Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS270014.roa
File: AS270014.roa (raw, json)
Hash identifier: oj93TlfCzkVtnUKVHATHyuk5de3sbkGLijvjGkQcDnY=
Subject key identifier: EB:D9:5C:A4:B4:82:EF:0A:84:0B:15:F6:06:1B:DD:F3:D5:75:F1:7F
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 159B0AB14CCAA4A015AF505C78A0BA012E76AAFC
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS270014.roa
Signing time: Wed 28 Oct 2026 00:01:17 +0000
ROA not before: Tue 27 Oct 2026 23:56:17 +0000
ROA not after: Wed 27 Oct 2027 00:01:17 +0000
asID: 270014
IP address blocks: 191.96.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:9b:0a:b1:4c:ca:a4:a0:15:af:50:5c:78:a0:ba:01:2e:76:aa:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 27 23:56:17 2026 GMT
Not After : Oct 27 00:01:17 2027 GMT
Subject: CN=EBD95CA4B482EF0A840B15F6061BDDF3D575F17F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b4:c1:63:c1:5a:97:d6:7b:9f:43:48:c9:fb:
d4:11:9f:85:c1:41:94:53:dc:b0:68:6d:0b:19:41:
74:b5:e1:1b:aa:fe:93:be:ca:58:13:99:7e:1b:a7:
fb:39:7e:2d:39:4c:59:8a:7e:a8:f4:f4:73:6d:3b:
0e:02:6e:1a:49:8c:55:8c:6c:ce:9b:b8:b6:28:93:
c1:8d:d7:fc:11:bc:04:1f:51:53:96:c9:b4:c6:1e:
8b:f0:c0:6a:b4:43:d9:2d:d5:10:27:55:a7:d3:e6:
a2:62:47:be:3f:c9:39:bd:99:d7:7f:18:f5:ca:15:
57:34:13:8b:28:0f:67:cf:50:17:bf:32:49:68:4b:
29:e4:1f:13:78:07:6e:60:ea:f2:9d:9c:56:c8:29:
e7:63:fc:37:84:c0:af:1f:ea:1c:43:1e:b0:0c:d4:
55:70:11:ab:9e:9a:a4:5f:ef:50:db:8f:4d:29:ed:
be:f0:47:90:f3:7d:92:89:18:69:68:8a:aa:ea:81:
4e:a6:16:2b:e9:a9:90:2d:2f:7c:6d:61:ff:1a:16:
45:99:28:fc:d1:39:4e:12:41:24:bc:71:cf:7c:fc:
5b:86:88:ca:87:8b:02:d5:6d:fa:48:1e:d1:f2:e5:
ef:91:73:2f:3b:e2:50:fc:a5:f3:e8:ec:e8:49:ba:
84:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D9:5C:A4:B4:82:EF:0A:84:0B:15:F6:06:1B:DD:F3:D5:75:F1:7F
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS270014.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.184.0/24
Signature Algorithm: sha256WithRSAEncryption
97:1f:dc:5f:c3:c5:6e:41:35:0b:e3:2c:12:b7:fe:60:c4:09:
ee:98:a8:07:fd:57:4f:21:e2:f3:be:d6:47:fd:02:39:47:96:
40:40:0a:fa:a5:1a:90:c9:f8:e5:93:35:b4:17:0a:35:de:f7:
78:a4:fe:0a:b7:95:0f:4d:26:97:d3:fb:4a:1a:8d:cc:00:8b:
a9:70:63:be:8e:4c:25:c4:8a:30:06:4b:7d:26:9c:17:af:62:
6e:45:e6:bf:85:c7:bc:f3:de:db:cc:9a:73:da:9f:ba:11:4d:
f2:8f:6b:4d:f6:c2:79:77:e9:4b:de:94:98:01:ed:73:25:c3:
5f:c2:8d:92:9f:94:3e:8d:91:cb:ca:fe:aa:66:52:9e:5e:41:
a7:f9:5c:d6:79:29:91:40:96:d3:14:80:0d:f6:cc:91:81:90:
5b:03:cd:22:ef:24:ca:b8:66:d6:09:5f:c9:6e:ec:df:44:b6:
f2:e2:4f:c7:53:f9:ff:78:e3:80:0a:37:60:da:22:02:74:fc:
99:ac:ac:30:33:50:61:c5:cf:2a:48:a5:0b:a4:2a:e3:ec:c3:
f7:2b:fb:62:dc:ee:c9:74:6a:bb:b4:fc:81:b6:4a:72:08:a8:
78:7f:72:fd:79:5b:96:71:85:1e:f8:20:d0:17:27:17:fe:98:
59:0d:ca:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:54:46 2026 by rpki-client