Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS271965.roa
File: AS271965.roa (raw, json)
Hash identifier: bU2g/92JZbX4z9ItluM90jTGASl+6d/6guSexB4caCY=
Subject key identifier: A2:CF:C9:9F:70:1E:B0:59:E9:5B:EB:09:85:0F:B7:4F:85:38:CE:77
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2D6EE3F7184CD72F49721A51D37EFCF251D422B3
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS271965.roa
Signing time: Wed 08 Apr 2026 15:47:03 +0000
ROA not before: Wed 08 Apr 2026 15:42:03 +0000
ROA not after: Wed 07 Apr 2027 15:47:03 +0000
asID: 271965
IP address blocks: 191.101.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:6e:e3:f7:18:4c:d7:2f:49:72:1a:51:d3:7e:fc:f2:51:d4:22:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 8 15:42:03 2026 GMT
Not After : Apr 7 15:47:03 2027 GMT
Subject: CN=A2CFC99F701EB059E95BEB09850FB74F8538CE77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b0:99:c5:2c:d3:7b:94:8f:61:ff:11:48:6e:
6c:21:99:7a:0a:a2:8d:87:02:ea:82:1d:d9:27:7f:
58:6b:29:bc:16:1b:4d:bc:fb:30:9c:62:57:82:dd:
23:a1:bf:e3:0e:85:ac:95:20:51:39:f4:ec:3d:ea:
35:7b:c1:e2:38:4a:5f:37:eb:2d:77:de:1d:4c:a3:
83:79:f5:12:27:cb:da:84:3d:32:d2:a8:c6:08:56:
cf:c3:a7:f5:ad:cc:57:c4:96:9b:6c:ca:a3:1b:c9:
36:a0:c2:90:aa:77:9f:72:60:b4:13:d9:1c:26:cd:
ed:20:1c:a5:6a:ef:af:ed:f7:fb:4a:bb:a7:0a:25:
48:84:25:99:7d:5c:f4:5a:2b:11:81:fb:51:0d:77:
2d:0b:29:bb:4c:a8:3d:6c:27:af:9b:a3:a6:7e:2b:
d3:63:e3:c2:89:8c:05:3a:55:4f:58:ab:57:8c:1d:
b0:dd:23:c6:2c:c4:e9:be:0e:00:25:2e:73:b7:04:
83:97:63:ac:ac:ff:0a:1d:58:7d:ed:fe:bb:3e:c4:
b2:7a:4f:c6:2d:4f:02:79:3c:48:5f:cf:3c:cf:08:
04:8b:83:81:73:ff:d0:15:2f:dd:c7:f7:16:0a:36:
13:5e:e0:68:60:6c:8f:fe:ad:97:f3:24:a6:71:93:
b7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CF:C9:9F:70:1E:B0:59:E9:5B:EB:09:85:0F:B7:4F:85:38:CE:77
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS271965.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.38.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:58:cb:4c:db:b8:b4:32:81:fc:a0:bc:9b:86:17:5c:91:e7:
21:79:e1:15:91:3c:46:64:b8:4c:ea:65:20:b2:e5:04:00:1b:
92:cc:fd:5a:8e:8c:69:76:8e:95:06:de:58:f9:cc:22:d3:c3:
9f:b3:41:92:ee:6f:2a:ca:e0:e1:74:40:8b:cb:8f:2c:43:c6:
3d:96:c8:01:4e:8d:05:28:8b:98:cd:e1:51:aa:bc:8d:38:f9:
fe:8f:3f:a0:f7:3b:de:74:9a:bc:40:b3:c8:26:5c:3e:aa:e6:
d8:87:49:ad:31:06:b7:28:d6:21:c8:01:76:b8:0f:4c:14:38:
6e:6a:2d:47:03:b2:ba:67:a4:6f:93:c5:8e:95:88:d3:a4:81:
60:18:54:c8:04:5c:4d:6d:6d:62:de:41:92:dd:5c:46:4d:31:
dc:da:cf:91:c4:8c:bb:32:eb:fe:cf:5c:fe:ef:c9:86:8a:64:
bf:73:bc:3d:87:97:2e:aa:a9:67:ba:97:c8:e7:1d:56:86:29:
1e:5c:99:6e:35:30:c3:15:aa:ce:93:26:8a:0a:ea:0a:15:62:
80:84:25:6f:e4:8d:1c:65:d3:20:0f:fc:b5:d0:6a:a4:3d:4b:
53:c9:3f:ae:22:c8:c6:6b:d6:37:d5:70:84:d9:49:f3:06:9e:
bd:cf:03:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:32:40 2026 by rpki-client