Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS273824.roa
File: AS273824.roa (raw, json)
Hash identifier: 5V+OOMIzZgIGasjOMvcb/ixq8jhvaKlH3/B8/3uL7Hw=
Subject key identifier: 79:B2:9B:F7:13:FB:FE:53:A5:2A:28:A3:DC:C8:ED:A6:71:47:0F:EA
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5517945EDDA76EF72921B3D1DA2734D662DB0FF7
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS273824.roa
Signing time: Tue 10 Nov 2026 17:15:47 +0000
ROA not before: Tue 10 Nov 2026 17:10:47 +0000
ROA not after: Tue 09 Nov 2027 17:15:47 +0000
asID: 273824
IP address blocks: 82.27.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 15:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:17:94:5e:dd:a7:6e:f7:29:21:b3:d1:da:27:34:d6:62:db:0f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 10 17:10:47 2026 GMT
Not After : Nov 9 17:15:47 2027 GMT
Subject: CN=79B29BF713FBFE53A52A28A3DCC8EDA671470FEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9a:dd:16:65:12:6e:99:69:2a:75:3a:bd:f3:
91:4e:4d:45:1f:1d:4e:ff:40:1b:a4:bb:62:6c:25:
bb:b2:3b:72:d2:8a:1c:5c:29:a8:65:8d:14:d8:76:
d5:37:72:08:44:1c:e7:eb:20:7b:22:17:27:f8:09:
af:4b:d0:b5:6a:5a:2f:f6:17:5d:7c:7f:fb:b2:34:
d7:b3:6f:88:10:21:17:1c:00:6a:d6:bb:7f:c3:4a:
b2:5c:a3:94:1e:74:ba:c8:a2:59:39:1a:b6:42:db:
3d:94:d0:49:3b:27:72:c4:17:d0:da:d5:9d:d5:ff:
9d:23:56:86:34:9f:78:20:0c:d7:26:81:9e:65:23:
9d:cd:a6:48:ec:64:04:88:34:88:5f:3b:61:50:7b:
42:b3:cb:df:6a:a2:24:1b:b7:82:23:02:91:5d:65:
04:0c:5b:bc:e8:94:db:a0:00:0b:d6:27:c9:7b:f1:
39:fa:0c:d4:93:2f:f3:38:28:08:d6:79:39:63:ca:
2d:65:ef:7f:96:eb:02:a1:81:44:02:80:5b:aa:72:
71:76:18:77:17:1f:54:91:e2:b4:6d:e9:5b:a6:37:
35:be:d2:73:73:b9:d8:e8:01:86:9b:12:d2:58:f1:
1b:40:3f:66:aa:31:55:41:7f:88:c9:53:59:59:fa:
ac:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B2:9B:F7:13:FB:FE:53:A5:2A:28:A3:DC:C8:ED:A6:71:47:0F:EA
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS273824.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.136.0/23
Signature Algorithm: sha256WithRSAEncryption
35:b8:fa:62:a8:fc:5d:a3:66:64:a3:56:fa:b6:43:da:9f:d7:
90:63:a0:be:89:49:a5:5d:81:bb:a5:37:17:15:03:9e:c9:a2:
a4:2b:a1:a3:88:fd:32:72:45:94:f9:e6:5d:13:aa:1d:cd:09:
1d:97:09:0f:b1:2f:39:4a:89:6b:dd:dd:18:7c:8e:99:95:87:
b1:4a:94:47:c3:ea:3d:28:92:11:70:98:e5:de:31:01:12:de:
65:c8:9b:3f:fc:1f:25:90:e3:bc:74:07:8c:88:c3:ca:a5:1c:
fb:26:2b:d2:d1:48:03:cc:a3:1b:05:2e:d0:a7:90:d5:70:c7:
44:03:34:c1:ae:ce:74:be:16:db:2e:ad:9b:af:67:19:ed:90:
ba:0c:4b:f1:34:44:a5:21:a0:7d:0a:e0:83:55:84:c1:53:2f:
09:f0:66:4d:e1:89:f7:75:7c:58:a5:28:ad:8c:91:ce:93:43:
c8:5e:1e:df:cd:d1:ed:ea:df:13:95:bc:b0:90:24:0b:47:7b:
6c:cb:b8:63:15:ea:48:70:f3:27:68:d7:8b:61:ca:58:0e:07:
21:4f:fb:08:82:3a:5c:89:d4:c4:96:8f:34:fa:3a:3b:de:f7:
1d:59:21:d3:23:86:69:51:b5:2e:25:44:c9:fb:98:22:ee:b1:
c1:06:09:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 19:44:13 2026 by rpki-client