Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402288.roa
File: AS402288.roa (raw, json)
Hash identifier: dfSED/0dXz5dhdE8wDlb90o94hVZp8SzWhou/dyvGfQ=
Subject key identifier: AA:34:A2:F5:CD:F4:AE:62:B1:C6:62:81:5B:07:92:DB:90:7E:06:72
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 424F21E833E962ACEB747216C730C004BC1CE9A5
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402288.roa
Signing time: Thu 17 Sep 2026 14:32:55 +0000
ROA not before: Thu 17 Sep 2026 14:27:55 +0000
ROA not after: Thu 16 Sep 2027 14:32:55 +0000
asID: 402288
IP address blocks: 179.61.237.0/24 maxlen: 24
191.101.82.0/24 maxlen: 24
191.101.145.0/24 maxlen: 24
191.101.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:4f:21:e8:33:e9:62:ac:eb:74:72:16:c7:30:c0:04:bc:1c:e9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 17 14:27:55 2026 GMT
Not After : Sep 16 14:32:55 2027 GMT
Subject: CN=AA34A2F5CDF4AE62B1C662815B0792DB907E0672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:03:7d:0f:13:08:a6:22:77:74:f6:e6:7e:8b:
11:7a:9d:5e:2d:0b:ca:69:1f:76:d7:ab:07:2b:77:
a3:59:d0:98:0b:c7:cf:cf:fe:08:fa:41:4b:03:79:
7e:a1:ae:ce:16:17:74:28:95:40:73:b0:cf:4a:9e:
79:9c:e2:34:16:7b:8d:40:a6:cf:d1:92:52:cb:dd:
8d:ae:14:d0:6e:d1:55:f1:39:29:76:28:21:89:56:
6a:74:7d:ee:62:40:6e:90:10:ea:25:84:ed:31:8f:
e3:58:a1:a1:eb:06:10:99:d0:ff:23:0c:59:f7:7a:
b1:1d:35:b6:b5:7a:e7:14:40:a6:f7:f5:06:c2:3e:
dd:46:4b:94:a3:e7:f3:f6:11:43:2d:11:ef:e8:d1:
40:05:ff:ce:cc:74:65:51:fc:ec:61:e4:fd:a6:c4:
83:66:7d:91:90:b6:ca:f2:b3:e0:fa:67:9c:c4:77:
81:ac:3f:6b:d3:a8:b9:a1:8f:39:51:77:f2:c1:73:
07:56:27:21:6f:b4:f3:32:9a:97:15:22:db:91:38:
75:10:15:31:e3:da:98:d3:22:88:c0:69:57:cd:56:
eb:58:be:54:45:c6:39:9d:b5:13:b6:a2:ed:f2:7e:
c8:fd:6d:e9:8f:7e:75:95:b6:8c:2e:49:99:f5:b6:
3b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:34:A2:F5:CD:F4:AE:62:B1:C6:62:81:5B:07:92:DB:90:7E:06:72
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS402288.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.237.0/24
191.101.82.0/24
191.101.145.0/24
191.101.247.0/24
Signature Algorithm: sha256WithRSAEncryption
03:fb:56:41:16:e2:9c:ee:15:5b:06:fb:6e:58:66:70:47:de:
b6:ec:60:67:3f:0f:2d:63:a5:35:7f:71:df:63:77:f9:21:ca:
e9:ef:6d:3b:56:a5:82:ef:49:42:32:5f:6b:1f:a6:0a:9e:45:
14:6b:5d:c8:bd:dd:ac:d7:cb:58:39:d9:01:e2:df:78:c1:7e:
46:31:8f:72:3b:d8:f6:c7:56:af:65:94:28:8e:a8:82:5c:0c:
ec:1d:4c:31:fa:92:d4:8e:5c:b3:13:9a:48:4e:da:7f:18:fe:
4f:ef:78:7e:11:2a:c6:ec:84:66:6a:f9:8f:4d:cf:14:37:cf:
8b:50:01:28:b6:dd:15:5d:7f:f2:d3:42:0d:c8:3d:6b:46:94:
b4:05:b1:40:3b:c1:cb:56:85:51:96:23:42:ea:fc:1c:2d:0d:
1d:4b:27:d4:38:a7:8f:38:29:f0:0c:d2:ba:87:35:db:4a:9f:
d7:8c:db:0f:2f:e4:20:6e:38:1c:83:6b:3f:60:b6:8c:f6:e3:
5b:db:fd:42:29:5c:9d:0c:b0:1d:fb:0c:68:77:91:a0:c9:1c:
28:60:b3:72:04:1b:bf:e1:64:af:50:9e:99:f5:a5:b7:0a:9e:
b7:1f:79:78:65:54:93:a1:63:82:39:0b:ae:2a:90:c6:4a:85:
58:54:e1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:26:24 2026 by rpki-client