Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS270075.roa
File: AS270075.roa (raw, json)
Hash identifier: XzbCtI4lbt3BTjdClyKHiep7pYCDMcShT2fzNDTgBxg=
Subject key identifier: 58:E8:24:80:FF:66:0A:C5:02:BC:87:6F:3D:AF:C5:EE:45:0F:10:39
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 4DD9CBAE328861ADEF0D14B74C23764EE62493C4
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS270075.roa
Signing time: Fri 17 Apr 2026 18:47:05 +0000
ROA not before: Fri 17 Apr 2026 18:42:05 +0000
ROA not after: Fri 16 Apr 2027 18:47:05 +0000
asID: 270075
IP address blocks: 181.214.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:d9:cb:ae:32:88:61:ad:ef:0d:14:b7:4c:23:76:4e:e6:24:93:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 17 18:42:05 2026 GMT
Not After : Apr 16 18:47:05 2027 GMT
Subject: CN=58E82480FF660AC502BC876F3DAFC5EE450F1039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f3:06:86:74:14:30:2d:10:49:83:d9:91:fd:
d3:0a:63:c5:85:ac:9c:99:fa:85:af:cf:87:d2:66:
a7:42:1c:1a:f4:0d:49:a3:5f:a6:16:f1:91:e8:a9:
ca:9f:1d:2f:87:43:bb:51:23:2f:ff:e7:ba:e3:c3:
cb:53:5d:e6:d0:7c:c3:d8:4d:56:ff:7a:0e:8b:ca:
37:7f:73:08:ad:74:f0:c9:ce:90:ff:6e:db:70:94:
f5:81:17:ae:d5:68:1a:ce:f4:19:19:b2:44:d9:79:
ee:d8:e9:e6:9a:ae:d9:fb:ca:76:f1:0f:5e:b0:af:
09:d2:32:58:66:5d:62:f1:99:e8:6f:51:38:97:27:
19:48:77:c3:05:3b:06:fe:de:19:f9:e5:ee:a5:1f:
c0:34:78:2c:76:5d:ec:3e:9c:72:c3:6a:d3:69:1c:
57:94:15:d8:0b:74:23:e7:bf:a0:a2:25:56:bf:50:
3f:a0:fb:e0:fe:f2:6c:06:c8:75:a3:ee:82:ed:91:
b8:d7:41:73:c9:3e:3f:e7:fc:4a:64:56:07:1c:ce:
5c:eb:c7:18:9a:c1:fc:9f:73:3b:83:21:f5:a4:3f:
7e:6b:cd:93:49:2e:da:1a:42:f5:ea:a1:32:7f:7f:
45:53:00:20:d7:52:9e:dc:68:9a:49:59:fa:c6:aa:
5c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E8:24:80:FF:66:0A:C5:02:BC:87:6F:3D:AF:C5:EE:45:0F:10:39
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS270075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.105.0/24
Signature Algorithm: sha256WithRSAEncryption
08:f2:b4:28:5b:92:c8:e4:ae:54:89:9b:96:1f:5a:c8:ad:61:
8f:f8:9e:75:b5:62:eb:10:2d:6b:8e:30:9c:dd:44:bf:df:5c:
2d:62:b5:6b:c0:68:c8:66:bb:34:24:f5:a2:c7:9e:a9:ef:ef:
13:d9:47:28:90:a9:ba:24:98:47:81:60:be:22:4a:76:eb:e3:
75:fc:70:74:36:84:4e:f3:b6:f2:dc:91:9f:5e:fd:bb:63:f6:
29:02:68:86:0f:8d:7c:21:12:3e:18:6a:a3:05:4f:f4:f0:dd:
be:1f:e7:f6:57:67:79:24:49:ae:b0:13:a4:2c:94:1e:96:42:
64:7b:64:5a:f3:ba:cf:8c:b3:22:8b:ee:1c:93:d4:b5:b7:93:
ad:25:54:b6:ec:83:31:5d:65:16:db:22:16:7d:02:9b:b6:11:
eb:ec:1d:9a:9f:ba:13:0f:12:34:62:ff:ff:5e:5a:20:35:cd:
45:19:3c:a2:7a:95:2d:0f:37:d8:9c:0c:56:9a:0c:42:90:bd:
f6:fd:f6:ba:a0:83:f7:73:eb:08:52:be:07:56:35:67:f7:e1:
c3:b2:a4:63:1b:16:91:08:83:f7:b9:34:45:6c:5f:71:d4:39:
9c:e7:74:86:9f:1d:d8:de:e5:32:c7:c8:f7:35:b8:e6:54:b8:
4b:19:59:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:45:51 2026 by rpki-client