Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS273103.roa
File: AS273103.roa (raw, json)
Hash identifier: iEpfbGpziEb5WWwIoFVrEY0YgPJ3ykIzmu1vfqZMh4E=
Subject key identifier: 1C:1A:4A:51:20:80:3A:39:FE:3B:13:80:5A:BA:7C:3B:93:B6:D6:17
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5F1C426ACAE2C9F96FED75733F54B3DFF8E653
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS273103.roa
Signing time: Thu 07 May 2026 21:32:50 +0000
ROA not before: Thu 07 May 2026 21:27:50 +0000
ROA not after: Thu 06 May 2027 21:32:50 +0000
asID: 273103
IP address blocks: 178.83.168.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:1c:42:6a:ca:e2:c9:f9:6f:ed:75:73:3f:54:b3:df:f8:e6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 7 21:27:50 2026 GMT
Not After : May 6 21:32:50 2027 GMT
Subject: CN=1C1A4A5120803A39FE3B13805ABA7C3B93B6D617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:06:ec:ff:c0:bb:e3:fc:4c:43:9b:7a:d0:2d:
e6:f1:45:35:ce:ff:ed:73:28:82:eb:0a:60:55:27:
aa:41:46:b5:a0:6a:1a:b5:7e:3f:d2:4b:5d:c9:71:
14:96:1d:56:06:ad:c7:cb:39:e8:6d:92:98:98:a7:
aa:92:4a:f0:60:cd:25:66:da:d0:41:d1:42:74:47:
f0:49:da:2d:ae:9f:e6:70:21:94:2a:0c:0d:d3:c6:
6e:f1:fd:bf:cd:6a:ed:16:44:d5:33:b7:6f:c4:58:
69:67:1a:f6:0e:a7:35:fd:9b:85:ce:a2:a6:f2:d8:
46:7c:13:da:7a:1f:e8:ab:8d:e7:01:29:a2:9c:f0:
99:04:80:a6:c1:8a:16:22:bb:c9:4e:cb:9b:32:f8:
0e:4d:91:42:91:17:af:d6:35:0f:c0:2b:a5:e4:49:
a5:bc:f1:74:46:29:06:f1:55:82:fc:68:7c:3e:42:
08:0d:30:8c:b8:f6:33:e6:e3:59:31:85:7f:d1:5e:
d4:40:b8:73:9d:8e:00:e4:22:ec:ec:66:78:2e:56:
55:d8:e7:55:7f:de:29:23:b6:83:8c:cf:9b:41:2c:
6c:50:f8:38:c8:c2:7d:44:cf:86:34:30:b8:44:ca:
f4:18:99:47:42:dd:2b:13:aa:20:3c:07:b2:4f:b7:
33:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1A:4A:51:20:80:3A:39:FE:3B:13:80:5A:BA:7C:3B:93:B6:D6:17
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS273103.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.168.0/23
Signature Algorithm: sha256WithRSAEncryption
93:e3:f8:26:d5:66:ed:fb:6a:e0:73:a6:e2:a6:69:00:77:d2:
be:06:2b:cb:e6:15:c5:d1:48:b7:31:da:27:6c:4d:95:3f:42:
8e:54:f9:fc:6e:0f:83:1d:a4:68:69:9c:6a:4b:6c:f8:48:bf:
12:8d:f8:64:2e:ed:9a:a2:3f:24:e8:69:26:bc:ae:98:e2:11:
6e:9a:1e:9a:42:df:1b:4d:69:0a:d9:b0:74:5f:98:1c:54:06:
0c:14:32:cf:2d:eb:3d:51:8a:d8:c0:4e:34:32:6c:09:94:5d:
57:5a:d9:e8:d2:c7:34:ef:8f:eb:8c:a4:9f:cd:0c:e7:8b:3f:
c6:0a:c5:dc:1a:87:d6:1a:c5:2c:2e:f8:4d:84:2b:57:eb:df:
be:ab:bd:c8:ed:a7:8f:22:fe:2a:cf:ff:65:2b:cd:b7:ec:2d:
c4:89:80:48:0d:2c:53:ac:74:92:24:65:d8:e0:33:4e:4f:70:
ea:83:03:8a:c3:24:37:a6:58:dc:e1:3f:45:1e:99:be:90:b4:
18:3a:0b:64:3b:61:1c:d6:4a:07:99:42:ae:43:74:00:eb:9a:
e3:33:7c:0b:58:7a:3d:c7:3f:23:0e:c8:5b:78:e9:41:91:06:
6e:f1:e4:57:3d:1d:e8:dd:9f:5f:98:87:5e:ca:d7:2e:11:49:
15:30:04:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:52 2026 by rpki-client