Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS270946.roa
File: AS270946.roa (raw, json)
Hash identifier: 54fCKpA4uir6oSMuDTGhzv4+zgAB2C9I+zQi0A4Y9Fo=
Subject key identifier: C2:FD:90:E4:C5:AC:0A:C3:DE:EA:A4:96:CA:6D:DF:F4:28:4B:AA:C2
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3966AD121902887E549451A3AC0471B77AE0F97B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS270946.roa
Signing time: Tue 21 Jul 2026 12:31:55 +0000
ROA not before: Tue 21 Jul 2026 12:26:55 +0000
ROA not after: Tue 20 Jul 2027 12:31:55 +0000
asID: 270946
IP address blocks: 162.141.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:66:ad:12:19:02:88:7e:54:94:51:a3:ac:04:71:b7:7a:e0:f9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 21 12:26:55 2026 GMT
Not After : Jul 20 12:31:55 2027 GMT
Subject: CN=C2FD90E4C5AC0AC3DEEAA496CA6DDFF4284BAAC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bb:36:31:80:88:51:34:7c:a4:04:8d:8f:c2:
74:18:6b:fc:9d:65:5b:86:92:e0:45:17:fb:8f:6a:
04:dc:8d:ae:48:ac:97:96:15:50:f4:62:53:a8:d4:
52:23:3a:c7:f0:ea:c9:8f:9c:55:d7:d7:09:30:26:
3a:62:bd:5d:d3:44:91:e6:f7:4f:7b:3a:57:a8:cd:
07:71:cc:f6:a0:b6:13:3c:e7:15:a9:6d:ab:6c:25:
07:4e:99:95:b5:58:4b:8d:fd:ec:4a:c6:1c:fe:d5:
1f:b5:e8:c3:23:1d:b5:27:ec:59:95:77:5a:2a:b9:
52:3c:cc:ce:4a:81:58:d1:87:f3:a5:2f:c9:32:69:
3f:ed:ae:3e:6c:53:61:9c:8c:31:4d:99:8a:1a:23:
a7:45:a3:37:fa:bf:b9:64:24:d5:90:8a:1a:57:dc:
8c:89:39:5a:67:fc:14:2c:f2:bf:31:20:84:5b:e0:
ca:da:5f:55:73:66:fe:e9:be:3c:c7:5e:f3:4f:ab:
06:62:5f:2f:93:66:2c:94:2a:08:a0:cb:ea:52:5d:
30:53:bf:8a:05:61:60:96:e7:00:96:6a:61:19:89:
36:20:ba:44:02:f2:1e:ed:3b:22:65:97:72:7f:cc:
60:2d:41:e0:14:7f:d5:ec:43:20:36:c7:51:9d:e5:
01:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FD:90:E4:C5:AC:0A:C3:DE:EA:A4:96:CA:6D:DF:F4:28:4B:AA:C2
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS270946.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.65.0/24
Signature Algorithm: sha256WithRSAEncryption
34:66:6d:97:8c:58:b5:db:56:76:f7:cc:e5:6e:2f:b1:e9:f2:
1f:ac:8c:b1:c9:28:34:3e:30:01:bf:1c:76:9f:9b:e8:b7:7e:
e7:38:80:d3:3b:a9:3c:bb:ea:ef:c9:be:ff:7d:ad:b9:4d:d7:
68:7c:f3:05:a7:56:5b:ee:75:53:0f:62:c3:1b:20:39:a1:0f:
72:1b:61:6b:05:87:86:dc:1c:71:78:15:33:3d:89:c7:c8:98:
50:80:24:e6:e1:e1:1a:21:eb:84:f8:8f:47:cb:13:9c:15:cc:
63:03:e8:a2:b1:69:70:d4:84:ad:b1:06:33:54:cb:c7:3a:81:
23:75:14:39:a5:d5:69:36:ce:26:00:c4:bd:c9:33:e4:f0:0c:
82:b1:77:e4:b0:c5:f2:a5:c8:07:f8:a3:e3:4e:48:b2:a3:3b:
1e:89:d1:1a:58:4e:b3:ca:8a:53:9e:35:23:0a:2d:95:f8:7e:
48:31:0d:4e:34:09:c0:57:77:49:0b:aa:2f:b8:e8:8b:e5:0d:
6e:c8:2f:b8:46:77:ed:3f:7b:52:19:07:1a:21:4d:50:53:a7:
df:c0:33:4d:be:4d:02:4c:f3:8f:3b:83:46:57:ae:65:f9:9e:
98:7e:fa:7f:26:99:f7:d1:97:71:24:04:3a:96:3d:36:f0:f9:
e3:20:c8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:38:42 2026 by rpki-client