Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS274078.roa
File: AS274078.roa (raw, json)
Hash identifier: wghexJwuTbmhlKF32ZQWSv4CqrnDFIy4t8j0G9Q5Ktw=
Subject key identifier: 4A:64:EF:B4:87:BC:25:58:26:DA:99:73:81:64:D5:84:CE:7D:B6:D4
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 10D56E563BA066E2DF144F9E9306E5FE1A44F7D9
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS274078.roa
Signing time: Thu 26 Feb 2026 10:46:29 +0000
ROA not before: Thu 26 Feb 2026 10:41:29 +0000
ROA not after: Thu 25 Feb 2027 10:46:29 +0000
asID: 274078
IP address blocks: 82.27.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:d5:6e:56:3b:a0:66:e2:df:14:4f:9e:93:06:e5:fe:1a:44:f7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 26 10:41:29 2026 GMT
Not After : Feb 25 10:46:29 2027 GMT
Subject: CN=4A64EFB487BC255826DA99738164D584CE7DB6D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:11:68:36:3a:27:0b:4d:90:4e:3a:71:73:cf:
a1:cd:0f:97:03:9b:51:90:01:24:e8:61:51:f8:27:
88:d1:cf:7d:23:06:d5:4c:db:5c:11:f4:71:e6:ce:
75:1a:1b:ce:b7:78:8b:e2:d3:4c:85:a4:19:2d:02:
49:ee:8e:2e:34:a9:f4:2d:4c:62:2d:a0:a0:0b:ac:
c8:0d:ca:16:3b:39:6b:23:bb:0f:f2:76:8a:0c:3b:
4a:1c:b8:29:3f:d0:1f:f9:43:03:e0:b4:98:ed:42:
9d:b9:6e:e6:20:a2:c4:1e:d9:91:a7:00:37:58:c1:
b5:59:d6:63:be:ca:df:cb:4d:f4:d3:fd:e6:da:b7:
9d:98:b7:df:93:9c:db:9c:db:bc:90:f6:32:59:60:
46:5d:e5:dd:b4:58:21:74:84:fd:ea:3f:4f:5a:3e:
00:f0:e0:0e:fa:4b:d9:f9:b0:ff:11:9e:fd:2b:8d:
68:73:7b:00:00:2a:ac:12:8d:75:65:6c:bf:24:88:
fa:da:fe:f0:8e:8c:fc:3d:7b:32:69:62:60:9d:5b:
9e:e1:f7:56:41:03:70:ae:43:e8:26:6b:e5:bc:c5:
79:68:b3:49:b4:47:3e:c3:61:9a:6c:05:7d:92:a4:
ff:6c:e4:15:a3:ec:8e:10:e0:40:25:5e:47:26:5e:
d2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:64:EF:B4:87:BC:25:58:26:DA:99:73:81:64:D5:84:CE:7D:B6:D4
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS274078.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.102.0/24
Signature Algorithm: sha256WithRSAEncryption
17:04:dd:74:ea:fc:92:76:0a:4b:4e:c9:aa:c6:c5:a3:93:68:
ab:87:47:67:47:81:fb:3c:7d:de:76:f8:ad:e3:57:08:13:4e:
3e:8f:f8:dc:c2:d4:ce:7c:2e:de:76:3f:a5:fe:ff:d6:55:33:
d1:73:42:86:4d:a1:b5:35:26:73:b3:6b:84:62:4c:c1:1b:46:
7b:94:ab:ca:91:fa:3a:ac:c2:d0:27:a5:89:59:5f:dc:52:20:
43:87:e4:5c:36:77:f4:0f:df:e1:ad:72:07:9d:72:f6:e3:cf:
dc:12:a7:92:31:36:ae:aa:05:dc:08:2d:af:c3:a6:e5:e1:b6:
84:cb:7f:b5:fd:c0:dd:e4:da:21:01:d0:0d:db:75:91:36:4d:
d5:41:69:6c:2a:a4:b2:15:49:32:00:3c:ff:5a:6f:d3:4c:4b:
f8:3e:28:88:95:83:0c:ad:80:68:28:5f:34:87:11:2a:fc:37:
25:4d:46:fb:16:b3:3b:a7:8a:b8:8c:94:d7:fc:0b:fc:fa:13:
ad:32:fc:f7:85:f8:a6:72:ee:a0:cc:63:8e:28:44:b0:e2:79:
6d:64:78:a3:26:7e:e1:6f:26:3a:15:fb:f3:7d:6e:93:6d:04:
5f:19:7a:4b:a0:bd:75:ce:fe:b4:ee:1d:c1:07:57:62:b2:f1:
fe:b2:ff:8f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUENVuVjugZuLfFE+ekwbl/hpE99kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjAyMjYxMDQxMjlaFw0yNzAyMjUxMDQ2MjlaMDMxMTAvBgNV
BAMTKDRBNjRFRkI0ODdCQzI1NTgyNkRBOTk3MzgxNjRENTg0Q0U3REI2RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNEWg2OicLTZBOOnFzz6HND5cD
m1GQASToYVH4J4jRz30jBtVM21wR9HHmznUaG863eIvi00yFpBktAknuji40qfQt
TGItoKALrMgNyhY7OWsjuw/ydooMO0ocuCk/0B/5QwPgtJjtQp25buYgosQe2ZGn
ADdYwbVZ1mO+yt/LTfTT/ebat52Yt9+TnNuc27yQ9jJZYEZd5d20WCF0hP3qP09a
PgDw4A76S9n5sP8Rnv0rjWhzewAAKqwSjXVlbL8kiPra/vCOjPw9ezJpYmCdW57h
91ZBA3CuQ+gma+W8xXlos0m0Rz7DYZpsBX2SpP9s5BWj7I4Q4EAlXkcmXtIFAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUSmTvtIe8JVgm2plzgWTVhM59ttQwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjc0MDc4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhtm
MA0GCSqGSIb3DQEBCwUAA4IBAQAXBN106vySdgpLTsmqxsWjk2irh0dnR4H7PH3e
dvit41cIE04+j/jcwtTOfC7edj+l/v/WVTPRc0KGTaG1NSZzs2uEYkzBG0Z7lKvK
kfo6rMLQJ6WJWV/cUiBDh+RcNnf0D9/hrXIHnXL248/cEqeSMTauqgXcCC2vw6bl
4baEy3+1/cDd5NohAdAN23WRNk3VQWlsKqSyFUkyADz/Wm/TTEv4PiiIlYMMrYBo
KF80hxEq/DclTUb7FrM7p4q4jJTX/Av8+hOtMvz3hfimcu6gzGOOKESw4nltZHij
Jn7hbyY6FfvzfW6TbQRfGXpLoL11zv607h3BB1disvH+sv+P
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:01:51 2026 by rpki-client