Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: Vzq1K/0zTHUrR0ICU/DJMu43Nyw1mcQXdGdAOyM2qrw=
Subject key identifier: 2B:A5:5D:88:9A:9D:60:6B:C2:22:EC:82:20:69:CB:87:C4:0C:38:3B
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 43CE250B1A067F28C5239B30918113D8C17C5181
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402265.roa
Signing time: Fri 18 Sep 2026 15:12:49 +0000
ROA not before: Fri 18 Sep 2026 15:07:49 +0000
ROA not after: Fri 17 Sep 2027 15:12:49 +0000
asID: 402265
IP address blocks: 181.41.212.0/24 maxlen: 24
181.214.213.0/24 maxlen: 24
181.215.84.0/24 maxlen: 24
181.215.176.0/24 maxlen: 24
181.215.185.0/24 maxlen: 24
191.96.99.0/24 maxlen: 24
191.96.143.0/24 maxlen: 24
191.96.145.0/24 maxlen: 24
191.96.182.0/24 maxlen: 24
191.101.135.0/24 maxlen: 24
191.101.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:ce:25:0b:1a:06:7f:28:c5:23:9b:30:91:81:13:d8:c1:7c:51:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 18 15:07:49 2026 GMT
Not After : Sep 17 15:12:49 2027 GMT
Subject: CN=2BA55D889A9D606BC222EC822069CB87C40C383B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:13:59:c0:60:ba:27:56:91:a4:43:9d:99:3e:
b8:00:9e:37:33:12:3e:f7:86:bf:4e:39:02:81:d7:
a4:1b:94:03:e8:95:e2:29:a6:8a:38:e5:24:ad:14:
6f:df:16:f9:6b:5f:d7:24:fe:f8:31:22:7d:6a:e5:
b0:c5:a2:54:bd:dd:72:96:bf:f0:59:3f:0f:5c:97:
b4:a9:c9:0f:86:cf:2b:d4:0b:48:a1:b8:50:9f:e0:
51:58:bf:09:02:1d:54:ab:b8:8f:12:e9:a9:9f:20:
4a:13:7e:8d:fa:3e:94:f4:24:b5:1d:23:70:cc:11:
e5:9e:2f:a8:67:d6:a1:07:71:6f:d5:bb:48:da:1c:
2a:3a:cf:ec:d9:df:ff:0c:b2:42:03:e7:fd:3b:fd:
42:9e:fc:d1:5a:9f:d6:6f:48:d0:53:47:c9:2e:f9:
af:99:c4:61:90:2e:cc:a2:ea:23:72:8f:7f:3a:dc:
e7:da:aa:be:26:54:0f:86:4b:23:8d:82:84:3a:fb:
68:14:7b:f0:61:4a:9c:47:21:c6:ab:39:5e:7a:f5:
37:d3:ae:83:a6:8d:e5:d8:6b:ab:a8:78:68:3e:0b:
98:51:c2:44:1b:fa:0e:c2:d0:90:2d:bf:7f:21:3f:
45:4d:fe:d6:31:76:b9:2d:ca:50:15:8f:bb:2e:5c:
af:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A5:5D:88:9A:9D:60:6B:C2:22:EC:82:20:69:CB:87:C4:0C:38:3B
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.212.0/24
181.214.213.0/24
181.215.84.0/24
181.215.176.0/24
181.215.185.0/24
191.96.99.0/24
191.96.143.0/24
191.96.145.0/24
191.96.182.0/24
191.101.135.0/24
191.101.209.0/24
Signature Algorithm: sha256WithRSAEncryption
16:32:4a:c5:32:89:1d:72:8f:d1:4c:eb:73:71:43:cf:86:61:
0a:8e:2d:16:92:1d:a7:f8:f7:dd:55:b9:d8:18:5b:7f:0c:86:
de:b9:33:fc:9f:67:aa:23:b5:3f:77:c1:71:ef:78:80:34:73:
c4:04:6c:d3:1f:65:ba:20:24:33:3e:47:79:58:a8:20:df:e0:
d0:91:a4:e6:27:48:f9:f5:5b:ce:c0:b3:c1:43:cf:0c:33:d6:
e3:80:9a:25:c3:4d:97:22:86:41:01:8c:23:4e:b8:33:5e:27:
20:f8:16:f3:7a:9f:72:c5:b6:c6:4b:b0:35:cc:30:c4:6b:b3:
84:cc:bd:e5:de:63:66:bd:61:7f:ec:73:64:db:28:b3:41:f3:
8d:ff:5f:82:9d:d7:77:09:f1:eb:e6:52:b5:70:99:c5:06:41:
41:b1:35:46:75:3c:bc:45:7a:f5:66:c1:d3:af:67:b2:86:40:
f5:e4:ab:c7:36:30:7c:c5:92:5a:04:84:68:21:72:3a:00:04:
6a:a5:a8:09:e3:da:e2:7d:70:c6:53:fc:7a:92:eb:7f:e2:35:
59:0a:91:ec:ce:70:eb:11:89:fc:96:e1:f2:ec:64:ee:76:a8:
50:a0:64:4a:20:53:6b:b5:9a:1d:86:31:50:80:6f:71:c9:4e:
57:c4:2a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:25:38 2026 by rpki-client