Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS273864.roa
File: AS273864.roa (raw, json)
Hash identifier: PyqqWpEhqckRO+AAxw8khFhb1dAT/UIc7Xr0FfOI+Jk=
Subject key identifier: F3:23:9E:D4:03:0C:4C:AA:D1:A4:62:A8:14:30:FB:B0:7D:5C:B9:9C
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 29D82CFC1D6C3C8F61CE7FEEB33FB0A4598BDED2
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS273864.roa
Signing time: Wed 25 Mar 2026 17:24:37 +0000
ROA not before: Wed 25 Mar 2026 17:19:37 +0000
ROA not after: Wed 24 Mar 2027 17:24:37 +0000
asID: 273864
IP address blocks: 167.148.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:d8:2c:fc:1d:6c:3c:8f:61:ce:7f:ee:b3:3f:b0:a4:59:8b:de:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 25 17:19:37 2026 GMT
Not After : Mar 24 17:24:37 2027 GMT
Subject: CN=F3239ED4030C4CAAD1A462A81430FBB07D5CB99C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a8:d2:b9:42:ff:33:e4:e7:81:9b:31:95:a4:
83:98:ee:88:68:7a:9e:d9:31:9d:4a:c1:8f:33:5e:
6a:3e:15:b0:34:ba:14:c4:8e:3d:32:50:de:01:e5:
3d:d9:df:a6:03:d6:6e:eb:71:9b:04:68:8b:fa:c7:
85:8c:33:45:f4:b4:04:86:64:2e:99:a2:3b:65:06:
30:07:fb:57:a7:20:2c:35:6a:1d:a4:8e:7f:cc:81:
40:50:39:c6:0e:17:1c:ad:65:8a:29:a2:84:ad:f8:
aa:b3:09:d4:31:0f:90:6a:9a:90:5c:c8:65:d4:5f:
d3:bc:ea:b6:6c:4f:df:ab:72:1d:e6:d2:6e:9f:6a:
85:6e:06:25:6a:cb:29:62:89:d2:e8:4a:74:31:15:
fc:19:1f:94:35:1b:a4:2f:bf:cd:71:38:a0:d0:3c:
c8:3a:0b:0f:23:fb:f4:df:b9:83:fd:92:9b:0f:75:
9b:0e:55:fd:08:c0:ab:87:c4:78:13:f3:15:64:bf:
ee:3b:87:96:9f:67:01:2e:de:53:56:7b:5b:8e:bc:
50:e9:a7:e4:97:dd:31:e9:a5:61:8e:4f:6b:ad:6d:
54:d4:c3:52:e5:87:b2:f2:9b:1c:c9:c4:9c:65:6e:
b7:1d:2a:9f:bd:e4:b8:7b:d7:a3:d5:d5:33:45:dc:
4f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:23:9E:D4:03:0C:4C:AA:D1:A4:62:A8:14:30:FB:B0:7D:5C:B9:9C
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS273864.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.184.0/24
Signature Algorithm: sha256WithRSAEncryption
24:d2:b2:62:e4:4f:db:45:dc:d4:84:a9:e0:8c:2f:c5:87:41:
a0:a7:00:c4:f3:db:bc:aa:99:70:8e:4c:83:90:3e:50:bd:90:
86:9a:00:c5:23:2a:d8:1b:e5:3c:a0:cb:15:b7:3c:90:74:c5:
73:c1:a9:a3:0e:77:92:2b:d8:09:79:4d:e0:a9:7e:24:e9:db:
3a:9b:fd:27:cc:9c:2d:aa:69:ba:41:24:2e:2c:b1:1f:75:fd:
af:74:61:8c:c8:ae:73:2e:60:a4:60:1f:8f:4e:f0:63:d7:73:
c9:5d:8b:7e:1f:25:99:32:03:1d:04:34:90:e0:e7:2d:08:2c:
40:47:fe:ef:db:a9:be:4b:9f:80:41:30:a5:20:5e:42:02:8f:
32:51:06:b6:70:59:5b:88:e2:01:34:d9:f0:6c:da:3a:2b:6d:
63:6b:22:e9:06:28:54:d2:3a:90:15:2e:f0:b0:74:d6:7c:b5:
39:09:49:2c:e6:3a:ac:4e:d4:f5:9d:fa:71:6e:b2:c9:fb:7d:
2d:63:27:e0:87:81:5a:e8:8a:c8:5c:61:85:c7:14:b8:cd:d6:
87:4e:94:b7:07:37:1b:36:07:92:de:0b:48:ec:1a:64:2b:a3:
8a:8d:b1:31:d3:89:db:04:a3:4b:38:1d:59:0f:bf:bd:3f:7a:
80:48:0d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:48:30 2026 by rpki-client