Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS269070.roa
File: AS269070.roa (raw, json)
Hash identifier: E2/AvH9k1e0nNF08dw9pLX1z5ajlQK0HB7fJmZ9VnvI=
Subject key identifier: 61:52:4F:3B:42:C3:95:8E:BA:F7:47:EB:3B:D8:B3:E6:DE:AE:7B:E7
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3F4D5BFA9B75BE59F7A2055B267C24BDAFCCC9B8
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS269070.roa
Signing time: Tue 07 Jul 2026 12:48:58 +0000
ROA not before: Tue 07 Jul 2026 12:43:58 +0000
ROA not after: Tue 06 Jul 2027 12:48:58 +0000
asID: 269070
IP address blocks: 143.14.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:4d:5b:fa:9b:75:be:59:f7:a2:05:5b:26:7c:24:bd:af:cc:c9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 7 12:43:58 2026 GMT
Not After : Jul 6 12:48:58 2027 GMT
Subject: CN=61524F3B42C3958EBAF747EB3BD8B3E6DEAE7BE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:f3:cb:75:11:5e:f5:c1:5e:15:62:0e:f1:
04:c9:2d:c0:a5:87:21:1d:ae:6e:aa:92:83:43:74:
2a:7c:0c:db:3c:18:1a:2f:c1:04:22:cc:e3:0c:98:
43:ac:5a:d9:8b:80:43:86:de:81:ae:10:e7:36:eb:
5f:6d:43:a8:12:62:76:e8:d4:a7:10:99:73:00:36:
13:e2:7a:62:35:d6:a9:9d:68:2b:74:d3:18:c7:2a:
52:50:40:0c:50:eb:70:e1:46:3c:95:e3:f9:99:c3:
6f:92:e1:fa:ac:fa:06:32:03:8b:dd:a1:a2:05:66:
e7:01:3b:28:39:69:fe:21:b2:4a:14:97:a9:6e:c6:
2d:21:ff:5d:b9:dd:73:31:aa:b0:6f:52:04:07:b7:
f7:cc:03:18:81:0c:90:1f:12:7f:91:9e:78:73:e6:
84:b8:8b:c0:0c:bc:e8:2b:c7:c2:4c:fa:d4:ae:2c:
a1:9d:43:05:d3:19:46:1c:4a:8c:57:3e:24:cd:30:
92:54:02:d8:24:f9:c6:ae:79:1c:7a:7c:be:90:05:
ae:3e:0e:3f:9c:91:11:a8:17:0c:7e:c3:fe:c5:38:
4f:02:b2:ed:73:7c:ad:f1:8b:03:bf:41:45:29:ca:
24:c3:6e:de:15:4d:e2:b0:06:be:30:6c:ea:77:9f:
31:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:52:4F:3B:42:C3:95:8E:BA:F7:47:EB:3B:D8:B3:E6:DE:AE:7B:E7
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS269070.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.247.0/24
Signature Algorithm: sha256WithRSAEncryption
20:b0:56:46:2a:f2:e0:a0:23:d9:05:51:53:d1:1e:2d:fb:4e:
78:d2:78:3d:e1:90:49:01:dc:e0:6b:4e:1c:7a:42:f0:5d:7d:
7c:1d:b9:0e:05:38:b7:7f:ad:8e:a1:c2:37:52:31:83:bc:91:
43:95:36:47:85:6b:75:60:72:cf:cb:36:da:a9:84:09:71:07:
89:de:a5:bf:68:ec:1d:22:35:d1:6a:10:fe:ca:8f:66:27:a7:
0c:60:7f:7d:f9:8b:7b:c3:ae:e5:a1:41:28:ec:76:50:f1:fd:
d9:cc:f7:5e:8e:7b:82:7c:3f:4a:4d:89:9e:94:59:d2:57:92:
40:6d:07:bb:a2:1b:f3:ee:f5:7f:2a:6b:dd:e8:89:6c:54:4c:
e6:38:2f:18:61:f9:2f:b1:3c:0c:4e:ae:59:04:e6:64:db:24:
87:16:e0:c3:73:a5:b3:78:9f:b4:31:46:11:96:e4:02:02:db:
3b:c9:79:3b:18:f1:3c:31:c2:b1:25:86:55:bf:8e:01:48:50:
73:73:4a:6e:c6:93:65:e6:5f:7f:d5:e5:e0:83:21:3f:af:aa:
8d:f9:dc:5b:6b:57:fd:76:36:d6:83:3d:12:9b:69:e7:cb:48:
96:71:08:d1:a4:da:45:cd:a3:b0:13:d4:b4:5a:3d:5e:29:c1:
e2:26:14:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:24:38 2026 by rpki-client