Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS274913.roa
File: AS274913.roa (raw, json)
Hash identifier: Ao7vO8V6/btNh8Odim/ZViL2Re0BqUnGOG6Spnv+JPI=
Subject key identifier: 43:3B:21:4F:71:F4:FF:CA:64:24:8C:F4:16:E5:21:36:17:95:BE:AD
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 16F8B6B575F501647FF3DEDD132BEAAC9E49179A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS274913.roa
Signing time: Fri 23 Oct 2026 15:17:39 +0000
ROA not before: Fri 23 Oct 2026 15:12:39 +0000
ROA not after: Fri 22 Oct 2027 15:17:39 +0000
asID: 274913
IP address blocks: 84.75.246.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:f8:b6:b5:75:f5:01:64:7f:f3:de:dd:13:2b:ea:ac:9e:49:17:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 23 15:12:39 2026 GMT
Not After : Oct 22 15:17:39 2027 GMT
Subject: CN=433B214F71F4FFCA64248CF416E521361795BEAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c5:02:31:f5:a3:26:f4:06:c9:f2:b5:d1:f0:
98:02:2e:fa:8c:b5:c7:63:03:83:85:b0:b1:5a:3b:
63:ce:70:cc:4c:f0:97:72:af:2a:ef:01:9b:7a:d3:
b2:8d:9e:7c:2c:c9:60:ff:eb:bf:7e:ba:d2:29:cb:
42:59:0a:e4:39:c9:45:2d:92:55:8e:f9:a1:50:ca:
57:69:e2:0a:f3:8f:ae:8f:99:ad:43:2e:cd:48:af:
f8:a7:47:a4:99:00:a9:6a:c9:bc:1c:6d:f0:d7:35:
d3:19:bc:c6:99:9b:1a:a1:2a:c1:cf:f5:39:75:8c:
45:f6:4b:1a:c7:47:08:59:e6:36:0a:17:13:31:6a:
93:b2:35:ad:ad:50:d4:8a:5e:51:a2:50:64:bb:7b:
08:8f:44:76:bf:91:f7:5a:09:57:49:3b:cc:5e:25:
25:bd:3a:a3:a9:0c:39:be:55:58:f7:7f:82:50:68:
8d:39:05:4b:cd:22:f0:89:7b:0b:c6:a4:76:be:7a:
1b:61:3d:5b:df:02:2c:15:3d:4b:40:0e:c2:d0:c7:
7b:99:dc:86:b8:57:52:b4:18:05:7f:89:2e:3d:82:
ff:1f:30:1e:d4:fa:f7:76:bb:2a:80:c6:4d:57:9e:
60:0d:a6:0e:0a:ed:f6:d5:8d:e8:1b:71:0f:a7:46:
46:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3B:21:4F:71:F4:FF:CA:64:24:8C:F4:16:E5:21:36:17:95:BE:AD
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS274913.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.246.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:74:76:19:9f:b8:47:dd:16:4b:1a:48:84:19:4d:02:d7:41:
e9:52:6d:d0:a9:46:42:bf:0c:12:21:04:65:59:a5:da:7b:dd:
4d:d8:e6:bd:3d:da:b2:22:67:61:ff:ed:9a:ae:08:30:28:ad:
20:ec:7e:36:54:2c:b0:1f:39:52:d4:0f:b1:97:81:55:35:bb:
dc:7c:67:98:74:41:25:b6:0a:eb:ba:46:bb:80:32:95:ad:f8:
21:96:1c:6f:3c:e6:43:d3:c7:ce:fd:70:b6:79:63:f3:86:7f:
f1:73:95:e4:74:ac:30:04:96:09:f8:4c:24:9f:9d:15:fc:4c:
43:af:e7:d4:a1:d7:90:aa:0e:ad:97:f1:42:65:85:c5:af:ca:
1d:54:92:b3:6e:a0:e2:14:dc:3a:61:da:f1:b6:a3:b5:3a:08:
fa:77:14:4a:77:7c:0e:ba:61:d7:60:10:60:f8:2d:32:71:23:
55:7d:28:32:02:e4:d3:ed:6a:14:6f:27:a1:07:e0:c8:85:bd:
c8:d4:e7:50:88:3c:a7:9d:6e:de:65:ec:2f:83:61:ec:c1:ca:
66:59:6e:6c:02:35:23:0f:61:49:e0:d2:07:14:ce:a7:a5:8c:
7c:82:92:cf:86:e4:06:a6:35:a0:3f:e6:7d:89:19:ca:91:3c:
fc:bd:c8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 13:28:28 2026 by rpki-client