Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS26769.roa
File: AS26769.roa (raw, json)
Hash identifier: f0RiPHnoapm/SlDU6VKYGYxytqrqcP2snEY9T4NEHsQ=
Subject key identifier: D3:C9:EA:76:A8:B8:A9:D1:37:0F:79:5A:41:FA:55:94:F6:26:1F:95
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 57E813BA4854F412A822622299F9A1F36A47A000
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS26769.roa
Signing time: Sat 28 Feb 2026 09:09:00 +0000
ROA not before: Sat 28 Feb 2026 09:04:00 +0000
ROA not after: Sat 27 Feb 2027 09:09:00 +0000
asID: 26769
IP address blocks: 178.83.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:e8:13:ba:48:54:f4:12:a8:22:62:22:99:f9:a1:f3:6a:47:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 28 09:04:00 2026 GMT
Not After : Feb 27 09:09:00 2027 GMT
Subject: CN=D3C9EA76A8B8A9D1370F795A41FA5594F6261F95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:46:01:57:ad:f6:4c:1c:15:2a:70:ef:18:
9e:83:c3:35:24:b5:19:96:07:df:e1:db:b6:2a:f2:
64:bf:16:73:d1:73:8d:51:b2:37:c9:0d:97:f4:c3:
61:7a:44:40:a9:2b:28:96:a3:3f:19:a3:39:d2:bd:
3c:fe:4b:aa:37:85:6e:00:2b:5e:fa:68:19:8d:a2:
af:d2:6d:5e:b3:b6:fa:9d:f5:42:9f:1d:fc:6a:f6:
dc:67:70:2a:2d:77:fe:13:10:fe:de:da:ed:02:6e:
3f:77:af:57:ff:4b:da:87:86:cc:4e:21:47:79:ba:
e2:9b:0d:32:b9:10:fc:32:cf:3a:cd:39:95:c0:1f:
5f:57:ec:71:ce:fd:6d:10:93:b0:f3:9a:d9:21:64:
71:69:4e:6c:d3:e1:0a:b5:66:69:a1:14:e9:02:e1:
2a:89:0b:3b:10:c7:ea:ea:3b:47:ed:9d:fc:44:03:
47:e3:88:bb:5d:6a:81:5b:4b:e8:76:94:f2:f6:8a:
f7:7d:92:2f:54:f1:3c:bd:56:83:9b:71:d1:ce:7b:
f3:03:ac:a8:3a:ea:a1:5d:49:75:54:fa:79:9d:ec:
34:a5:8c:be:60:63:63:de:e0:35:20:f6:fa:d6:14:
c4:06:2e:3e:31:70:92:a3:95:b7:d2:b6:31:c8:83:
22:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C9:EA:76:A8:B8:A9:D1:37:0F:79:5A:41:FA:55:94:F6:26:1F:95
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS26769.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.144.0/24
Signature Algorithm: sha256WithRSAEncryption
22:67:b7:51:c9:34:4b:5f:83:56:48:ad:49:0d:90:d3:a1:24:
e1:ef:f7:8a:eb:d0:85:b2:aa:ac:f6:65:ec:ce:e8:b0:1b:aa:
c5:29:ad:a7:1f:8b:8a:45:2b:48:f5:be:7f:3e:eb:b3:5b:66:
1f:48:4b:3b:b4:c4:de:15:9d:e0:da:14:73:85:61:9b:25:dd:
ad:be:ee:30:2e:f3:27:a0:6d:3c:c4:4a:ff:16:b1:fb:f1:c2:
9c:48:18:7b:cd:ff:2f:70:68:1d:ce:e9:e6:6a:23:63:ce:0b:
8c:0e:ee:8e:58:06:93:1a:a3:59:bd:e2:a4:7d:6a:9f:08:52:
f2:fb:72:bb:87:93:aa:f3:98:61:dd:78:6c:54:8c:9b:ec:66:
54:c8:ff:c0:c0:18:91:85:2d:e8:df:ad:64:c3:a2:69:98:ea:
dc:d8:b6:ff:6e:79:dc:55:2a:15:d4:60:35:31:a9:62:22:53:
ba:23:b6:3d:da:8e:c0:31:ea:39:ff:b0:89:99:9c:36:5c:21:
89:71:ef:c0:ce:94:6e:02:7a:40:0f:18:7e:a9:c4:53:f5:57:
33:81:5d:e8:53:2b:50:dc:76:ac:2b:d0:14:49:53:36:8a:95:
ab:99:a8:24:7e:9a:8c:0b:65:80:95:ff:d8:6a:60:07:11:cb:
e7:c4:bc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:37:48 2026 by rpki-client