd:04:9c:dd:b4:96:e4:0d:e0:
b9:83:62:b2:68:6e:2c:1f:b2:d1:c8:7a:85:4a:1b:
25:d9:93:64:ea:02:22:f2:3a:6d:af:a1:db:5f:87:
b9:41:ec:27:d6:a8:f7:f5:cf:e2:f0:90:5d:08:1b:
20:33:fe:1d:f3:cc:97:d7:12:e7:37:e5:d8:c4:20:
09:8e:49:ee:c6:82:9f:e7:09:bc:5d:28:cc:49:d4:
5b:0f:01:d8:9a:ae:d5:3d:05:61:17:64:5d:20:e3:
cb:fe:49:2e:a7:68:74:a7:3a:46:06:88:25:0b:e1:
19:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:92:76:92:72:16:2A:96:2B:0F:1F:D4:BE:ED:66:B2:48:EA:3C:C6
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS401819.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.207.0/24
Signature Algorithm: sha256WithRSAEncryption
06:e0:44:90:7f:9f:0e:ea:0e:4a:d5:1f:90:46:fe:15:08:6d:
da:90:50:04:30:82:7a:f9:a4:e9:0e:19:a3:49:c8:14:7c:ce:
08:41:35:1a:c4:52:2d:c2:b9:15:b6:c8:81:cb:3e:c8:48:be:
56:01:ef:d7:47:ea:08:7f:6c:d6:78:d6:4b:3a:36:26:d9:0d:
e0:81:52:ac:1f:f2:d5:65:da:79:b7:2d:93:e2:9a:05:b9:52:
c6:5b:01:de:7f:68:ff:17:9a:7a:04:6a:91:42:4c:2f:73:06:
5f:08:0a:88:2d:3e:85:bd:d5:bd:e1:95:4d:8d:f9:b2:d8:bc:
db:5e:34:88:fe:fd:7a:2c:dc:3e:49:38:bf:83:7c:88:c2:37:
47:9d:04:8c:b6:17:e0:71:aa:d3:4f:b7:1d:28:13:fb:56:b3:
c2:69:5c:1c:00:17:7c:5c:cf:8c:72:40:52:a4:bb:89:77:f1:
55:66:5e:d8:c6:e1:f7:ed:12:4d:7f:a3:fe:06:5d:a0:99:eb:
ff:65:4d:49:c9:fe:76:fb:70:d6:e6:d1:3e:32:eb:77:53:24:
40:b3:10:87:b8:d4:a9:92:ec:0c:e0:af:b2:a1:4b:25:7c:ab:
0b:15:a5:40:c1:8f:06:e3:8b:4c:85:9f:6f:3e:da:29:16:72:
8e:0f:8f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:29 2026 by rpki-client