Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS272605.roa
File: AS272605.roa (raw, json)
Hash identifier: 8GGhIIugwTKvYAKOXYz49FN0LxHDFlnB5LJnWyhuvYg=
Subject key identifier: 3E:05:4F:5C:34:B6:E8:43:78:C3:38:1F:F7:8C:7E:03:5C:72:B3:12
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3CE0D924B4CBD0F536DE4739DBAC333DE043808C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS272605.roa
Signing time: Wed 09 Sep 2026 00:04:56 +0000
ROA not before: Tue 08 Sep 2026 23:59:56 +0000
ROA not after: Wed 08 Sep 2027 00:04:56 +0000
asID: 272605
IP address blocks: 178.95.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:52:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:e0:d9:24:b4:cb:d0:f5:36:de:47:39:db:ac:33:3d:e0:43:80:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 8 23:59:56 2026 GMT
Not After : Sep 8 00:04:56 2027 GMT
Subject: CN=3E054F5C34B6E84378C3381FF78C7E035C72B312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ab:55:fa:71:46:cb:d3:ba:ad:6c:a6:1f:ad:
2e:de:2f:d8:8d:36:27:ca:9b:c4:3e:ab:ce:e6:d5:
a1:ec:92:c2:ac:ff:60:19:82:24:0a:08:cd:74:0d:
c9:39:c5:c1:2d:ca:bf:d1:7c:64:d5:83:d6:c5:0a:
0d:6d:27:49:a4:89:b0:66:18:d8:be:6a:80:f6:ba:
66:5a:58:61:15:d7:67:26:2b:fb:12:c3:1c:35:2e:
3d:df:02:c3:71:11:c2:7e:31:64:b8:1b:fe:99:30:
2c:0e:47:bc:0b:cb:e2:f6:b8:e7:94:b5:8f:8f:86:
67:e3:f1:68:02:db:d6:6a:ca:33:a2:5a:bc:06:fd:
e9:a5:73:64:b9:1c:3f:82:f6:e5:50:97:4c:bd:a0:
7a:8c:1e:83:ae:6c:f3:fe:24:06:ed:f9:2d:5e:cd:
ba:52:a6:b6:b4:ff:ea:6c:af:8d:3b:77:9c:d6:65:
a6:0d:73:2a:f4:b4:b2:c0:d0:ea:ac:bd:f4:bd:49:
2d:61:86:d7:54:db:42:d0:f0:90:99:64:ef:90:42:
af:5b:17:c9:de:86:9e:91:fc:e9:60:10:5f:6c:96:
15:ae:10:73:2d:84:ec:9c:3a:0f:ec:76:c9:b4:2f:
da:24:13:db:4d:15:cc:c9:7f:3a:0d:35:3c:85:71:
c3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:05:4F:5C:34:B6:E8:43:78:C3:38:1F:F7:8C:7E:03:5C:72:B3:12
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS272605.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.95.35.0/24
Signature Algorithm: sha256WithRSAEncryption
49:96:d7:3a:69:3f:a9:02:ff:71:10:d2:53:bb:fc:de:ce:26:
4e:9f:03:f6:ee:b5:0b:23:09:d9:8e:f3:69:05:07:57:1a:93:
cf:22:d9:40:26:a4:05:82:b7:52:56:a4:d5:61:73:0e:18:ae:
6a:9e:64:27:47:11:40:c2:de:33:7c:24:f5:70:4d:fd:24:c9:
fd:f4:1a:d4:3b:ca:84:f1:15:57:86:5a:ab:30:9b:93:ae:44:
95:20:67:c7:b8:6b:38:13:90:e2:f6:ad:75:f3:03:3f:cc:85:
8f:f2:31:40:0f:57:42:2b:a8:c8:76:e0:7a:a7:bc:41:76:ae:
3d:3f:f1:9a:5a:45:d6:1d:3e:ad:8a:d5:d8:5b:f8:51:91:e6:
59:83:db:cc:7d:82:c7:c6:77:59:ce:11:ac:ee:fa:20:e6:29:
2d:08:ae:7f:84:34:3f:f1:6d:31:d0:47:ab:57:66:2f:83:c3:
cc:73:d6:0c:df:ca:17:8f:3c:ee:be:c4:de:fe:0c:3c:f6:12:
7d:e2:ff:94:7f:6a:c3:01:69:ae:35:08:ae:56:c6:61:80:25:
f2:70:d6:f7:c4:c3:39:7a:9e:21:d2:a2:bc:72:9f:8f:93:34:
5b:68:57:90:2f:e8:7e:c8:f4:00:83:c9:27:38:85:de:f0:a4:
00:b2:66:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:46:44 2026 by rpki-client