Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS273973.roa
File: AS273973.roa (raw, json)
Hash identifier: eyl4nyABqZ6YVIi5jcPMURZIe5C7Tkqk/A2+WC8rZfI=
Subject key identifier: 7A:CE:2B:CB:A0:3E:3D:86:AB:68:E2:C6:FC:04:21:53:64:08:56:B8
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0E7299F22D38BD47D4F3A564C43097C14C6252EC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS273973.roa
Signing time: Tue 16 Jun 2026 00:43:16 +0000
ROA not before: Tue 16 Jun 2026 00:38:16 +0000
ROA not after: Tue 15 Jun 2027 00:43:16 +0000
asID: 273973
IP address blocks: 140.233.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:72:99:f2:2d:38:bd:47:d4:f3:a5:64:c4:30:97:c1:4c:62:52:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 16 00:38:16 2026 GMT
Not After : Jun 15 00:43:16 2027 GMT
Subject: CN=7ACE2BCBA03E3D86AB68E2C6FC042153640856B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:ca:39:9f:ee:23:d9:21:f1:b4:73:ff:dc:
48:af:b0:9b:e3:68:ef:e8:7f:4d:b5:68:be:cb:60:
95:ef:be:ba:55:33:5f:88:34:4f:72:6c:c8:76:5b:
69:63:c8:43:56:b0:7f:73:09:68:3e:ce:9f:90:ed:
a2:e7:28:dc:93:a1:eb:59:18:94:6d:99:6f:45:19:
d6:71:70:bb:ec:4c:0b:19:f8:da:fe:25:8d:de:94:
29:ff:4b:e9:19:27:52:29:00:f0:33:ca:fc:38:6d:
81:40:4d:e5:25:5a:77:37:fb:64:37:a3:4f:27:c3:
b0:4c:3f:d3:4e:4e:5e:37:bb:e7:a5:ac:34:56:0e:
9c:98:0e:01:8f:a1:80:b1:df:0d:13:8f:84:49:dc:
71:15:ac:a3:8a:68:66:5e:54:65:fe:3e:23:0d:61:
5d:bf:8f:ae:22:bf:2b:c0:e4:a3:46:35:9e:d4:d5:
20:1d:f8:9f:2f:ca:d4:68:48:70:f9:05:d1:f8:93:
a4:cc:18:4c:19:89:83:d1:c4:c7:e6:4a:59:02:bc:
3c:6f:f5:76:52:94:55:00:d4:c3:48:48:c4:ea:98:
dc:43:4b:f5:67:65:1d:1f:5e:00:d5:1e:93:71:d5:
e4:6b:85:ba:bb:52:67:da:3e:8b:c4:02:97:be:bc:
15:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CE:2B:CB:A0:3E:3D:86:AB:68:E2:C6:FC:04:21:53:64:08:56:B8
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS273973.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.173.0/24
Signature Algorithm: sha256WithRSAEncryption
99:b7:52:b0:db:5d:0e:d0:19:ae:19:0e:82:fb:7e:d0:6a:c5:
2f:4e:44:3a:57:eb:c5:0c:78:bb:53:63:b1:59:45:42:dc:d3:
08:5c:95:19:b7:1c:32:4d:74:ec:e8:ef:66:78:64:aa:a8:91:
94:56:6d:56:1a:03:0e:eb:9d:88:99:72:5a:dd:c3:4c:3d:e9:
44:4c:cd:cf:15:37:bb:1d:73:28:15:23:27:7f:a9:0e:71:18:
3f:fc:23:44:37:f0:45:fd:52:e0:03:f8:37:57:5f:d2:bf:98:
20:37:ce:4a:61:7c:83:43:60:cd:4a:3a:a9:a4:7c:5b:b3:80:
40:dc:9b:9f:76:81:38:81:c5:f1:4b:87:76:92:69:b8:1b:cf:
52:5c:50:c4:ef:88:38:ec:0f:cc:99:a4:fd:a3:2a:5e:93:58:
a8:54:d0:62:0d:c0:ca:f0:35:c5:40:c5:1d:01:fa:60:44:f4:
bd:3a:d4:2e:06:ac:75:de:3c:f6:95:06:5e:6d:b8:15:f4:9e:
e9:7c:94:04:c0:1f:d6:ec:22:76:18:ac:91:e2:ca:4d:b9:1d:
56:46:b4:20:b3:4c:fe:d4:a2:6d:51:1b:68:a0:98:76:fd:d0:
48:03:8a:ea:32:a6:9d:c0:15:53:5d:03:06:e2:53:f9:62:da:
a9:a3:1c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:33:51 2026 by rpki-client