Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS275027.roa
File: AS275027.roa (raw, json)
Hash identifier: hc7lV3SPlLR4JWKu94hs1C2OThe5SQE4egldP5iPrbs=
Subject key identifier: D6:37:3C:0F:5B:18:51:F1:68:DB:07:06:54:FA:FA:67:65:2C:7E:A1
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 67742632A921633064C1C954EF103FED63034CD7
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS275027.roa
Signing time: Fri 13 Nov 2026 01:24:54 +0000
ROA not before: Fri 13 Nov 2026 01:19:54 +0000
ROA not after: Fri 12 Nov 2027 01:24:54 +0000
asID: 275027
IP address blocks: 177.29.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:74:26:32:a9:21:63:30:64:c1:c9:54:ef:10:3f:ed:63:03:4c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Nov 13 01:19:54 2026 GMT
Not After : Nov 12 01:24:54 2027 GMT
Subject: CN=D6373C0F5B1851F168DB070654FAFA67652C7EA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:92:e3:cd:5f:75:eb:98:fa:a4:7c:a1:8c:b0:
28:19:0e:95:7b:40:d7:ba:ed:12:95:7a:06:0e:ff:
cc:d3:70:79:88:d0:5a:94:71:e7:36:f4:d5:75:c0:
38:2a:12:7f:fb:6f:ae:5e:bb:cd:60:40:76:9f:7a:
7a:06:5e:d7:45:48:db:55:ea:37:b6:3a:e7:b8:2f:
da:9b:e8:b5:43:ad:28:b2:0c:05:7c:a2:4f:ad:6d:
80:ce:8b:aa:7c:a2:fb:1c:3e:15:63:01:72:b5:81:
89:e4:e7:2a:8f:6d:bc:5e:04:4c:88:6d:d1:e2:5a:
9d:bd:a8:04:11:83:ac:0e:22:a0:83:f9:1d:90:bb:
ee:3c:7d:f3:d0:6b:03:34:08:ac:1c:9c:03:12:bf:
f8:d7:85:74:c2:1c:d5:1d:fe:92:9e:58:4e:1f:f7:
05:2a:59:80:9f:85:1b:c5:50:4c:49:c1:a7:37:5f:
c0:aa:03:8f:05:f3:0c:73:53:69:ab:2f:65:12:38:
ba:6e:1b:1d:e9:28:3e:5a:1e:97:8c:a0:57:f9:0e:
dd:16:54:da:ee:d4:1e:68:61:6d:c5:6c:76:bf:8c:
8e:b7:4e:e1:67:70:ed:4d:61:04:4d:d1:a5:53:2c:
5e:6c:70:84:b4:cd:9a:a4:9a:b1:1c:90:4f:3e:4a:
38:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:37:3C:0F:5B:18:51:F1:68:DB:07:06:54:FA:FA:67:65:2C:7E:A1
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS275027.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.29.201.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:fa:9b:6e:ef:aa:de:06:1a:f4:fc:df:e3:89:6f:fc:be:a4:
9a:84:ca:79:53:65:ac:06:00:5e:7c:13:c5:bd:4a:2b:74:6b:
3f:a6:41:3d:b5:f9:26:75:85:58:e4:9f:f1:8e:d6:17:5d:6b:
75:3f:5f:b0:84:93:f3:91:1b:2d:12:f5:0a:7f:0d:c8:34:66:
90:bd:38:c2:ed:fd:13:c9:ac:bc:d1:d6:5e:77:5e:81:8f:8c:
2a:87:45:0f:7b:82:28:ff:b0:c9:13:cc:4e:9e:a6:5d:f3:8a:
e4:05:e6:05:f8:81:79:96:d0:b9:36:ad:8b:e2:cf:ee:17:94:
62:ee:b8:2c:9a:0a:7b:82:8a:4e:98:61:06:c9:01:ed:57:fd:
6c:c1:b1:7d:0c:2b:21:ff:5e:e8:46:99:d5:5d:a3:fb:8c:f4:
4a:6f:1f:e8:92:7d:f2:2d:be:e5:c3:40:92:68:99:ae:dd:4f:
bc:03:5d:67:51:e3:f2:b5:27:7e:ae:8b:cf:25:ce:c3:c3:4e:
30:d0:3a:6e:dd:9c:d6:98:f6:7e:e8:82:ed:da:8d:1a:ee:7f:
b0:83:5d:56:8a:ee:07:1f:cd:72:1d:63:58:15:0e:55:e3:76:
8a:33:fd:f2:6f:1b:5f:a9:e5:3c:0a:08:5e:c4:cb:12:d8:b7:
42:7c:4d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:03:03 2026 by rpki-client