Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402288.roa
File: AS402288.roa (raw, json)
Hash identifier: mY8Do8pT0lSEgyRpzFGr7NhCnEbkAgnX3puwd18FHrU=
Subject key identifier: 44:4C:1A:00:E3:B0:33:2D:E2:3A:70:B2:DC:9D:6D:2C:9C:B2:E8:EF
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 29BBB117354FF31E4E57DDE983306F939CD13312
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402288.roa
Signing time: Thu 15 Oct 2026 06:49:59 +0000
ROA not before: Thu 15 Oct 2026 06:44:59 +0000
ROA not after: Thu 14 Oct 2027 06:49:59 +0000
asID: 402288
IP address blocks: 191.101.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:bb:b1:17:35:4f:f3:1e:4e:57:dd:e9:83:30:6f:93:9c:d1:33:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 15 06:44:59 2026 GMT
Not After : Oct 14 06:49:59 2027 GMT
Subject: CN=444C1A00E3B0332DE23A70B2DC9D6D2C9CB2E8EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:77:d3:35:f8:a1:60:bb:3f:92:eb:dc:b1:71:
0b:25:a9:59:b0:83:79:ca:47:51:99:3d:1c:6d:c2:
6b:ef:f3:0f:eb:0f:b2:1d:f5:6c:ae:ca:8f:58:de:
7a:50:09:29:0e:ea:f8:15:da:01:7b:06:5b:6e:88:
75:7b:7e:bf:4b:e6:09:e3:1d:ac:8c:3c:e7:48:2f:
14:02:ee:2f:bd:8d:3a:b3:9d:72:75:3f:aa:37:ef:
f6:2b:9e:be:2a:10:74:b0:4c:4d:97:fc:ae:a2:10:
e7:43:a4:47:5e:5d:96:b6:33:52:1a:82:4b:87:dd:
95:cd:ec:98:b4:6d:5b:98:b6:8d:f4:28:93:1b:b8:
67:04:7f:5f:6e:7a:ed:f3:47:d2:c5:0d:5f:9f:cf:
18:22:6d:1f:ed:f2:31:e3:23:bf:84:ea:bb:84:1b:
d3:ef:cf:5c:09:b5:03:aa:e4:71:d0:a6:a0:0e:54:
da:2f:e4:2c:4b:aa:a5:cc:69:3a:c8:8a:6b:13:16:
53:44:7b:20:fc:bc:30:a1:d9:68:42:2d:b8:e0:fd:
be:11:51:bf:09:fb:79:db:ff:2a:83:52:45:fb:25:
4f:af:b3:48:e7:92:f6:7c:10:6d:35:d1:33:4a:cc:
8b:cf:16:33:58:09:0b:24:5c:0e:4b:cc:7a:20:0b:
b3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4C:1A:00:E3:B0:33:2D:E2:3A:70:B2:DC:9D:6D:2C:9C:B2:E8:EF
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402288.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.145.0/24
Signature Algorithm: sha256WithRSAEncryption
17:c9:7d:65:a3:95:60:d1:53:9f:b7:8a:a2:8d:79:a8:e7:2a:
ac:58:60:3b:c1:b9:e5:c0:61:26:d4:cd:9b:31:17:2d:e6:5c:
87:25:e0:43:7d:e7:77:3a:36:25:8f:14:02:65:ab:ea:a2:41:
95:f6:d8:93:d6:55:d0:d4:dc:21:f0:e1:9f:38:5b:f8:2f:d0:
62:b7:53:ad:f7:7d:f7:90:94:9d:07:90:60:ca:08:09:25:a5:
25:06:29:0d:e4:fd:f4:58:66:61:c6:8d:2b:ec:26:19:87:28:
dc:80:64:39:bb:9b:b2:4b:9a:3e:15:a0:09:97:3e:86:f8:5e:
0d:ca:08:6a:6a:5b:22:61:21:28:56:ee:22:6d:8b:5c:c0:f7:
bf:65:e7:34:1f:a9:b8:30:4a:64:59:f4:ac:45:e8:52:ed:80:
e1:5f:6d:08:d6:47:b9:98:aa:8c:d3:63:ce:d9:fe:b6:e1:ad:
9e:e1:67:3b:7e:a9:1c:4e:dd:63:f9:ed:38:01:44:03:cb:d9:
7a:00:3e:6f:4a:01:51:2f:4d:6d:14:a1:87:0d:c8:f5:57:37:
a9:30:7c:17:e1:d7:fc:f5:04:bf:54:24:de:9f:a8:fb:bd:a1:
f2:d4:71:a7:da:7c:63:56:e2:b9:1f:31:6b:a1:24:84:04:2a:
10:ef:67:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:54:50 2026 by rpki-client