Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS271982.roa
File: AS271982.roa (raw, json)
Hash identifier: Q+Imbl3Gv/e2NmF5GbD0S3ZlsRJTPbyjan9EqcKP2Bo=
Subject key identifier: B3:E5:8F:A7:CE:6A:EA:D6:93:3B:AE:37:FF:BA:49:F4:5E:B7:63:F0
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1D03E95FA80A519185FEA668F7927A8307A0F1DE
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS271982.roa
Signing time: Thu 16 Apr 2026 22:47:05 +0000
ROA not before: Thu 16 Apr 2026 22:42:05 +0000
ROA not after: Thu 15 Apr 2027 22:47:05 +0000
asID: 271982
IP address blocks: 155.117.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:03:e9:5f:a8:0a:51:91:85:fe:a6:68:f7:92:7a:83:07:a0:f1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 16 22:42:05 2026 GMT
Not After : Apr 15 22:47:05 2027 GMT
Subject: CN=B3E58FA7CE6AEAD6933BAE37FFBA49F45EB763F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f2:42:da:a9:65:48:67:d7:90:a0:c7:f7:27:
3f:43:ae:99:55:13:13:c2:d0:7a:cf:24:d6:99:d8:
44:8f:67:25:60:6d:d6:ee:28:6f:ef:a9:a2:41:b8:
fb:12:7e:68:d7:4c:93:0d:50:c8:58:73:42:22:81:
bf:92:80:1f:41:40:82:4b:94:3f:0a:11:5b:f4:05:
13:e1:cc:54:ad:55:4e:55:e1:45:9a:b7:e0:38:f8:
21:e4:a5:64:a8:7f:08:c4:da:bc:ab:3d:43:f3:0c:
6e:6a:2e:5a:4c:ac:07:c5:ae:af:38:e0:7f:91:76:
02:40:ab:ce:e1:f0:e3:20:a9:5c:21:ee:2a:24:64:
08:a5:c4:69:35:0f:9c:e3:7a:8e:7c:b3:85:18:73:
ac:61:b9:bb:1a:cb:3e:ee:1a:bc:1d:2d:8d:bc:0f:
d7:26:3b:02:30:ec:87:db:7c:4e:ea:09:34:2a:42:
35:bb:20:bb:9c:75:72:b8:be:ab:3e:85:f0:e5:3a:
d7:67:03:c6:39:79:e7:bf:79:5e:49:6f:4f:67:a9:
a4:ff:c9:51:52:73:07:14:22:d5:fd:a2:c8:cf:fa:
b0:e7:36:74:bd:3a:09:e5:5d:5a:32:90:a9:a3:5a:
28:85:7d:59:4a:5d:55:ee:19:ed:6b:45:7b:75:a5:
19:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E5:8F:A7:CE:6A:EA:D6:93:3B:AE:37:FF:BA:49:F4:5E:B7:63:F0
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS271982.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.170.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:dc:86:37:f2:80:52:8a:5d:9a:a5:57:ee:5c:33:ef:da:a7:
9c:f2:4d:f7:2a:1e:77:45:a7:63:f6:23:36:da:63:d6:c8:c7:
6f:27:3b:43:47:54:b7:51:2d:d0:5b:a2:a2:39:a9:0a:5c:e9:
a3:4d:7c:1e:f4:db:b3:11:03:72:6d:c3:bb:0c:0e:34:e7:37:
24:62:ca:55:7f:eb:dd:fe:4a:b1:5e:e8:2b:61:30:7c:5e:31:
74:d7:a7:11:b1:d5:7f:7d:13:09:8c:78:ba:b4:7b:a2:92:b0:
3a:59:be:2a:3d:42:87:3a:0a:fe:20:68:48:eb:03:94:e1:d4:
5c:3a:74:d1:65:51:5f:c0:3d:94:ab:c8:e9:34:b5:b2:ab:51:
df:3b:c5:cc:d8:90:6d:c6:95:90:fd:25:d0:73:b5:dd:e0:5b:
0e:74:56:71:4a:01:09:37:2e:90:ab:1f:dd:e9:c9:34:19:61:
1f:89:19:0e:eb:7d:4e:eb:29:5f:1f:2a:99:65:7b:bc:1c:9f:
da:18:6c:d4:05:da:fc:12:a8:f9:aa:4f:ec:9d:30:53:68:4f:
33:b8:b3:32:5c:7a:61:53:45:47:55:5c:94:78:2f:db:8d:fb:
c6:b8:05:ed:b3:79:f7:d8:58:05:b2:ef:5e:20:f2:c6:59:f3:
28:9c:6a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:04:03 2026 by rpki-client