Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402221.roa
File: AS402221.roa (raw, json)
Hash identifier: ViRtxWHsND0c7r3SSg4Rpyrq/mhl/ZHE4BsetHiHvZM=
Subject key identifier: 1E:5C:89:48:C3:F9:D5:FF:D9:2A:AE:75:4A:18:87:95:82:0C:F9:77
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 64E41246B74670BD6A9198B1FCC7DB4142D6388E
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402221.roa
Signing time: Sat 12 Sep 2026 06:25:26 +0000
ROA not before: Sat 12 Sep 2026 06:20:26 +0000
ROA not after: Sat 11 Sep 2027 06:25:26 +0000
asID: 402221
IP address blocks: 191.101.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:e4:12:46:b7:46:70:bd:6a:91:98:b1:fc:c7:db:41:42:d6:38:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 12 06:20:26 2026 GMT
Not After : Sep 11 06:25:26 2027 GMT
Subject: CN=1E5C8948C3F9D5FFD92AAE754A188795820CF977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a9:ae:27:91:8a:5a:2b:a8:49:e1:58:29:40:
d3:e4:44:aa:0b:df:9c:3d:e6:55:1a:71:7b:5c:55:
db:bd:5a:2d:63:f5:b7:20:9f:2f:2d:b0:e2:68:00:
fe:2e:39:8c:94:92:57:0d:cf:28:5f:ac:a2:f7:5b:
2f:bd:d5:ed:43:f0:4e:aa:05:5e:c4:f0:7c:fd:d0:
34:10:3f:0c:fb:3c:a5:a0:8e:a9:b2:d4:01:53:0d:
15:10:b5:ab:c2:d0:53:e6:ee:6c:62:03:25:86:be:
46:d7:c4:53:17:17:51:ae:29:ef:59:a8:0f:02:7f:
e4:61:f6:60:3f:75:3c:50:03:fb:f0:df:47:25:6d:
35:eb:c4:fe:de:83:a2:bc:a2:b6:78:a9:2d:9e:12:
68:94:bf:ed:83:52:ac:ce:46:39:50:08:a1:37:f4:
55:e0:df:43:24:c2:e3:68:40:b2:ea:83:82:23:a4:
9a:6b:c9:17:a9:95:e7:dc:29:4f:5e:92:aa:09:80:
64:93:e0:2a:f9:b3:e5:55:bf:73:f7:fd:40:9f:75:
90:ec:18:17:f6:a7:19:9c:06:1b:72:28:9b:ae:80:
a2:47:98:f6:62:3c:40:3e:9e:25:05:a2:a1:26:b3:
e3:eb:53:df:05:96:1c:9b:e7:b7:f9:40:3c:bd:08:
ee:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5C:89:48:C3:F9:D5:FF:D9:2A:AE:75:4A:18:87:95:82:0C:F9:77
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402221.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.20.0/24
Signature Algorithm: sha256WithRSAEncryption
02:72:6c:f1:3c:ea:6f:0d:54:9e:b4:60:d2:31:da:44:00:56:
74:81:ff:34:b2:fc:58:e8:22:b5:08:b3:94:65:5b:49:34:2f:
94:1f:25:5f:31:f8:26:12:01:06:e7:b1:b2:c2:7f:a5:c1:4a:
7b:43:93:cf:c1:83:85:67:0d:ec:d6:73:c6:53:bb:44:de:46:
7a:eb:2b:88:b7:a4:98:f3:5a:ab:86:c1:83:03:67:e3:91:40:
c7:3f:3b:40:ad:49:78:3d:85:d1:3a:31:63:bf:3c:13:ae:1d:
85:08:53:b0:27:5e:81:99:71:c1:f1:cb:67:95:58:77:7a:a6:
51:78:4b:bb:6b:6b:a2:b1:b2:12:02:74:97:61:6b:16:27:dc:
09:65:f9:0e:1d:fc:a0:ca:ea:00:c1:20:37:27:c1:d2:a5:98:
a5:37:20:09:20:ce:d8:e4:40:6c:5d:a3:95:14:99:70:77:3a:
75:e9:62:c7:e7:8a:e5:79:df:11:ac:25:3d:74:fb:97:f2:0c:
51:94:07:72:4c:8d:06:81:5c:a8:04:44:17:ba:6a:c0:34:de:
f6:df:dc:fe:f9:34:11:23:99:57:ed:bc:b1:20:a5:f7:a2:2c:
f5:8d:b9:54:2a:28:4c:84:15:d8:9f:df:f1:a6:82:15:32:fb:
5e:66:46:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:26:28 2026 by rpki-client