Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS401861.roa
File: AS401861.roa (raw, json)
Hash identifier: i7uHoPej22QGAIHAC+w94oujo78FBy+ZJCzCkQZsx3g=
Subject key identifier: 55:D6:0F:00:4B:F0:66:6B:C6:31:13:96:B8:3D:AC:D2:E2:27:06:7D
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 472051F828717EDD7D37EDB23250D0A7B407EFDA
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS401861.roa
Signing time: Sat 11 Apr 2026 03:14:01 +0000
ROA not before: Sat 11 Apr 2026 03:09:01 +0000
ROA not after: Sat 10 Apr 2027 03:14:01 +0000
asID: 401861
IP address blocks: 45.157.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:20:51:f8:28:71:7e:dd:7d:37:ed:b2:32:50:d0:a7:b4:07:ef:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Apr 11 03:09:01 2026 GMT
Not After : Apr 10 03:14:01 2027 GMT
Subject: CN=55D60F004BF0666BC6311396B83DACD2E227067D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:bd:ef:20:73:64:33:75:e4:35:ba:5a:93:
8e:d0:ab:ef:59:06:57:50:f1:38:99:88:d6:96:1d:
40:5e:b9:ab:a5:0f:2d:33:8c:90:8c:9b:76:f6:ea:
f4:fb:bd:77:52:df:25:3d:0d:63:db:32:28:8d:2d:
4c:f0:ee:77:ee:be:dd:ff:ae:6c:11:c0:26:1c:3e:
9d:54:67:22:38:98:33:5c:47:9d:c7:55:d1:d5:3a:
12:54:60:5c:e5:e8:e3:04:e1:74:28:c3:e7:72:04:
e7:85:63:6d:4b:1d:62:82:20:45:96:7a:c0:11:cd:
85:87:e3:b6:59:37:24:cd:cc:1d:be:2c:c5:ee:55:
a7:80:80:f8:00:97:a7:f2:68:4f:70:64:86:46:f5:
84:21:9c:d4:5f:3a:53:19:8e:29:eb:f1:9b:74:1b:
91:a0:df:b9:86:f8:f7:bd:d6:50:68:d7:95:8a:c5:
1f:49:bd:8e:f0:dc:7f:07:77:04:60:3c:e3:98:e8:
39:9a:70:3a:01:39:6a:1b:04:bf:86:5d:d2:9b:34:
60:1c:06:33:29:92:22:5e:59:c2:3b:60:0c:bf:4c:
b5:12:ea:b4:1c:73:4a:0c:b2:cb:b7:49:b4:d8:8a:
bf:02:f3:4b:62:b8:53:28:88:f3:98:a8:b3:c3:a7:
42:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D6:0F:00:4B:F0:66:6B:C6:31:13:96:B8:3D:AC:D2:E2:27:06:7D
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS401861.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.19.0/24
Signature Algorithm: sha256WithRSAEncryption
15:1b:d4:92:53:95:5c:8c:0b:e0:79:ce:12:a3:e5:de:6b:0e:
c7:4f:65:8f:87:6e:0d:e9:5a:a7:e1:84:16:d4:53:90:88:c1:
3a:67:ed:f5:8a:99:c6:00:01:5a:2d:ec:a9:a6:29:88:a1:59:
7d:10:63:17:f4:64:72:ad:7f:e7:57:15:b1:1c:b6:07:18:3e:
86:87:f5:5f:94:58:0c:cc:8f:72:55:ca:40:8f:c4:24:2a:de:
e9:3b:43:dd:73:86:fe:68:74:5a:51:1e:88:f4:5c:3f:aa:54:
9e:6b:02:e7:19:bb:10:07:63:e4:28:d4:66:a7:42:8b:e3:1e:
72:9d:8f:36:3b:fa:63:61:54:54:58:13:c5:6e:60:66:01:cb:
75:ed:e8:91:d5:a6:dc:5b:8b:b5:a6:4b:f6:df:6e:b9:92:d0:
3d:42:a0:df:7d:96:71:ae:34:07:62:a7:7c:a1:aa:41:37:20:
35:96:91:9f:b9:b8:e0:e1:5c:ee:3f:38:d2:8a:ef:79:dd:1e:
09:cd:6a:0d:47:08:b4:68:29:84:99:33:b7:1b:1d:e4:23:c4:
68:1b:07:b1:12:c7:6c:35:b5:7c:39:26:ae:16:da:de:ab:96:
13:7d:98:21:a7:67:2f:7b:ab:ac:45:4c:92:22:d0:2c:d8:a8:
d1:d1:75:65
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIURyBR+Chxft19N+2yMlDQp7QH79owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNjA0MTEwMzA5MDFaFw0yNzA0MTAwMzE0MDFaMDMxMTAvBgNV
BAMTKDU1RDYwRjAwNEJGMDY2NkJDNjMxMTM5NkI4M0RBQ0QyRTIyNzA2N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ib3vIHNkM3XkNbpak47Qq+9Z
BldQ8TiZiNaWHUBeuaulDy0zjJCMm3b26vT7vXdS3yU9DWPbMiiNLUzw7nfuvt3/
rmwRwCYcPp1UZyI4mDNcR53HVdHVOhJUYFzl6OME4XQow+dyBOeFY21LHWKCIEWW
esARzYWH47ZZNyTNzB2+LMXuVaeAgPgAl6fyaE9wZIZG9YQhnNRfOlMZjinr8Zt0
G5Gg37mG+Pe91lBo15WKxR9JvY7w3H8HdwRgPOOY6DmacDoBOWobBL+GXdKbNGAc
BjMpkiJeWcI7YAy/TLUS6rQcc0oMssu3SbTYir8C80tiuFMoiPOYqLPDp0LDAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUVdYPAEvwZmvGMROWuD2s0uInBn0wHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTNDAxODYxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ0T
MA0GCSqGSIb3DQEBCwUAA4IBAQAVG9SSU5VcjAvgec4So+Xeaw7HT2WPh24N6Vqn
4YQW1FOQiME6Z+31ipnGAAFaLeyppimIoVl9EGMX9GRyrX/nVxWxHLYHGD6Gh/Vf
lFgMzI9yVcpAj8QkKt7pO0Pdc4b+aHRaUR6I9Fw/qlSeawLnGbsQB2PkKNRmp0KL
4x5ynY82O/pjYVRUWBPFbmBmAct17eiR1abcW4u1pkv23265ktA9QqDffZZxrjQH
Yqd8oapBNyA1lpGfubjg4VzuPzjSiu953R4JzWoNRwi0aCmEmTO3Gx3kI8RoGwex
EsdsNbV8OSauFtreq5YTfZghp2cve6usRUySItAs2KjR0XVl
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:31 2026 by rpki-client