Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS273824.roa
File: AS273824.roa (raw, json)
Hash identifier: sjWX6vW1P18abQMTudw9/hR58pXq3aZ6RbgbcQwEJS8=
Subject key identifier: 26:C3:5E:69:0C:45:0F:3B:35:68:AE:7D:65:0A:F4:54:53:5F:F5:E7
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 149F38EE1BBC8B6C42518E4AE16A430B26312C2E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS273824.roa
Signing time: Fri 30 Jan 2026 20:45:32 +0000
ROA not before: Fri 30 Jan 2026 20:40:32 +0000
ROA not after: Fri 29 Jan 2027 20:45:32 +0000
asID: 273824
IP address blocks: 178.95.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:9f:38:ee:1b:bc:8b:6c:42:51:8e:4a:e1:6a:43:0b:26:31:2c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jan 30 20:40:32 2026 GMT
Not After : Jan 29 20:45:32 2027 GMT
Subject: CN=26C35E690C450F3B3568AE7D650AF454535FF5E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c4:a9:01:4a:c9:5d:2e:ee:6f:2d:66:c6:1b:
79:cf:0f:3a:2a:9d:3a:97:09:47:ca:a1:85:0f:5c:
c1:4d:30:9a:c6:d4:bb:4a:ce:15:1b:d5:5a:1e:96:
ad:d7:79:93:50:05:88:7d:2a:55:9f:b2:67:72:72:
28:c4:c4:1a:53:48:9b:be:c4:ea:7a:e7:21:f2:e5:
65:31:af:3f:8e:06:da:8d:54:f8:5d:09:48:1e:79:
de:e5:72:11:6b:65:47:f1:0f:05:2c:5a:df:93:90:
40:3e:41:97:48:17:1a:ae:21:9e:89:fc:ff:b0:db:
e9:55:4c:c3:99:7f:27:cc:11:c2:c1:9f:a8:9a:d4:
ab:2b:f6:44:bf:fc:26:5b:1d:8f:0a:d7:2e:30:31:
cb:0e:51:16:ae:78:b7:3e:b0:2b:d9:ac:88:3f:0f:
9e:3b:fb:dc:72:33:d1:ba:98:82:f1:ed:7f:d0:d6:
c2:70:f9:7f:de:6e:b4:c7:20:f1:a9:50:c8:c5:64:
20:b2:51:e4:c5:93:5d:95:0f:a4:08:d9:e6:1b:13:
1f:c9:c6:b5:37:8f:07:c0:81:23:16:d2:a1:59:e1:
25:00:ef:54:43:06:85:71:e1:99:0a:ec:35:6a:8c:
d9:ba:2e:df:ee:cc:4f:5b:66:2b:1b:7b:c8:8e:a1:
94:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C3:5E:69:0C:45:0F:3B:35:68:AE:7D:65:0A:F4:54:53:5F:F5:E7
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS273824.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.95.208.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:4d:ff:75:fa:82:6e:9a:37:e0:63:76:d1:83:7f:47:c0:4d:
64:29:23:ec:98:da:0f:4c:eb:e1:b6:47:4b:da:59:07:71:c3:
36:b3:6c:0a:b0:a5:8d:db:0d:0f:9a:ce:e6:a1:e3:16:0f:3f:
84:ef:30:01:7d:75:71:37:ac:2f:6a:21:93:88:f5:50:74:16:
35:79:20:79:ea:e1:43:2e:d4:59:8e:4e:08:3c:0c:fa:ef:a5:
89:0b:ae:b7:04:b0:12:c4:cb:a7:2c:3e:29:d5:37:3d:fd:5c:
56:32:b9:87:1b:bc:3c:84:2e:9c:3e:34:f3:c9:3f:b8:af:67:
12:9d:35:05:06:7b:21:aa:30:e5:57:53:0a:16:a6:2c:59:82:
d6:9f:ef:e3:54:68:e4:45:b3:9b:89:09:e2:4a:33:6a:c1:ed:
e6:3c:22:0b:de:be:ea:bd:1c:e6:5d:38:96:06:9a:f1:c0:28:
e0:e3:5f:67:ef:09:e7:7a:fa:39:b4:e3:3b:b5:1b:e0:3d:f8:
2f:af:4b:6c:cb:f9:b6:14:63:a8:84:5b:1b:4d:36:02:18:c7:
4e:43:f6:a6:ae:48:c3:6a:2a:c7:28:f7:f5:c1:57:bb:63:35:
e5:38:06:5f:b5:96:69:f9:32:db:39:ef:9c:96:f6:fc:d8:dd:
f9:54:e5:f2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUFJ847hu8i2xCUY5K4WpDCyYxLC4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjAxMzAyMDQwMzJaFw0yNzAxMjkyMDQ1MzJaMDMxMTAvBgNV
BAMTKDI2QzM1RTY5MEM0NTBGM0IzNTY4QUU3RDY1MEFGNDU0NTM1RkY1RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCexKkBSsldLu5vLWbGG3nPDzoq
nTqXCUfKoYUPXMFNMJrG1LtKzhUb1Voelq3XeZNQBYh9KlWfsmdycijExBpTSJu+
xOp65yHy5WUxrz+OBtqNVPhdCUgeed7lchFrZUfxDwUsWt+TkEA+QZdIFxquIZ6J
/P+w2+lVTMOZfyfMEcLBn6ia1Ksr9kS//CZbHY8K1y4wMcsOURaueLc+sCvZrIg/
D547+9xyM9G6mILx7X/Q1sJw+X/ebrTHIPGpUMjFZCCyUeTFk12VD6QI2eYbEx/J
xrU3jwfAgSMW0qFZ4SUA71RDBoVx4ZkK7DVqjNm6Lt/uzE9bZisbe8iOoZTDAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUJsNeaQxFDzs1aK59ZQr0VFNf9ecwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjczODI0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsl/Q
MA0GCSqGSIb3DQEBCwUAA4IBAQAcTf91+oJumjfgY3bRg39HwE1kKSPsmNoPTOvh
tkdL2lkHccM2s2wKsKWN2w0Pms7moeMWDz+E7zABfXVxN6wvaiGTiPVQdBY1eSB5
6uFDLtRZjk4IPAz676WJC663BLASxMunLD4p1Tc9/VxWMrmHG7w8hC6cPjTzyT+4
r2cSnTUFBnshqjDlV1MKFqYsWYLWn+/jVGjkRbObiQniSjNqwe3mPCIL3r7qvRzm
XTiWBprxwCjg419n7wnnevo5tOM7tRvgPfgvr0tsy/m2FGOohFsbTTYCGMdOQ/am
rkjDairHKPf1wVe7YzXlOAZftZZp+TLbOe+clvb82N35VOXy
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:37:55 2026 by rpki-client