Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS274325.roa
File: AS274325.roa (raw, json)
Hash identifier: ShsyZSepQYP+TjoaBWAMAkUhHQWEsI378L5LSMRCbFw=
Subject key identifier: 14:67:61:C2:53:EB:46:78:3B:03:F0:6C:90:51:D3:A7:FE:CF:47:85
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7FF1554AD6BF35B7B67FE6D7EA2A183D6A90C191
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS274325.roa
Signing time: Fri 02 Oct 2026 15:48:39 +0000
ROA not before: Fri 02 Oct 2026 15:43:39 +0000
ROA not after: Fri 01 Oct 2027 15:48:39 +0000
asID: 274325
IP address blocks: 84.75.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:f1:55:4a:d6:bf:35:b7:b6:7f:e6:d7:ea:2a:18:3d:6a:90:c1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 2 15:43:39 2026 GMT
Not After : Oct 1 15:48:39 2027 GMT
Subject: CN=146761C253EB46783B03F06C9051D3A7FECF4785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:01:38:88:62:e7:b0:24:f5:32:5e:77:f1:72:
17:a8:a0:af:c8:6b:f8:4d:16:e3:32:dc:20:59:cd:
38:ec:64:30:e9:1a:fa:4f:7b:f0:91:6f:fe:5c:66:
aa:f3:95:91:22:63:ec:11:b9:9e:ac:56:52:ef:ea:
2b:6c:61:48:9c:80:04:12:8c:94:13:b3:3a:56:68:
60:41:4d:a3:15:20:52:bf:da:91:99:8b:e7:e8:6d:
af:2b:b0:b3:42:83:d8:e2:66:9e:e4:f9:18:4a:d0:
38:1f:5b:1a:d4:0d:19:c7:2a:17:1c:d5:54:00:40:
f1:00:fd:22:dc:2e:57:1f:d4:b1:e9:a8:bf:21:e4:
27:0b:87:de:df:68:b6:8f:06:8a:e4:ea:41:8d:7a:
43:d8:70:44:d5:f4:eb:ac:3d:54:e9:ad:bf:fa:16:
a9:5c:5f:61:39:80:1e:ab:49:a0:ba:1b:4b:c4:4a:
fd:65:3b:cd:fe:c5:93:1a:d7:cc:b3:38:86:97:ac:
52:a2:fb:9a:bb:8c:60:d3:75:b3:ee:d3:30:a1:e3:
04:1c:76:47:19:50:11:25:95:ac:d3:b1:96:4e:66:
f8:51:24:37:3b:13:5d:bf:24:bc:ec:aa:14:25:af:
67:5e:06:82:4a:02:f1:da:3e:f7:26:04:8a:3a:4f:
a9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:67:61:C2:53:EB:46:78:3B:03:F0:6C:90:51:D3:A7:FE:CF:47:85
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS274325.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.139.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:93:d4:9a:38:2d:0e:51:e7:6b:1a:ee:36:b8:72:f1:41:61:
ad:d1:ca:65:17:a9:c6:2a:81:6a:bd:fc:af:4b:4c:3e:e3:39:
ee:1f:c6:72:8f:a1:d4:73:28:ec:29:0b:72:45:0b:84:fb:2c:
e3:ce:ce:13:00:bf:34:a3:43:4a:00:57:e4:b7:65:fb:70:ac:
9a:ec:13:10:0f:29:b0:73:51:f0:7a:56:52:e6:05:b4:68:d1:
f1:38:2a:dd:10:04:a0:46:ac:f0:2c:d6:7d:62:75:66:22:b9:
1b:6a:df:17:af:08:60:fd:74:54:98:af:43:66:a9:6a:f3:b2:
42:4c:b1:29:96:d3:18:e8:9b:9f:53:50:8e:60:90:54:15:e0:
7c:72:64:1d:b2:8b:9a:b5:11:7e:c8:d5:2b:60:46:f4:9d:4b:
d2:41:b4:c9:41:4f:a0:e1:38:98:cd:e3:54:ae:b2:fb:f8:54:
b7:ef:ab:03:a1:d6:e6:d0:fd:01:76:0c:51:e5:f5:8e:b8:81:
91:26:8c:88:31:4f:49:9e:38:43:71:5e:5b:25:27:bc:75:2a:
e7:17:c5:b3:2c:15:63:b6:48:9b:29:9e:6f:aa:45:a6:d5:0f:
bf:0a:61:54:11:ee:06:19:46:e2:d9:df:7a:2c:03:74:c6:21:
f3:40:77:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:51:06 2026 by rpki-client