Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS274245.roa
File: AS274245.roa (raw, json)
Hash identifier: OeLsau5HPNRaoEj2kGXoBoVwFYbnKEIzh2N0p3m2GW4=
Subject key identifier: FD:77:D5:CD:C8:B0:AC:69:B6:1E:EB:E8:04:C0:DF:B9:0E:A5:B3:FE
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4AB0F02DA2E668C34789A5EF5601A00AE81E7A37
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS274245.roa
Signing time: Sun 01 Nov 2026 16:16:35 +0000
ROA not before: Sun 01 Nov 2026 16:11:35 +0000
ROA not after: Sun 31 Oct 2027 16:16:35 +0000
asID: 274245
IP address blocks: 78.105.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:b0:f0:2d:a2:e6:68:c3:47:89:a5:ef:56:01:a0:0a:e8:1e:7a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 1 16:11:35 2026 GMT
Not After : Oct 31 16:16:35 2027 GMT
Subject: CN=FD77D5CDC8B0AC69B61EEBE804C0DFB90EA5B3FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a2:15:97:08:a2:7e:68:00:2d:f3:42:d7:00:
f2:af:0c:af:9b:5e:3e:6a:dc:9e:0d:c3:4e:4b:27:
9a:60:3f:af:ee:6b:fe:f5:bc:f2:2e:a7:b3:bd:ed:
40:7a:73:d9:29:e6:40:c0:b7:29:c4:b4:df:8f:5b:
0f:05:34:69:a0:1c:b0:5a:ba:f5:65:53:5c:d4:29:
eb:da:5c:b2:95:a2:2d:03:23:a2:60:1d:ac:75:95:
d3:8e:44:ae:5d:f1:d7:a6:33:24:15:f2:62:41:22:
f9:0f:57:ed:d1:c1:6e:36:e3:97:d4:e3:60:f5:b8:
95:62:90:3d:f5:df:1a:6b:53:6c:00:1d:95:97:26:
54:76:ec:5f:0d:76:46:78:d5:60:30:4c:9e:53:96:
9a:ff:79:f4:6c:15:77:1d:95:ce:ed:d4:a5:9f:8c:
c9:1b:db:38:03:b8:ad:87:c5:2c:95:45:69:8a:0b:
cd:49:cf:e8:cf:92:08:4d:2f:92:28:d6:08:ad:d5:
9d:78:cf:ce:8c:b0:39:9f:23:e9:a6:62:a0:23:55:
de:87:7a:d2:5d:cd:04:cc:8c:92:ec:63:52:d0:03:
d7:b9:0b:06:3f:cd:22:a1:c0:a9:e5:04:b8:ba:4d:
51:77:69:c7:45:ae:14:b8:10:42:68:90:a4:33:d4:
ab:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:77:D5:CD:C8:B0:AC:69:B6:1E:EB:E8:04:C0:DF:B9:0E:A5:B3:FE
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS274245.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.149.0/24
Signature Algorithm: sha256WithRSAEncryption
24:1b:c0:49:92:cb:e3:c0:15:1e:c0:88:2b:c8:70:26:64:cf:
8e:29:e9:14:9f:df:6a:67:82:76:79:9b:4e:41:2b:e2:a7:4f:
e3:20:aa:ef:88:ad:7a:c9:2f:81:29:fe:a1:b2:c3:4d:66:02:
bd:eb:0d:17:b8:de:ce:2d:e9:de:f1:25:ae:22:93:c6:44:92:
04:5e:b8:6f:05:14:5e:cd:4c:66:56:7a:20:02:a2:a3:ed:09:
e1:b7:13:40:6c:bc:fe:9f:1c:4b:ff:24:5f:dd:d8:b6:72:ef:
b0:c4:a7:64:57:ed:51:c0:39:27:66:42:ca:de:37:a9:33:63:
69:73:29:a0:3d:00:8d:d7:f4:c9:02:0c:56:1a:09:e8:20:20:
84:c7:a4:cb:7d:7c:de:ab:7b:0f:18:29:7a:ea:fe:af:84:b9:
ee:b3:a5:45:de:d6:3f:e2:c7:a6:0d:f6:80:7d:bb:51:13:1f:
67:89:61:8a:47:5d:e9:2c:33:48:70:d0:d8:74:c2:20:af:74:
ed:31:0c:4e:16:c3:16:ea:ef:f4:7c:1f:70:05:70:eb:23:4f:
6b:7c:8b:ed:e6:e6:d7:89:80:9f:90:e0:5a:22:6f:03:ce:00:
f0:6c:80:de:e7:8b:53:4e:55:3f:95:18:8a:4f:44:4b:2d:50:
4c:ad:32:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:40:39 2026 by rpki-client