Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS273463.roa
File: AS273463.roa (raw, json)
Hash identifier: k9fty6ufq60B+V66kT11HElP+KuRq9EHmiLm64eN0hE=
Subject key identifier: 9B:91:42:E5:85:B9:8A:91:3B:24:C9:CD:FA:05:9E:D8:8A:32:A3:9E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6A3009D1444E7E53DD0E7635B7F4BA1BB10544B3
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS273463.roa
Signing time: Mon 11 May 2026 12:47:40 +0000
ROA not before: Mon 11 May 2026 12:42:40 +0000
ROA not after: Mon 10 May 2027 12:47:40 +0000
asID: 273463
IP address blocks: 2a13:9500:173::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:30:09:d1:44:4e:7e:53:dd:0e:76:35:b7:f4:ba:1b:b1:05:44:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 11 12:42:40 2026 GMT
Not After : May 10 12:47:40 2027 GMT
Subject: CN=9B9142E585B98A913B24C9CDFA059ED88A32A39E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a0:28:f2:15:91:e9:6d:65:59:5b:ef:16:5c:
e8:3f:4c:37:df:48:b3:3e:46:a8:c9:62:be:7d:f7:
d0:8a:f6:68:48:5f:60:28:fc:1a:20:ce:49:95:7c:
8a:9d:36:3b:a4:aa:59:1c:ff:2a:70:4f:10:ae:6f:
85:2e:86:ed:ed:06:58:7c:94:a1:e4:95:3c:00:13:
66:fe:04:c3:5d:95:f1:77:5a:7e:fd:fd:c3:6c:6b:
03:59:24:e2:8c:36:9c:39:ec:bb:f7:ce:34:6c:c3:
13:2b:d1:8b:de:66:37:7c:57:39:80:25:30:59:7e:
1a:5c:82:77:62:23:3a:13:eb:cb:b4:3c:90:49:b4:
41:35:08:75:51:09:52:46:70:5a:f5:ca:10:11:eb:
25:fc:32:d8:e4:1b:1b:5b:79:1d:f8:ff:19:f8:86:
99:b6:d4:a5:37:8e:b9:33:f0:7d:d6:25:61:d5:d2:
56:6f:68:e1:03:ad:59:a6:c3:93:aa:4c:d6:20:43:
6b:8d:7c:67:ce:3a:9d:ba:74:9a:7e:f8:55:c3:5b:
8d:06:c9:c2:a7:0a:90:f9:ec:58:63:c7:8b:d9:13:
69:93:24:ef:35:81:73:ac:ca:23:cd:d5:4d:45:30:
61:52:b3:dc:4e:b4:4f:05:05:37:03:f9:cb:12:a0:
31:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:91:42:E5:85:B9:8A:91:3B:24:C9:CD:FA:05:9E:D8:8A:32:A3:9E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS273463.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:173::/48
Signature Algorithm: sha256WithRSAEncryption
a5:72:b4:ad:cf:25:da:5e:c8:cf:94:69:bb:c4:93:a1:e5:11:
c3:7f:2a:e0:89:f8:6e:bc:f3:13:dc:58:8b:50:2b:d1:28:c9:
7f:7e:b9:53:c5:27:8a:e1:e1:0f:a1:26:d9:47:7c:5e:44:fc:
7e:b6:ba:f7:ff:b2:52:a5:2e:bf:ed:4f:ea:3f:24:6f:fe:3f:
33:c6:fb:33:9e:cf:2b:6e:33:10:55:a3:f0:b6:00:0f:2d:ff:
53:08:72:53:57:4b:cc:19:27:c7:b8:0d:9f:dc:14:24:df:dc:
33:bc:27:83:da:16:11:c4:dc:c0:c6:9a:13:7b:2d:4a:63:01:
02:e4:22:70:33:a5:b5:88:59:85:6d:90:f4:e7:91:7f:fe:8f:
43:9e:1f:fa:18:55:95:eb:10:4a:06:85:96:c6:59:52:80:4d:
b9:71:36:84:2e:6c:0e:0a:cc:af:f5:cc:3a:35:dd:76:8e:70:
0f:84:30:ce:71:65:43:83:30:28:20:3a:72:44:61:50:5b:6c:
f5:e6:52:3b:6e:d1:30:b3:45:b5:cb:86:55:16:a8:4e:c8:bb:
cd:c1:fa:c3:e0:3b:ad:ed:d1:3a:77:aa:4f:76:fa:93:b6:52:
e5:5b:36:f2:b6:42:7d:c1:25:40:c8:24:f6:e9:f6:b0:f3:db:
ec:45:fb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:49:08 2026 by rpki-client