Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402215.roa
File: AS402215.roa (raw, json)
Hash identifier: VWD7pRV9KapO0XxVizCOh5jL1BjQPIntIVyrQZoF5qM=
Subject key identifier: 06:A6:C9:E7:00:67:EC:C8:C5:85:F8:7B:8B:EA:7F:0A:DC:2C:C3:78
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 20C57DA8E22A7FD83FE1F1D0774C03824D65E67D
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402215.roa
Signing time: Thu 16 Apr 2026 06:54:07 +0000
ROA not before: Thu 16 Apr 2026 06:49:07 +0000
ROA not after: Thu 15 Apr 2027 06:54:07 +0000
asID: 402215
IP address blocks: 179.61.207.0/24 maxlen: 24
185.137.95.0/24 maxlen: 24
191.96.6.0/24 maxlen: 24
191.96.65.0/24 maxlen: 24
191.101.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:c5:7d:a8:e2:2a:7f:d8:3f:e1:f1:d0:77:4c:03:82:4d:65:e6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 16 06:49:07 2026 GMT
Not After : Apr 15 06:54:07 2027 GMT
Subject: CN=06A6C9E70067ECC8C585F87B8BEA7F0ADC2CC378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:81:5f:70:71:b1:13:7c:6c:3a:21:e0:02:0a:
f1:86:8c:ae:82:65:b7:47:19:e2:ac:87:6a:66:60:
76:af:02:03:a4:20:68:02:f3:f3:a3:ed:41:46:7b:
cf:43:c8:d7:19:c6:e9:11:47:c6:76:af:36:ab:57:
dd:14:74:21:02:c9:78:df:cf:57:34:89:07:a9:24:
9a:54:48:10:5e:ba:30:a9:8d:b5:51:2b:33:d1:d1:
ef:c0:40:11:18:86:b7:01:28:b2:e3:b8:69:9f:95:
71:2f:af:5e:14:4b:14:54:93:4b:e9:bf:ad:80:88:
c0:56:07:58:d5:ad:69:8a:bb:80:60:70:d6:d1:ef:
7a:59:26:85:00:e1:c1:5e:0e:ce:ff:fa:a3:2f:ec:
04:7e:74:cb:03:51:4d:d1:07:b7:3c:58:b4:69:66:
00:5f:02:e0:9f:da:99:78:72:e0:16:2e:6a:6c:f8:
a9:1a:50:59:c4:df:4f:fc:fd:d5:a1:86:92:9b:76:
aa:7d:73:82:b0:91:f6:14:14:83:06:1d:99:a3:8f:
e0:fb:e4:1c:31:ce:7c:70:38:21:ac:9e:93:89:cb:
f9:7a:b9:a1:61:34:6d:c6:04:a9:09:83:09:63:7c:
9b:1f:6c:d4:97:65:b6:32:0b:35:58:49:0e:a5:4a:
24:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A6:C9:E7:00:67:EC:C8:C5:85:F8:7B:8B:EA:7F:0A:DC:2C:C3:78
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402215.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.207.0/24
185.137.95.0/24
191.96.6.0/24
191.96.65.0/24
191.101.76.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:ef:92:b1:e2:c3:fc:d2:0e:c0:33:46:60:fb:d6:a8:fd:07:
49:ab:98:fa:7d:09:7b:19:28:f5:a7:3f:d7:ac:b8:dc:d1:bf:
c5:f4:78:7d:b8:c0:0e:3d:4a:88:e0:6d:2f:69:54:39:d8:5a:
f1:ae:51:86:0d:d5:26:6e:56:68:f6:9e:49:3f:d6:a7:97:b3:
89:5a:76:24:a6:e9:a1:69:7e:ae:3b:f6:af:0a:26:69:21:85:
a2:ad:8b:41:28:9f:28:3b:be:e9:1e:fc:8e:73:66:c2:e7:92:
b7:ee:20:cf:4f:88:a8:4e:a5:d4:b9:36:00:ab:e0:69:16:9d:
06:ba:d6:b0:90:7a:4b:5e:3b:7d:34:c9:e4:b2:97:04:24:80:
52:78:87:43:24:4b:64:7f:de:37:f2:6b:14:61:da:7c:41:d4:
f5:5b:44:41:5a:cd:f9:09:2d:57:56:cb:3d:92:07:48:8d:39:
0f:46:f1:e3:f9:ea:bc:64:9b:67:d9:ec:a4:cd:8c:3b:11:06:
31:e7:89:90:13:ae:11:fe:cb:a8:49:9d:ca:1e:b6:a8:14:82:
48:96:93:87:89:cc:4a:17:17:fc:da:89:65:ae:d8:73:f0:df:
74:26:3b:4a:c7:92:89:6b:bb:e8:24:6e:40:f7:00:a6:1e:96:
44:c7:1f:cd
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgIUIMV9qOIqf9g/4fHQd0wDgk1l5n0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA0MTYwNjQ5MDdaFw0yNzA0MTUwNjU0MDdaMDMxMTAvBgNV
BAMTKDA2QTZDOUU3MDA2N0VDQzhDNTg1Rjg3QjhCRUE3RjBBREMyQ0MzNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCgV9wcbETfGw6IeACCvGGjK6C
ZbdHGeKsh2pmYHavAgOkIGgC8/Oj7UFGe89DyNcZxukRR8Z2rzarV90UdCECyXjf
z1c0iQepJJpUSBBeujCpjbVRKzPR0e/AQBEYhrcBKLLjuGmflXEvr14USxRUk0vp
v62AiMBWB1jVrWmKu4BgcNbR73pZJoUA4cFeDs7/+qMv7AR+dMsDUU3RB7c8WLRp
ZgBfAuCf2pl4cuAWLmps+KkaUFnE30/8/dWhhpKbdqp9c4KwkfYUFIMGHZmjj+D7
5BwxznxwOCGsnpOJy/l6uaFhNG3GBKkJgwljfJsfbNSXZbYyCzVYSQ6lSiRpAgMB
AAGjggIiMIICHjAdBgNVHQ4EFgQUBqbJ5wBn7MjFhfh7i+p/Ctwsw3gwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNDAyMjE1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAsz3P
AwQAuYlfAwQAv2AGAwQAv2BBAwQAv2VMMA0GCSqGSIb3DQEBCwUAA4IBAQAO75Kx
4sP80g7AM0Zg+9ao/QdJq5j6fQl7GSj1pz/XrLjc0b/F9Hh9uMAOPUqI4G0vaVQ5
2FrxrlGGDdUmblZo9p5JP9anl7OJWnYkpumhaX6uO/avCiZpIYWirYtBKJ8oO77p
HvyOc2bC55K37iDPT4ioTqXUuTYAq+BpFp0GutawkHpLXjt9NMnkspcEJIBSeIdD
JEtkf9438msUYdp8QdT1W0RBWs35CS1XVss9kgdIjTkPRvHj+eq8ZJtn2eykzYw7
EQYx54mQE64R/suoSZ3KHraoFIJIlpOHicxKFxf82ollrthz8N90JjtKx5KJa7vo
JG5A9wCmHpZExx/N
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:27 2026 by rpki-client