Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS274069.roa
File: AS274069.roa (raw, json)
Hash identifier: ysnXVAe76wzebVNXYYxIeXfwgBt9fAfi3BnLpbPfyEc=
Subject key identifier: 30:B0:8A:0D:D2:F3:B9:1B:43:09:09:CE:DD:6B:BF:9D:7F:F4:4A:5E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 212303F0AA39A24E0ED7BC03070F969DF9529F20
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS274069.roa
Signing time: Sun 22 Mar 2026 13:19:45 +0000
ROA not before: Sun 22 Mar 2026 13:14:45 +0000
ROA not after: Sun 21 Mar 2027 13:19:45 +0000
asID: 274069
IP address blocks: 162.141.46.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:23:03:f0:aa:39:a2:4e:0e:d7:bc:03:07:0f:96:9d:f9:52:9f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 22 13:14:45 2026 GMT
Not After : Mar 21 13:19:45 2027 GMT
Subject: CN=30B08A0DD2F3B91B430909CEDD6BBF9D7FF44A5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5a:a9:53:b9:59:28:67:06:9a:f6:14:57:d0:
aa:eb:d6:9d:f5:6f:02:70:47:73:12:2a:76:1f:4d:
00:3d:a1:a6:8a:93:3a:f8:0d:49:e5:ec:5f:67:3b:
3c:de:1a:13:ad:44:8e:c8:5c:a2:a0:bf:d5:4a:7f:
56:b5:b2:1d:46:38:09:70:e4:1e:35:ea:cf:b2:88:
8f:97:76:a4:bf:4f:a7:16:38:26:99:df:7c:4d:bb:
43:a1:cf:44:48:b0:a0:c1:c8:28:54:8c:86:6e:9e:
5b:ae:71:4d:8a:0a:7f:92:56:0b:7a:10:9d:a1:f4:
cf:05:0b:4b:e4:76:44:e9:f4:dd:02:4d:86:9b:fd:
1a:93:65:e4:7d:fa:98:a4:5c:44:fb:cc:86:fd:2b:
aa:e4:c2:63:df:fd:f8:72:3d:76:15:0e:a3:5e:4b:
fa:12:c1:18:6b:df:61:32:da:af:e0:fb:e7:0f:16:
99:8f:1e:46:90:bf:fc:8b:5c:4b:e7:e2:3c:9d:28:
7d:fb:4b:b9:4b:12:00:99:26:69:64:ad:54:4c:37:
f7:ed:ac:e4:9b:46:4c:10:e3:d3:e6:0e:cf:7e:d8:
6c:02:a7:64:7b:4c:4d:a9:80:97:69:46:9e:13:9d:
f7:fa:b4:48:86:fb:a5:11:46:6d:57:09:4a:ab:40:
fc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B0:8A:0D:D2:F3:B9:1B:43:09:09:CE:DD:6B:BF:9D:7F:F4:4A:5E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS274069.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.46.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:2d:e0:90:b6:94:da:4b:87:a7:35:54:72:f7:7b:52:ad:5f:
81:ae:b8:ab:4e:a2:a3:9b:ab:20:f7:48:d8:ad:82:46:71:93:
8b:dc:21:b2:53:db:46:f3:b7:70:e8:df:01:26:29:46:66:79:
8b:eb:cc:29:40:97:4a:89:ae:84:92:65:ad:8f:66:e5:49:bc:
9a:18:68:b8:58:14:60:2f:55:4a:c6:a1:fa:a9:57:60:54:93:
b5:1e:0a:7b:3c:91:ff:0f:57:6c:a5:bf:27:1f:e9:c2:cd:7a:
5f:3a:7b:e7:0c:7a:80:2b:fd:8e:44:47:56:44:b6:5d:eb:b6:
17:df:3a:20:ca:e2:0e:46:31:44:4e:41:df:9b:b1:92:0e:10:
fe:30:b6:48:01:53:e6:9e:57:d3:cb:c8:77:28:77:c4:68:7e:
ea:11:9c:bd:97:4c:67:cb:a7:c7:21:0b:e0:2e:df:38:18:bc:
a0:e7:3c:c0:be:3d:b8:eb:24:d1:be:a2:7d:c2:bd:02:e6:6a:
0b:cf:27:26:f6:53:cc:1d:a8:be:eb:5d:06:4e:45:0f:4a:9a:
1b:64:d7:77:88:91:4c:e8:61:17:bd:db:11:7e:03:e7:ee:3d:
cd:8f:5e:c1:2e:f0:3b:9f:0c:02:ca:65:93:f1:23:cd:58:3e:
67:a0:84:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:14:07 2026 by rpki-client