Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS270764.roa
File: AS270764.roa (raw, json)
Hash identifier: GT7EDgqqEM7zxiK+Qy0XuolYjLeiOpfpKKPxRqzsXZ4=
Subject key identifier: AB:C3:C6:B4:0C:9C:E1:8F:BD:E0:B9:A5:4F:A1:DF:13:8E:C6:D3:6A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 186677A8D2360B4CD1B776E78B26664557855D19
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS270764.roa
Signing time: Thu 23 Jul 2026 16:49:14 +0000
ROA not before: Thu 23 Jul 2026 16:44:14 +0000
ROA not after: Thu 22 Jul 2027 16:49:14 +0000
asID: 270764
IP address blocks: 181.215.236.0/24 maxlen: 24
181.215.253.0/24 maxlen: 24
181.215.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:66:77:a8:d2:36:0b:4c:d1:b7:76:e7:8b:26:66:45:57:85:5d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 23 16:44:14 2026 GMT
Not After : Jul 22 16:49:14 2027 GMT
Subject: CN=ABC3C6B40C9CE18FBDE0B9A54FA1DF138EC6D36A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:81:56:4c:9e:f5:1e:9a:97:0a:a5:c7:62:01:
fb:9c:d2:cf:fa:1d:dd:87:2b:2e:8a:eb:1e:37:bd:
35:43:88:f6:47:bf:86:4c:e6:04:3d:30:fb:9d:21:
68:ff:4f:7b:be:87:9f:d3:b2:b7:1e:4d:79:d8:2f:
38:51:26:c9:de:7c:f2:28:fa:c1:99:aa:6f:dd:d6:
59:1a:64:b5:ea:7d:43:4e:61:02:ce:a6:63:e5:2b:
2e:22:6f:76:ab:2f:a6:4f:d9:d1:39:5b:94:58:ce:
c1:50:7e:9f:a2:6e:ea:d8:64:32:1f:96:dd:c7:63:
61:eb:02:dd:f5:f8:42:dc:89:a7:ff:49:95:d7:ee:
15:79:fb:7e:8f:db:bc:83:f0:67:f0:65:23:a5:22:
6c:f6:0a:5f:37:5a:ac:f0:da:ec:02:1b:90:d6:d6:
80:67:70:97:ba:7c:91:5f:b9:35:67:63:fc:95:73:
e4:89:d5:4a:ca:34:6c:e9:83:f2:b7:10:de:cc:26:
d2:5b:db:e2:95:33:cb:eb:a7:e2:25:40:4e:92:d3:
68:d3:91:21:f0:fc:a8:cd:2b:e2:46:b5:33:d9:e3:
06:c7:a0:c7:95:8b:91:75:69:56:cd:25:8d:6a:e3:
58:6a:a1:fe:18:01:50:24:3c:30:44:53:65:81:80:
b6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C3:C6:B4:0C:9C:E1:8F:BD:E0:B9:A5:4F:A1:DF:13:8E:C6:D3:6A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS270764.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.236.0/24
181.215.253.0-181.215.254.255
Signature Algorithm: sha256WithRSAEncryption
1f:71:11:bf:b3:04:ec:bb:05:52:aa:b2:3c:67:5b:dc:53:e9:
88:e7:e0:79:39:fb:d1:9d:3c:f3:62:d4:65:ff:3b:84:c7:84:
7e:84:d5:fd:9e:e8:43:b0:8d:66:bb:7b:dd:78:57:9f:9c:17:
ec:c4:1f:2c:38:68:96:94:06:34:bc:9c:33:d9:60:22:ff:47:
d6:26:82:84:da:6f:6e:f1:85:4a:f4:f6:bf:fe:c3:a0:32:41:
0e:4c:f2:cb:a6:37:49:c6:07:f6:f2:0f:15:4e:9e:97:14:2a:
42:ea:bf:50:36:44:63:4a:7c:2c:c9:5a:0d:0e:f1:1b:8e:04:
f0:95:6e:01:09:46:43:6a:ca:53:bc:23:c1:28:3d:66:4b:37:
9b:85:80:3f:c3:b6:17:1d:63:01:f8:27:d2:bf:94:cc:b7:90:
49:48:04:31:57:0a:a5:2f:b0:81:dc:35:6e:d9:ff:02:a6:74:
ef:b5:06:4b:4f:1c:b0:07:af:0c:b9:68:f6:b1:a3:07:62:c1:
9e:e6:4b:7e:be:bb:18:9e:7d:ed:8d:3f:6d:5b:33:3c:02:4e:
51:8d:ab:9f:3c:c8:2a:6b:80:23:14:43:96:2a:32:dc:af:1e:
11:6c:91:47:3c:b3:46:6f:77:67:2f:0d:0b:ed:cc:92:f1:06:
f4:90:08:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:26:12 2026 by rpki-client