Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS7346.roa
File: AS7346.roa (raw, json)
Hash identifier: unZ+1BG9/cxDudxvkD5ex+G6NVFMj820F7TtQ84b5ns=
Subject key identifier: A0:65:7E:FF:67:01:CA:37:AF:A0:32:D7:41:A0:06:B9:F4:80:98:07
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7FBB802BC885BCCF974401FAC7FA91561A0FA624
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS7346.roa
Signing time: Mon 07 Sep 2026 03:21:58 +0000
ROA not before: Mon 07 Sep 2026 03:16:58 +0000
ROA not after: Mon 06 Sep 2027 03:21:58 +0000
asID: 7346
IP address blocks: 181.214.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:bb:80:2b:c8:85:bc:cf:97:44:01:fa:c7:fa:91:56:1a:0f:a6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 7 03:16:58 2026 GMT
Not After : Sep 6 03:21:58 2027 GMT
Subject: CN=A0657EFF6701CA37AFA032D741A006B9F4809807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:84:48:2d:5d:29:af:f2:c3:b6:a4:7a:17:2e:
36:59:0d:e9:0c:34:d1:b4:fa:5a:a9:c3:d1:c3:ca:
8b:93:57:45:f4:9f:40:1e:ca:3c:3b:26:0e:f4:dc:
66:ad:64:02:e1:80:21:0f:b5:86:c2:3a:38:92:2f:
31:24:8c:f9:24:f3:8c:0a:2d:45:43:c6:6e:7d:a0:
9b:9b:7e:e8:47:80:8a:07:29:85:50:ab:e4:00:5f:
2e:8f:59:75:26:e1:3c:7e:ba:97:4c:82:3a:98:54:
cf:57:40:10:fa:a7:22:ff:7e:ee:13:5e:af:74:48:
54:0e:62:f6:0e:03:0b:44:f6:9f:6a:74:a8:a4:97:
25:36:3b:a2:8b:94:c6:14:54:4d:61:e3:7c:bb:39:
a9:39:3e:5c:f2:26:69:4e:6e:a0:84:45:6e:ba:8b:
e7:69:77:5f:a0:b3:eb:f2:be:30:2f:72:bd:6a:f7:
4a:57:a7:b1:3f:de:e9:a7:24:9e:ed:81:31:0d:6e:
80:69:b3:70:f5:e9:36:ea:c3:2e:f7:ac:b8:89:99:
b4:b5:7a:10:a4:8a:d1:11:5d:d8:84:c5:ec:cc:e0:
78:8a:1a:0b:19:f6:1f:79:d2:5e:89:07:60:3e:bd:
14:06:c8:91:22:00:ad:6b:65:39:49:f1:f0:e7:18:
be:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:65:7E:FF:67:01:CA:37:AF:A0:32:D7:41:A0:06:B9:F4:80:98:07
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS7346.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.199.0/24
Signature Algorithm: sha256WithRSAEncryption
21:b1:f2:57:20:aa:4f:44:92:ad:79:0d:b3:72:35:e1:21:a5:
14:5e:4f:6d:38:ca:09:b4:55:6e:10:46:c9:d2:93:72:1d:7b:
71:37:91:d5:e5:63:a3:75:c3:3b:86:ce:2e:29:bc:1e:14:49:
f5:b7:60:ae:bb:eb:7c:61:61:86:b3:58:c0:49:a5:27:bc:c9:
14:91:1f:11:ce:d8:cc:52:16:93:eb:a3:13:ee:8b:99:74:18:
24:25:a9:e6:b4:b2:1f:4b:fa:46:22:4c:55:c4:09:85:ff:68:
3c:24:9e:cf:49:75:e0:b2:c0:46:cc:d9:46:56:90:f5:b6:d6:
40:9b:29:83:50:12:76:7c:02:b7:26:5c:a3:a1:37:80:61:81:
dd:14:57:ad:3a:18:b2:36:fc:46:6a:3a:5d:f9:0a:a1:5a:1f:
45:ec:ba:1c:c2:6f:2e:d9:8a:4a:f9:c3:4f:11:1a:4b:b9:ef:
be:65:9b:49:43:c9:45:f4:13:e6:92:7b:1b:9a:66:01:d2:e3:
36:62:f2:35:ab:57:87:d1:95:ca:2d:3d:76:84:72:01:5f:32:
91:b1:22:07:a6:48:c0:2b:04:e9:a0:07:72:27:0b:f9:f7:ee:
d9:d2:11:6c:fe:b9:0f:fa:90:94:49:60:16:36:eb:fb:da:f6:
9e:6f:e2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:25:52 2026 by rpki-client