Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS272015.roa
File: AS272015.roa (raw, json)
Hash identifier: ArKvizpsNCTPEDdRjEjgCbHzvVYKpq5/J3NHDckq/VQ=
Subject key identifier: D0:D3:25:9D:D6:18:37:6F:2F:64:DA:AB:41:5F:A1:56:08:23:19:6C
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 61BB7EBA1F87B885FD1E4D10308D3F2349111239
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS272015.roa
Signing time: Tue 22 Jul 2025 15:36:59 +0000
ROA not before: Tue 22 Jul 2025 15:31:59 +0000
ROA not after: Tue 21 Jul 2026 15:36:59 +0000
asID: 272015
IP address blocks: 45.88.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:bb:7e:ba:1f:87:b8:85:fd:1e:4d:10:30:8d:3f:23:49:11:12:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 22 15:31:59 2025 GMT
Not After : Jul 21 15:36:59 2026 GMT
Subject: CN=D0D3259DD618376F2F64DAAB415FA1560823196C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e9:8a:28:b9:a8:48:38:ef:a8:2c:15:d9:d8:
2b:ff:c4:31:85:d1:41:31:f5:75:5e:dd:13:aa:69:
06:20:7e:42:32:0b:9c:41:6e:33:48:15:b8:80:d3:
07:30:a2:12:ae:db:de:a9:47:59:dd:4d:05:64:f9:
56:44:34:42:d5:17:f2:0c:ff:85:44:91:e2:50:2f:
1f:04:e6:1a:6b:f6:dd:97:fe:db:e1:14:0c:b1:96:
3d:ef:4f:f6:f1:02:df:c3:19:70:c5:6b:d3:44:30:
b7:f0:26:c9:16:6d:8e:97:e4:27:cc:55:f3:a1:8f:
d2:a1:2e:a4:fb:f9:e7:90:ba:3b:18:05:38:b7:57:
c3:af:ba:1d:67:8b:d3:82:64:83:72:ab:94:8a:3b:
d7:08:86:e0:66:2f:19:fe:bb:7f:d8:78:b3:c2:b5:
eb:4d:31:b4:b8:42:05:47:2f:df:7a:41:0b:a1:66:
59:3d:54:71:5c:dd:c9:24:47:e1:32:bd:31:77:b8:
5a:d3:97:f6:55:44:85:0f:59:b4:44:b2:17:3c:d9:
7c:e3:54:c8:ac:79:60:8b:5c:cb:04:82:34:44:45:
99:fa:ff:6d:fe:39:96:6c:4c:d6:88:50:a7:25:08:
d3:1c:18:a9:be:f0:af:17:7a:cf:41:b8:86:b2:31:
6b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D3:25:9D:D6:18:37:6F:2F:64:DA:AB:41:5F:A1:56:08:23:19:6C
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS272015.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.99.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:08:cf:03:4c:92:30:79:cc:a8:76:43:ec:1b:da:36:8d:0e:
95:3a:88:06:d1:d6:d5:90:e1:a0:9a:34:b0:e4:11:5a:a8:b8:
29:65:1b:fd:f3:52:9e:5f:36:06:a6:74:e1:4a:25:44:e3:bf:
ab:08:8e:3e:cd:3a:3e:e8:f3:df:bf:c5:6f:32:9e:a1:89:08:
fc:fa:23:83:c1:84:12:a8:b3:08:71:4d:b6:af:a2:92:05:8d:
25:15:84:3f:83:dd:e3:75:de:a8:9c:9b:97:1c:ef:b6:95:ff:
77:97:f0:e0:31:fc:d4:44:ae:f7:55:2c:0e:06:97:2d:11:26:
75:a9:b6:a1:9d:ef:c2:6a:05:bf:3c:ec:0e:c5:75:44:0f:6c:
98:4e:40:f0:9b:68:cf:72:85:d6:2b:4c:60:0c:d5:8a:64:39:
28:96:0d:a0:da:cf:bc:4c:3a:4f:23:17:fb:8d:5f:c4:b3:6a:
8e:6c:c2:2d:a6:d3:87:0a:26:00:11:eb:4b:76:b3:1e:f1:a8:
c0:cf:ad:52:bb:00:9c:4a:3e:c9:53:96:1d:bf:89:a5:70:7f:
ff:03:41:f8:66:99:1c:bf:b5:17:cb:9b:25:4b:34:48:03:09:
f9:30:49:42:e8:93:de:f5:18:73:07:c8:0f:04:03:d4:05:1a:
ae:68:f5:53
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUYbt+uh+HuIX9Hk0QMI0/I0kREjkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNTA3MjIxNTMxNTlaFw0yNjA3MjExNTM2NTlaMDMxMTAvBgNV
BAMTKEQwRDMyNTlERDYxODM3NkYyRjY0REFBQjQxNUZBMTU2MDgyMzE5NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz6YoouahIOO+oLBXZ2Cv/xDGF
0UEx9XVe3ROqaQYgfkIyC5xBbjNIFbiA0wcwohKu296pR1ndTQVk+VZENELVF/IM
/4VEkeJQLx8E5hpr9t2X/tvhFAyxlj3vT/bxAt/DGXDFa9NEMLfwJskWbY6X5CfM
VfOhj9KhLqT7+eeQujsYBTi3V8Ovuh1ni9OCZINyq5SKO9cIhuBmLxn+u3/YeLPC
tetNMbS4QgVHL996QQuhZlk9VHFc3ckkR+EyvTF3uFrTl/ZVRIUPWbREshc82Xzj
VMiseWCLXMsEgjRERZn6/23+OZZsTNaIUKclCNMcGKm+8K8Xes9BuIayMWsfAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU0NMlndYYN28vZNqrQV+hVggjGWwwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjcyMDE1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVhj
MA0GCSqGSIb3DQEBCwUAA4IBAQC2CM8DTJIwecyodkPsG9o2jQ6VOogG0dbVkOGg
mjSw5BFaqLgpZRv981KeXzYGpnThSiVE47+rCI4+zTo+6PPfv8VvMp6hiQj8+iOD
wYQSqLMIcU22r6KSBY0lFYQ/g93jdd6onJuXHO+2lf93l/DgMfzURK73VSwOBpct
ESZ1qbahne/CagW/POwOxXVED2yYTkDwm2jPcoXWK0xgDNWKZDkolg2g2s+8TDpP
Ixf7jV/Es2qObMItptOHCiYAEetLdrMe8ajAz61SuwCcSj7JU5Ydv4mlcH//A0H4
Zpkcv7UXy5slSzRIAwn5MElC6JPe9RhzB8gPBAPUBRquaPVT
-----END CERTIFICATE-----
Generated at Mon Aug 4 07:42:58 2025 by rpki-client