Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS273091.roa
File: AS273091.roa (raw, json)
Hash identifier: gKFWFf3XxYKDG7mw2emt6q9HjQ8zJ2g7x5BfqHxXhkI=
Subject key identifier: AB:5F:84:2D:D1:71:73:A8:71:B2:9B:05:3D:3A:21:75:B7:37:47:65
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 24922B8FDA82E8F9180012767C66CE4A62A62928
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS273091.roa
Signing time: Tue 22 Sep 2026 07:38:42 +0000
ROA not before: Tue 22 Sep 2026 07:33:42 +0000
ROA not after: Tue 21 Sep 2027 07:38:42 +0000
asID: 273091
IP address blocks: 2a13:9500:1df::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:92:2b:8f:da:82:e8:f9:18:00:12:76:7c:66:ce:4a:62:a6:29:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 22 07:33:42 2026 GMT
Not After : Sep 21 07:38:42 2027 GMT
Subject: CN=AB5F842DD17173A871B29B053D3A2175B7374765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0c:b5:cf:95:82:4d:53:67:f6:5a:7e:1c:d6:
3e:27:30:e4:32:6b:42:ec:63:1f:00:5b:d7:a8:a4:
f6:4a:10:4c:d4:77:38:c5:1b:b8:01:6b:bb:2a:c2:
10:83:b0:36:f1:8c:37:96:bf:d0:bb:ab:0f:f0:d4:
22:eb:5d:f7:11:ed:37:99:f4:80:ec:29:aa:79:1c:
84:72:59:ad:54:54:81:d5:36:57:55:8d:9a:77:ff:
d3:a6:b5:71:84:9d:a5:6f:e2:3d:44:de:23:14:db:
aa:61:b9:c1:bd:a4:02:c6:cf:61:95:1f:13:7b:55:
7a:94:15:67:b6:7b:df:67:35:b8:3b:e4:a1:c8:6e:
6f:c6:8f:83:3e:ad:3f:ba:af:a8:e2:7d:2a:b0:1b:
d6:eb:21:13:b7:52:4c:c7:16:ec:a3:0f:48:76:a2:
8f:5e:6a:69:77:73:e5:e6:bc:96:ce:37:a5:0b:67:
c5:c3:59:d5:2b:2e:28:8a:04:8d:c7:14:8d:57:d9:
0e:16:c6:f7:52:a2:0a:4d:26:4c:9b:c3:03:b5:7f:
21:7f:ce:96:6b:88:2b:ee:ab:f5:02:7f:9b:0d:a6:
6b:99:1c:9e:8c:3b:c3:8f:6b:c5:d6:ef:ac:06:f4:
0a:5d:4b:7a:37:c5:fe:57:ee:cf:55:54:7a:87:d6:
45:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5F:84:2D:D1:71:73:A8:71:B2:9B:05:3D:3A:21:75:B7:37:47:65
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS273091.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1df::/48
Signature Algorithm: sha256WithRSAEncryption
34:b1:88:16:a2:e8:85:9f:06:d4:d9:39:d0:cc:b8:2b:4e:b2:
36:bd:5b:10:08:94:59:56:23:29:e8:4d:60:83:7a:20:e7:69:
db:01:0f:04:8b:59:e8:00:b4:c6:d6:27:01:9b:1e:70:60:63:
6f:9a:1f:b9:00:dd:3e:1e:4a:4e:0e:a1:1c:84:ef:62:ab:e7:
34:b2:7e:2a:a4:76:4e:40:e9:36:56:12:55:e8:08:dc:92:bc:
01:8f:12:0c:61:04:ff:ec:90:8c:3b:d4:4f:4c:43:41:53:25:
92:53:45:c5:d1:ce:ac:7b:f6:6b:c5:0d:c6:23:b6:ed:39:df:
a2:65:f2:fd:a2:ed:3b:84:9f:e0:5d:1e:f8:1c:f8:f8:4e:2c:
10:1e:bb:82:a4:17:0e:34:ba:dd:1f:9e:03:64:ad:f4:87:e3:
a2:f8:e3:70:59:ae:22:bb:8c:71:cd:9d:10:4d:8b:45:49:36:
22:71:6a:c3:39:97:ad:4d:02:c2:67:0a:61:07:ce:7d:a4:7c:
58:41:af:a3:6a:ac:8e:e6:8e:ce:e7:e3:6d:a7:bb:6a:a1:3b:
6b:10:f2:bf:52:a5:9b:59:02:da:0f:9e:cb:75:a1:d7:77:c3:
e3:49:ec:ca:37:6c:9d:ba:1d:b8:8e:f2:8f:59:46:4a:d8:9f:
1a:ab:c0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:39:55 2026 by rpki-client