Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS267728.roa
File: AS267728.roa (raw, json)
Hash identifier: k26xIZLniDJzwv5ulo/b9qXPeShAMr51XrpS0381/Ao=
Subject key identifier: 3E:E8:37:B7:E7:B0:E1:B9:2D:52:EC:14:2D:FA:4F:EA:35:5D:E0:F5
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2992230FF8BA5AE7472C0EFD0EEB562EE08989EB
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS267728.roa
Signing time: Thu 17 Sep 2026 11:24:19 +0000
ROA not before: Thu 17 Sep 2026 11:19:19 +0000
ROA not after: Thu 16 Sep 2027 11:24:19 +0000
asID: 267728
IP address blocks: 94.116.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:92:23:0f:f8:ba:5a:e7:47:2c:0e:fd:0e:eb:56:2e:e0:89:89:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 17 11:19:19 2026 GMT
Not After : Sep 16 11:24:19 2027 GMT
Subject: CN=3EE837B7E7B0E1B92D52EC142DFA4FEA355DE0F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:2c:7f:9e:98:f6:57:66:53:d4:79:a2:d9:
0f:94:58:c7:7f:34:e7:ce:03:6e:dc:37:b9:cd:85:
5f:b9:89:2c:d8:ef:83:cc:a3:bb:e7:2f:6a:c8:2b:
e6:59:ea:d7:24:1e:0f:81:79:a2:ac:48:16:89:77:
3e:b9:88:63:7b:67:9f:e6:fe:46:3a:ac:43:39:19:
64:71:71:bf:5b:13:e9:6f:9b:24:5c:10:d3:82:c4:
19:6c:36:c7:9f:82:ea:c3:13:57:53:a5:79:0e:7d:
be:7f:4d:ad:55:9b:bc:8b:d9:eb:5d:ef:73:36:0e:
96:47:47:17:bf:5f:f3:8d:af:2b:de:a5:14:9a:8e:
09:7b:37:6e:40:c1:89:6a:88:62:01:81:41:0e:2c:
42:f2:a3:24:96:9f:20:63:a0:51:88:51:ba:bd:6c:
3e:7e:52:fe:19:7d:c2:6c:b7:82:50:0f:0c:95:19:
d6:18:5d:00:6d:99:46:4a:6f:85:a9:db:ba:fc:2a:
b3:78:87:87:40:3d:47:aa:dc:c1:24:af:50:2b:a9:
cc:41:ca:07:2c:0f:ac:0c:c4:d1:31:5d:d9:6d:94:
61:f4:7b:4c:84:cc:6d:cb:44:83:b2:3c:b5:07:00:
fb:4c:53:0c:44:d2:c8:e5:c3:d0:9d:2e:fb:7b:6c:
0b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E8:37:B7:E7:B0:E1:B9:2D:52:EC:14:2D:FA:4F:EA:35:5D:E0:F5
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS267728.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.116.48.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:7b:cf:46:ee:cc:a7:23:19:b0:f2:ff:cf:94:dd:8b:5e:b6:
04:d4:4a:69:fe:e6:ac:9a:cd:61:77:84:37:8d:c0:6c:a3:77:
b2:28:71:ba:d2:e3:76:ae:9c:96:2d:35:9c:0a:34:27:35:d1:
51:85:e3:af:60:7f:5a:5c:ca:a5:03:b3:74:05:91:2d:36:12:
39:f7:b4:fb:46:af:b8:ef:53:28:ee:09:07:8f:50:80:94:6a:
b3:71:93:21:fc:3b:de:74:8a:bc:66:36:d4:a1:d1:ef:51:d1:
d6:5a:b8:20:95:58:53:cb:95:4b:d1:e6:be:4b:30:a9:b6:90:
59:68:77:b0:21:77:f9:bf:22:c6:64:6a:55:46:d1:81:f5:08:
1b:52:00:af:fc:a3:92:a8:45:91:2c:65:d5:57:0a:89:ed:8c:
a5:2e:5d:35:69:a4:74:bf:31:73:a1:d3:0f:7c:f8:62:f5:69:
91:71:82:16:cc:40:d7:96:1c:0f:5b:72:94:cb:3f:ad:5f:09:
7a:1e:4a:d0:40:0c:b5:99:cc:aa:44:7b:3b:fb:b9:96:49:93:
6c:32:c8:48:f2:e6:b1:da:45:2a:23:04:b4:e4:86:7c:77:db:
0e:b3:0c:11:01:27:94:e5:72:7c:0b:11:91:75:9e:c2:fa:02:
7f:f0:ac:8f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUKZIjD/i6WudHLA79DutWLuCJieswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA5MTcxMTE5MTlaFw0yNzA5MTYxMTI0MTlaMDMxMTAvBgNV
BAMTKDNFRTgzN0I3RTdCMEUxQjkyRDUyRUMxNDJERkE0RkVBMzU1REUwRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAWix/npj2V2ZT1Hmi2Q+UWMd/
NOfOA27cN7nNhV+5iSzY74PMo7vnL2rIK+ZZ6tckHg+BeaKsSBaJdz65iGN7Z5/m
/kY6rEM5GWRxcb9bE+lvmyRcENOCxBlsNsefgurDE1dTpXkOfb5/Ta1Vm7yL2etd
73M2DpZHRxe/X/ONryvepRSajgl7N25AwYlqiGIBgUEOLELyoySWnyBjoFGIUbq9
bD5+Uv4ZfcJst4JQDwyVGdYYXQBtmUZKb4Wp27r8KrN4h4dAPUeq3MEkr1ArqcxB
ygcsD6wMxNExXdltlGH0e0yEzG3LRIOyPLUHAPtMUwxE0sjlw9CdLvt7bAu/AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUPug3t+ew4bktUuwULfpP6jVd4PUwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjY3NzI4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXnQw
MA0GCSqGSIb3DQEBCwUAA4IBAQAfe89G7synIxmw8v/PlN2LXrYE1Epp/uasms1h
d4Q3jcBso3eyKHG60uN2rpyWLTWcCjQnNdFRheOvYH9aXMqlA7N0BZEtNhI597T7
Rq+471Mo7gkHj1CAlGqzcZMh/DvedIq8ZjbUodHvUdHWWrgglVhTy5VL0ea+SzCp
tpBZaHewIXf5vyLGZGpVRtGB9QgbUgCv/KOSqEWRLGXVVwqJ7YylLl01aaR0vzFz
odMPfPhi9WmRcYIWzEDXlhwPW3KUyz+tXwl6HkrQQAy1mcyqRHs7+7mWSZNsMshI
8uax2kUqIwS05IZ8d9sOswwRASeU5XJ8CxGRdZ7C+gJ/8KyP
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:08:19 2026 by rpki-client