Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS273508.roa
File: AS273508.roa (raw, json)
Hash identifier: YkaC+vGetuIqv1OW4ej+waUokbZeAX+y9KUYLsY0XZQ=
Subject key identifier: 6A:2C:B2:3B:21:4D:F9:44:A4:1F:3B:71:82:47:AB:9B:0D:57:58:2C
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 65C9FA4B470117A5C21672567B6E94C2D155E8F1
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS273508.roa
Signing time: Fri 08 May 2026 18:47:11 +0000
ROA not before: Fri 08 May 2026 18:42:11 +0000
ROA not after: Fri 07 May 2027 18:47:11 +0000
asID: 273508
IP address blocks: 92.112.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:c9:fa:4b:47:01:17:a5:c2:16:72:56:7b:6e:94:c2:d1:55:e8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 8 18:42:11 2026 GMT
Not After : May 7 18:47:11 2027 GMT
Subject: CN=6A2CB23B214DF944A41F3B718247AB9B0D57582C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:05:6d:93:be:0b:10:e6:35:a5:06:1b:6d:
5d:ea:ed:00:8e:e9:88:d6:ed:f2:38:a9:8f:50:ea:
a8:48:84:dd:a5:8d:a4:6d:53:12:49:2d:66:28:a3:
4e:e2:a8:55:ce:91:55:ec:0b:1a:4f:5a:3f:c2:e4:
f8:41:1f:3d:93:c9:d6:eb:ff:9a:a3:8b:cd:3a:44:
98:ab:dc:eb:86:70:ac:62:af:27:23:37:25:41:34:
f6:64:83:db:2e:9d:d1:de:64:b1:1d:2e:5c:6c:0b:
34:de:e1:af:c9:2d:5a:c4:99:dd:68:82:46:6c:a3:
78:5c:a9:72:b1:b6:bf:7a:2f:34:69:ba:41:30:66:
f7:c4:b0:15:0b:de:da:ef:74:39:c1:0a:6a:26:0d:
44:56:43:16:c0:b7:07:88:17:fc:f4:c8:25:ad:22:
aa:74:69:a4:e5:05:c3:cc:81:da:b6:c8:39:00:d1:
46:3f:da:67:b0:ce:b5:4b:5c:b0:8d:73:7e:3b:7f:
30:0a:d4:11:ec:be:b2:b6:f1:48:67:3f:3e:2b:61:
cf:20:56:2e:cf:3b:eb:37:e1:52:27:54:9d:9d:09:
42:e2:b3:47:a3:64:34:74:60:bb:67:8a:c6:ac:be:
3b:df:ab:fb:e6:7b:39:ef:8b:07:c8:01:08:6a:5e:
54:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2C:B2:3B:21:4D:F9:44:A4:1F:3B:71:82:47:AB:9B:0D:57:58:2C
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS273508.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.60.0/24
Signature Algorithm: sha256WithRSAEncryption
61:41:78:de:41:d4:6b:f4:75:4d:cd:73:48:f9:fb:1e:78:33:
f8:ab:64:38:54:34:6b:2e:f7:21:41:a5:70:07:2a:33:9b:ad:
d4:17:91:0f:0a:de:97:cc:c6:dc:5a:6b:2b:80:40:5a:9e:99:
ba:cb:af:88:a2:49:da:1a:de:b6:3a:6a:6c:0e:cf:55:4a:c2:
a3:d1:32:e6:a3:65:ae:21:b5:f2:a0:33:e6:3b:6d:bc:96:4a:
c0:48:7d:d2:0b:63:64:a3:96:5c:aa:03:66:bf:d7:0c:32:75:
62:b3:08:7f:e9:23:85:67:84:23:65:6e:87:ef:d2:71:bb:b9:
e3:ab:e6:d5:3b:87:c9:cf:10:1a:e4:79:4f:f7:b1:9a:08:b3:
35:69:6e:18:fa:c6:b3:89:4f:90:d0:cd:4b:7c:f3:b9:bd:ae:
55:4a:b2:4b:a0:2d:fc:dc:69:fd:63:87:2f:c0:1d:ed:b7:69:
14:68:8f:a0:19:b8:cf:69:d2:88:b2:89:6d:0b:b1:90:35:da:
0b:11:9c:f9:a3:08:82:7f:12:6f:b6:06:a7:8b:08:4e:5c:fd:
f5:26:34:a4:a2:ba:99:33:4c:35:47:9b:b9:86:ea:a2:41:9b:
db:eb:f1:40:9c:ed:a7:f4:0c:8f:a7:35:04:fc:f1:12:a6:b0:
2e:18:08:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:08:50 2026 by rpki-client