Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS273463.roa
File:                     AS273463.roa (raw, json)
Hash identifier:          mc170JTRN88pTEejCDtyA5QIYBoGEiTI4qH4BKpwBOY=
Subject key identifier:   C6:B9:C3:A6:B7:06:F9:00:AA:DF:A3:0E:97:7D:5C:51:DE:DB:62:B5
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       1C552D72DF4D6323C263C63811AB46784B8EAE58
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS273463.roa
Signing time:             Thu 16 Apr 2026 16:02:08 +0000
ROA not before:           Thu 16 Apr 2026 15:57:08 +0000
ROA not after:            Thu 15 Apr 2027 16:02:08 +0000
asID:                     273463
IP address blocks:        178.95.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:55:2d:72:df:4d:63:23:c2:63:c6:38:11:ab:46:78:4b:8e:ae:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Apr 16 15:57:08 2026 GMT
            Not After : Apr 15 16:02:08 2027 GMT
        Subject: CN=C6B9C3A6B706F900AADFA30E977D5C51DEDB62B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f2:55:8e:f5:7c:bf:fe:c7:4b:5b:b1:a3:1e:
                    11:d7:26:7d:f6:d7:09:8e:53:2a:a4:e2:e9:48:8a:
                    31:c2:3a:fb:9c:7e:79:d8:d2:4f:71:5b:68:cc:ba:
                    fd:e9:67:09:cf:46:8c:f8:5d:d9:07:88:39:75:8f:
                    33:ba:a9:70:0c:b7:38:6e:04:24:3d:7e:88:d8:d0:
                    3d:7d:47:23:25:ef:63:fa:07:63:95:e9:a9:be:64:
                    08:b2:61:f1:5a:30:87:4a:8b:e2:51:82:49:7c:bb:
                    d2:9f:d1:3a:b0:69:23:fb:5d:bc:8a:34:d0:33:01:
                    62:03:dd:de:fb:55:55:5c:f5:2f:a9:50:db:73:89:
                    30:8e:29:58:05:38:d7:88:4a:db:83:f1:2e:f6:4b:
                    1a:5b:60:6c:d5:29:2a:c4:38:f0:48:c7:f8:dc:b7:
                    72:3d:e2:18:ef:99:d5:92:80:75:c4:cd:45:00:42:
                    94:5b:c2:3d:b6:9a:3d:6c:d3:8e:38:7c:90:27:78:
                    d9:db:0b:f9:99:9a:6d:61:9f:44:ff:6a:bf:56:85:
                    9c:13:b1:be:a4:db:cb:f9:1f:9f:ed:66:15:73:5d:
                    98:b7:9e:18:b7:ea:ac:2c:bd:69:aa:b9:0f:5f:79:
                    06:77:ba:25:83:f2:a9:cc:e5:72:4e:83:7d:10:c2:
                    95:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B9:C3:A6:B7:06:F9:00:AA:DF:A3:0E:97:7D:5C:51:DE:DB:62:B5
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS273463.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.95.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:00:63:a3:6f:e9:e6:50:65:ec:45:c6:ed:c9:5c:f0:37:38:
         4b:08:62:56:38:1d:bc:54:cc:98:1c:2b:dd:84:a6:7e:b0:2c:
         83:fb:44:4f:11:26:f9:89:c9:2b:ad:2b:67:26:6e:af:f1:af:
         52:a3:ec:5c:13:86:a1:2d:a1:a4:aa:74:26:6b:31:6f:e0:79:
         b7:bb:c3:d8:0c:c9:db:32:97:f4:80:6a:95:8d:14:a5:e7:ee:
         af:7b:eb:ab:1a:80:75:cd:40:93:8d:bb:df:7a:cd:1d:9f:f7:
         cc:de:8d:61:bf:5e:fc:31:f0:76:95:ed:03:97:e7:17:ca:c5:
         d2:6a:ee:5d:44:84:35:16:31:4b:75:6c:a9:70:b7:d2:72:63:
         1b:d5:f9:d4:cd:ac:16:d9:1c:97:23:23:b7:3f:25:de:8a:0f:
         0b:b8:f0:18:b3:f3:9d:f2:b5:be:3f:04:fd:42:9d:b7:f5:48:
         23:41:62:3d:fc:76:2d:e3:52:84:03:0c:db:c0:7a:c2:cf:6c:
         a1:e2:94:27:e4:e9:a6:15:79:e4:cc:82:4d:f9:b9:35:77:f1:
         af:e7:10:55:f3:a5:b6:ae:b3:bb:fe:4f:34:b8:d2:3c:65:03:
         fd:03:95:7e:f4:c0:40:32:7a:40:3a:07:e8:98:58:59:0d:10:
         84:c3:ae:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:37:33 2026 by rpki-client