Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS274389.roa
File: AS274389.roa (raw, json)
Hash identifier: U2dRKoxJPf4MI4cl1xQaBx0wmZ5wE+01Ue9MPbieDHA=
Subject key identifier: 3E:C9:0E:10:D8:CE:21:3C:A1:3A:DE:23:A3:BC:AF:B6:5F:CA:3C:DB
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2B2280EFE770A19749E98C46782A93FAC6DE156C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS274389.roa
Signing time: Sun 16 Aug 2026 11:11:23 +0000
ROA not before: Sun 16 Aug 2026 11:06:23 +0000
ROA not after: Sun 15 Aug 2027 11:11:23 +0000
asID: 274389
IP address blocks: 167.148.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:22:80:ef:e7:70:a1:97:49:e9:8c:46:78:2a:93:fa:c6:de:15:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 16 11:06:23 2026 GMT
Not After : Aug 15 11:11:23 2027 GMT
Subject: CN=3EC90E10D8CE213CA13ADE23A3BCAFB65FCA3CDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:40:6a:d0:31:ac:4f:58:37:6e:bb:78:f1:9c:
ce:a0:4b:4c:f1:7a:99:24:bf:da:31:48:03:52:03:
f6:f2:72:7e:97:8b:86:43:44:c8:93:11:ff:86:94:
05:45:43:42:62:fc:5f:6b:da:d0:f5:e3:82:f4:35:
aa:64:3d:35:2e:7c:50:7b:f3:08:a4:7f:56:0e:e6:
4b:65:f2:df:cd:d4:27:f4:31:ec:13:bc:6e:5c:5e:
e7:ce:6b:68:e5:fd:93:39:bc:9c:7e:cb:0b:28:5a:
2c:b4:8c:4d:6a:a0:96:6a:b9:63:e7:b0:95:28:0d:
34:0f:ca:ff:63:73:d9:99:ee:26:f7:85:b5:b0:a0:
ff:d3:d4:c7:cf:22:7e:77:72:24:14:10:6f:7d:54:
13:48:ae:9f:7c:97:24:de:19:cf:cb:21:fd:4c:1a:
a3:81:17:5e:fd:79:ba:57:c0:73:ce:d8:a5:bd:25:
1c:ae:8f:d6:c2:9b:a2:3a:0f:4a:1a:7b:b3:d9:d7:
02:1b:53:c9:3d:27:85:27:0b:6b:f0:46:38:32:31:
19:d2:84:86:14:fe:da:30:00:82:50:d0:40:41:3f:
3c:d4:5a:d2:bc:e2:66:d0:2b:8a:69:d5:17:64:10:
9c:9c:87:2d:e9:cf:5d:e4:7f:88:4d:ba:a4:48:58:
b9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C9:0E:10:D8:CE:21:3C:A1:3A:DE:23:A3:BC:AF:B6:5F:CA:3C:DB
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS274389.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.82.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:1c:77:a0:04:c7:86:5b:e9:48:75:7a:c6:6a:16:bf:cb:7e:
a7:cd:3f:16:ae:29:44:2a:87:f6:24:29:8f:19:cc:e7:9c:2e:
df:f0:98:3e:05:dd:7b:82:bb:24:28:af:a0:d7:7a:55:db:36:
d0:d8:e3:62:02:10:e3:5e:c4:1d:19:50:e0:9a:69:5d:ae:16:
d3:d0:8a:99:e5:b0:78:47:00:24:58:19:c1:ae:63:ed:89:f6:
e7:20:ab:af:8f:47:98:2f:36:2a:bd:19:25:b0:79:66:58:90:
fd:52:6a:12:71:52:f5:51:7f:6f:d6:b7:ff:6b:07:43:a6:2f:
6c:14:7c:e6:af:d2:c0:9d:41:b6:dc:69:3c:db:9b:ba:01:15:
7e:47:20:e2:74:3e:f1:88:fa:07:2d:21:d6:9e:0e:00:11:62:
9d:9c:af:61:18:71:2c:4b:62:b2:ee:44:eb:ac:a5:41:10:64:
7c:22:f3:86:17:e8:ed:e9:60:73:b7:aa:e1:80:b1:4a:17:12:
00:1e:fc:d5:f4:3c:d8:c8:e6:c8:e7:f6:f5:03:7e:30:fc:02:
64:54:e9:b9:1d:85:c3:6f:17:97:84:b9:ae:83:96:20:5e:da:
8b:ab:aa:4d:4f:19:f6:3e:62:81:c2:a7:d8:7b:dc:65:0a:6c:
41:ea:74:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:50:00 2026 by rpki-client