Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS274248.roa
File: AS274248.roa (raw, json)
Hash identifier: ep5TJicKnOvGyCMwhPzwcPv6wzzYGHwa8EZa5XYi36Q=
Subject key identifier: 13:04:EA:B9:5A:14:0A:9C:DF:D5:57:0B:14:3F:0C:DE:45:27:56:00
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 388D0D40F7C5ACD29C2469CFCC1903067AD51F22
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS274248.roa
Signing time: Fri 30 Oct 2026 13:21:02 +0000
ROA not before: Fri 30 Oct 2026 13:16:02 +0000
ROA not after: Fri 29 Oct 2027 13:21:02 +0000
asID: 274248
IP address blocks: 177.29.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:8d:0d:40:f7:c5:ac:d2:9c:24:69:cf:cc:19:03:06:7a:d5:1f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Oct 30 13:16:02 2026 GMT
Not After : Oct 29 13:21:02 2027 GMT
Subject: CN=1304EAB95A140A9CDFD5570B143F0CDE45275600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:ef:ca:8a:e2:d8:fc:99:24:96:4d:a8:26:
8f:1c:b2:7f:e9:9c:39:0c:a2:0b:fb:34:63:cd:e3:
ba:9c:85:c5:bf:55:64:d8:ce:47:4c:52:c4:7f:01:
cc:c4:f4:ee:3c:47:9a:1c:d9:fc:c2:34:f8:88:2d:
27:01:da:10:bf:ac:38:67:72:78:65:13:c6:1b:47:
1f:07:80:17:21:86:c7:b7:4e:bb:72:d8:cd:c2:90:
a1:45:aa:4d:07:5e:46:ec:3d:31:05:ec:c1:83:9b:
2b:e9:bf:2d:f6:45:7c:fa:b0:b1:94:bb:e8:86:ed:
fe:31:f2:b5:3c:76:0f:df:32:ab:57:95:0b:b8:ce:
a9:cf:38:84:95:64:1a:36:ed:a0:c6:6f:1e:0a:55:
34:2c:97:87:22:a2:9b:4f:0b:4b:4d:f2:4a:fd:2d:
70:71:cc:ab:2f:c2:b1:cd:cf:65:b0:96:8a:2a:f4:
b8:ef:26:c4:6f:fb:e7:a5:89:de:90:9a:c4:ce:d8:
ce:e2:b7:09:7e:66:87:da:b4:f9:7d:b0:3c:ea:4a:
8a:20:41:9a:a7:5d:6e:75:ec:f9:e3:f1:6f:97:b2:
26:31:f3:fe:72:09:65:c7:18:53:87:ed:83:83:b6:
45:5e:69:ea:95:2a:93:5f:94:31:f5:b0:a0:c9:8c:
5c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:04:EA:B9:5A:14:0A:9C:DF:D5:57:0B:14:3F:0C:DE:45:27:56:00
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS274248.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.29.195.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:bf:db:13:55:de:8e:60:17:d1:eb:d5:ff:63:5b:97:ce:27:
9b:f4:70:f9:c1:86:ba:38:c6:f2:0e:2d:90:93:97:dd:f2:60:
4b:e5:93:a1:df:54:16:75:2b:fe:0b:4b:c0:b8:05:a7:67:a2:
23:bc:f7:58:db:19:76:6b:7e:ba:04:4d:bd:25:a9:3e:2f:c2:
31:29:88:48:1c:3a:a9:87:e1:7a:75:c3:f1:47:d4:7d:7c:53:
77:ec:d8:cd:18:cd:53:61:8b:c0:ea:f8:8a:24:9a:33:1f:88:
71:83:19:46:c1:ad:1f:9f:d7:ca:8d:7b:d3:ef:5a:a4:17:c5:
13:bb:47:dd:85:56:38:08:33:15:a0:6b:5a:96:c7:07:1f:10:
58:69:69:70:60:1f:0b:6b:3f:a9:55:e5:79:f1:10:dd:4e:a6:
f7:c0:9b:0c:4f:c3:6d:89:59:66:e8:67:7b:52:5e:35:27:00:
76:fb:6e:a6:da:a9:75:6c:f1:3d:2b:0c:a0:d7:b2:8e:e9:8b:
e1:49:2e:43:70:c1:11:ec:75:94:c1:c6:fa:ea:e6:d2:35:7b:
d8:9c:29:ce:ab:2c:ef:96:08:5c:8e:d0:15:50:ef:19:9d:a3:
3d:80:e1:b8:6b:36:6f:69:b4:75:ed:58:ab:68:74:44:3e:28:
5f:63:f0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:03:02 2026 by rpki-client