Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS27463.roa
File: AS27463.roa (raw, json)
Hash identifier: Qa9G1fyPkPtivskG7RmcNp+V3FFUx0ZZAO5NHVFED+0=
Subject key identifier: CC:98:0A:72:D9:74:B3:C8:AE:22:EC:14:40:C3:87:F4:9E:EF:8B:CB
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 1BEAB45E12A77AF1B9770AA3F232EB676BA87057
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS27463.roa
Signing time: Tue 30 Sep 2025 10:03:15 +0000
ROA not before: Tue 30 Sep 2025 09:58:15 +0000
ROA not after: Tue 29 Sep 2026 10:03:15 +0000
asID: 27463
IP address blocks: 46.236.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:ea:b4:5e:12:a7:7a:f1:b9:77:0a:a3:f2:32:eb:67:6b:a8:70:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 30 09:58:15 2025 GMT
Not After : Sep 29 10:03:15 2026 GMT
Subject: CN=CC980A72D974B3C8AE22EC1440C387F49EEF8BCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:eb:ab:2d:53:93:f9:d0:bb:03:e9:32:e2:
2b:da:04:e6:e8:a1:ec:b7:d0:f8:c4:2d:a7:f5:97:
01:df:84:5b:e5:95:d0:4e:67:0d:d6:2c:35:b9:af:
31:2a:bb:56:2c:58:a3:f8:23:05:d7:a7:38:5a:70:
d7:0a:4f:0e:c5:6c:b8:1f:52:7a:06:ce:3c:bd:08:
ee:1c:78:04:f8:a4:31:ff:8f:d9:1c:1a:14:31:64:
3d:f5:1e:a2:83:db:22:c4:ea:62:da:3f:a7:6c:ea:
c7:8c:2f:87:a9:bd:3b:7c:0d:55:7c:de:dc:5d:f1:
0c:85:79:e1:2d:40:30:1c:68:72:b3:53:4d:24:84:
99:95:76:d8:4e:98:9a:a3:8c:59:a3:64:cb:e8:bd:
a7:9b:13:49:94:a7:02:a7:41:4f:b8:8c:62:93:55:
d0:33:c0:d3:2a:de:e5:3a:99:c8:65:66:6b:06:86:
a0:73:52:03:0d:2d:a9:cc:de:3f:4c:2e:1f:c9:70:
a2:91:aa:c4:10:f3:f3:a3:a8:4c:0e:aa:4b:27:ab:
9f:4e:30:c4:54:25:a4:45:7e:4b:0b:19:f5:dd:cc:
2c:a7:bb:dc:59:e7:d6:22:5a:ff:fb:23:27:d3:cd:
06:7e:43:14:dd:23:ab:f4:2e:24:e1:43:3b:75:f0:
48:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:98:0A:72:D9:74:B3:C8:AE:22:EC:14:40:C3:87:F4:9E:EF:8B:CB
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS27463.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.243.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:3d:ac:b5:2c:fb:aa:90:3e:21:3f:2d:10:3f:0c:ad:30:96:
f9:16:a6:01:27:61:27:c7:d9:27:44:a2:54:d6:b3:3a:71:17:
ea:d4:3b:6e:08:b8:68:1a:da:c0:32:34:f4:2b:20:bd:a6:b7:
a6:14:19:85:60:1e:f7:b6:d2:84:b9:16:97:a1:0e:dd:42:17:
a2:ec:9e:d2:78:0c:14:39:79:5b:62:29:2b:7e:d0:12:b8:00:
7f:cc:25:9e:e9:d2:ff:9f:fd:f9:33:51:d9:f1:c7:b0:2e:19:
85:27:d0:32:74:b3:04:16:91:e6:06:e9:b6:df:9b:f1:31:ff:
0e:c6:53:7f:10:ab:30:5a:31:cc:c3:5b:28:93:b6:53:f4:56:
3e:01:b5:fe:4a:a1:9f:ad:5f:1a:69:b7:c1:8e:d5:ef:b8:40:
0c:44:fc:f6:6a:81:9a:58:a1:ad:0d:3d:4d:c7:2d:cb:e1:29:
2e:27:39:43:dd:f3:83:c3:81:31:f7:37:95:4e:8c:fd:85:bb:
12:02:55:38:1f:fb:a8:bb:b5:d6:d5:95:97:57:56:30:a5:fc:
5c:51:01:12:65:a4:4a:0b:42:fa:8e:82:0d:f2:88:f3:8f:77:
8b:29:d4:e8:c6:43:eb:bb:52:76:17:46:bb:95:31:0c:c5:31:
9e:1c:85:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:17 2025 by rpki-client