Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS273463.roa
File:                     AS273463.roa (raw, json)
Hash identifier:          UiNXUtBDEKDBaVBleJQ/RYsPQ/MGixokq02uMKwaWsw=
Subject key identifier:   99:BD:B8:53:B8:42:34:1A:26:5D:C6:30:11:3B:7F:C7:BB:15:3A:16
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       5E04AE8A107452C395FB237EE78E3CBB920AC4BE
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS273463.roa
Signing time:             Thu 11 Jun 2026 12:28:31 +0000
ROA not before:           Thu 11 Jun 2026 12:23:31 +0000
ROA not after:            Thu 10 Jun 2027 12:28:31 +0000
asID:                     273463
IP address blocks:        178.95.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:04:ae:8a:10:74:52:c3:95:fb:23:7e:e7:8e:3c:bb:92:0a:c4:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Jun 11 12:23:31 2026 GMT
            Not After : Jun 10 12:28:31 2027 GMT
        Subject: CN=99BDB853B842341A265DC630113B7FC7BB153A16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:87:90:2e:59:95:ca:e2:da:ac:02:bf:89:cc:
                    84:56:11:7b:be:01:4d:b5:9d:cc:15:65:f2:f6:92:
                    bb:08:1d:90:ac:67:58:4b:96:e6:3d:59:60:2f:c7:
                    09:5b:b6:43:c7:51:f1:43:dd:82:94:1f:f8:f8:a7:
                    9e:85:46:a6:bb:4d:e5:fe:1d:62:b8:5a:d3:d9:39:
                    d1:e5:eb:fa:4c:ef:67:40:c7:02:b5:5f:2c:69:2c:
                    2f:a2:34:42:78:6e:19:a6:86:97:b4:a8:8b:18:a0:
                    87:5e:d7:5b:e5:35:de:48:18:3a:f7:8b:c7:c3:66:
                    6d:c5:b9:77:ac:50:b3:a6:6b:92:9c:52:e2:4d:87:
                    24:3d:89:2d:49:70:f3:eb:64:8d:93:62:ff:4f:a0:
                    eb:6b:3e:b7:29:cd:09:cb:ca:82:30:47:ee:a7:16:
                    45:62:9f:55:a6:53:d9:50:d1:88:92:a5:da:0f:61:
                    37:1e:5d:b5:5a:fd:91:1c:ab:5e:ff:3a:e5:38:fa:
                    97:91:f6:8a:50:fd:d3:16:d9:91:73:00:fa:44:78:
                    b0:1d:44:a5:e1:8e:02:73:a6:95:63:40:b5:d3:0c:
                    47:34:67:2d:a3:28:f7:b6:02:02:e3:b5:db:4f:ba:
                    cf:92:97:af:7e:68:a0:68:e4:7d:ee:b1:3b:5c:02:
                    87:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BD:B8:53:B8:42:34:1A:26:5D:C6:30:11:3B:7F:C7:BB:15:3A:16
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS273463.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.95.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:58:53:84:0b:7e:e1:31:9e:bb:19:71:4b:4d:ef:19:65:ad:
         a8:dd:67:5f:f7:a5:85:32:72:11:97:6b:03:a9:1c:a8:86:e0:
         12:40:0e:ed:98:57:1b:a7:32:99:9e:3a:c5:dd:2e:ba:ff:00:
         3f:47:e6:67:16:34:e0:9f:78:19:b1:ba:be:2e:38:da:e6:4a:
         bb:4e:15:7e:99:de:42:75:36:a4:e7:2c:a3:8b:2b:ac:c0:6f:
         bf:d2:fd:1a:fa:22:95:c5:32:07:0d:ba:31:c7:19:f9:d1:be:
         3f:aa:5e:88:00:d9:c1:f1:b4:d1:b3:15:47:9c:fa:79:1b:5c:
         98:85:63:15:4f:6f:01:c4:82:f3:fa:04:bb:c8:00:e0:6f:2b:
         17:f5:43:19:f7:f6:17:2d:da:2a:5b:b7:50:e5:f8:5a:fa:30:
         83:54:8e:00:a4:83:e4:82:e6:50:3b:26:4e:e3:7d:ce:d2:4c:
         18:30:ae:3b:1f:0f:29:3f:d3:9a:b1:b9:5d:94:e3:07:31:2b:
         4d:09:37:9c:70:49:a3:37:dd:ca:3c:b8:ed:ec:0d:77:bf:33:
         dc:32:5a:c7:a3:a1:c9:e8:a9:40:eb:ab:b7:f2:1f:be:d9:dd:
         21:46:1f:6a:b2:13:48:63:44:10:48:9b:75:59:23:2a:4f:bf:
         9e:d4:dc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:41:43 2026 by rpki-client