Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS274311.roa
File: AS274311.roa (raw, json)
Hash identifier: Zz9k94eUZieY4ogqpi6ar5mAtJVBahsLjteRlfSoAuY=
Subject key identifier: 7A:8A:01:FB:18:E9:03:BB:52:43:C1:46:FC:F6:9F:3E:83:A2:30:3F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6B3738512D9DE73AF3AC65EB14E812C51E4589BC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS274311.roa
Signing time: Thu 09 Jul 2026 16:19:28 +0000
ROA not before: Thu 09 Jul 2026 16:14:28 +0000
ROA not after: Thu 08 Jul 2027 16:19:28 +0000
asID: 274311
IP address blocks: 155.117.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:37:38:51:2d:9d:e7:3a:f3:ac:65:eb:14:e8:12:c5:1e:45:89:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 9 16:14:28 2026 GMT
Not After : Jul 8 16:19:28 2027 GMT
Subject: CN=7A8A01FB18E903BB5243C146FCF69F3E83A2303F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:ac:a9:da:37:0f:48:c5:12:5e:8f:42:6f:
e9:bd:5a:61:61:6e:2d:8c:83:2c:76:a9:b1:60:2e:
e4:0c:e1:bc:80:12:04:b0:ea:cb:b6:ec:11:e2:17:
72:f8:3c:32:91:93:bc:46:42:6c:c4:ce:f2:e9:fe:
fa:e2:b9:54:c7:0f:a7:91:62:12:3b:1e:68:f6:b5:
7a:63:c7:8b:ef:95:5f:28:25:df:bd:c2:64:7c:99:
fb:29:8a:6d:72:0e:87:68:01:e9:7a:13:f1:8a:43:
ba:e9:33:b7:81:f2:74:fa:71:45:0a:1a:05:52:66:
df:c9:f5:56:1f:e1:a5:55:27:c3:d9:71:ca:ad:7c:
a5:01:52:4f:82:6c:10:18:80:e8:72:39:4a:0d:7c:
7e:ad:0b:f8:53:c0:0f:7f:6e:bf:dc:9b:4b:8c:38:
47:b9:02:df:ff:a1:43:dd:f7:e2:b5:da:85:01:51:
a5:cf:6f:01:75:f9:7f:4f:14:f9:b0:fd:d5:9b:e6:
5e:90:24:68:9d:ad:64:46:31:11:df:45:64:80:ab:
5e:37:1c:7b:c9:51:f4:9a:51:bb:d1:f8:a5:55:57:
03:6a:f3:1f:78:45:09:c1:ca:12:2c:e2:cc:a6:6e:
dc:65:6a:a9:57:24:8d:6a:c4:be:ce:fc:8e:26:ca:
22:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8A:01:FB:18:E9:03:BB:52:43:C1:46:FC:F6:9F:3E:83:A2:30:3F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS274311.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
15:6f:ff:18:17:2f:c3:2d:65:aa:75:da:36:c4:6a:04:c5:e1:
d2:95:be:8d:67:05:9f:69:aa:a5:20:ee:f6:f1:46:be:93:84:
f2:0e:08:7f:02:05:6c:a5:b5:7a:a3:23:8b:c2:fb:7d:48:62:
7b:72:ab:c5:e0:ed:83:80:e8:49:39:e2:1b:50:82:97:48:c7:
94:07:0f:a1:48:62:f3:23:5e:7c:17:4b:63:3e:ac:c8:b1:f7:
f1:0f:42:e6:5d:84:43:04:17:cb:12:bc:86:5e:b2:97:17:0f:
f4:8d:40:79:e3:cd:ed:7a:db:d0:eb:40:1f:6a:b0:4a:ba:94:
64:25:24:ae:44:1b:31:41:a2:ba:aa:ca:f1:c3:a1:b2:c6:0f:
0d:b3:a7:84:48:cf:db:5d:0d:a9:71:9f:a6:18:74:33:bb:ff:
b2:54:92:ee:ba:c6:0a:1e:bf:c4:c4:d4:83:5a:af:ea:ac:ab:
28:1c:d7:42:c5:0c:e5:91:80:57:b2:9f:e5:21:03:e8:37:1c:
5c:f9:13:00:10:b5:1c:7a:cf:19:d1:83:70:17:8e:fa:b0:8a:
e6:c9:2e:f2:e7:dd:d6:91:fb:0d:02:b8:f8:a3:65:93:5f:13:
27:3d:f9:19:66:96:de:6d:f7:fd:84:08:49:f8:98:0f:09:d0:
39:06:26:da
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUazc4US2d5zrzrGXrFOgSxR5FibwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA3MDkxNjE0MjhaFw0yNzA3MDgxNjE5MjhaMDMxMTAvBgNV
BAMTKDdBOEEwMUZCMThFOTAzQkI1MjQzQzE0NkZDRjY5RjNFODNBMjMwM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAL6yp2jcPSMUSXo9Cb+m9WmFh
bi2Mgyx2qbFgLuQM4byAEgSw6su27BHiF3L4PDKRk7xGQmzEzvLp/vriuVTHD6eR
YhI7Hmj2tXpjx4vvlV8oJd+9wmR8mfspim1yDodoAel6E/GKQ7rpM7eB8nT6cUUK
GgVSZt/J9VYf4aVVJ8PZccqtfKUBUk+CbBAYgOhyOUoNfH6tC/hTwA9/br/cm0uM
OEe5At//oUPd9+K12oUBUaXPbwF1+X9PFPmw/dWb5l6QJGidrWRGMRHfRWSAq143
HHvJUfSaUbvR+KVVVwNq8x94RQnByhIs4symbtxlaqlXJI1qxL7O/I4myiJdAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUeooB+xjpA7tSQ8FG/PafPoOiMD8wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjc0MzExLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAm3X6
MA0GCSqGSIb3DQEBCwUAA4IBAQAVb/8YFy/DLWWqddo2xGoExeHSlb6NZwWfaaql
IO728Ua+k4TyDgh/AgVspbV6oyOLwvt9SGJ7cqvF4O2DgOhJOeIbUIKXSMeUBw+h
SGLzI158F0tjPqzIsffxD0LmXYRDBBfLEryGXrKXFw/0jUB5483tetvQ60AfarBK
upRkJSSuRBsxQaK6qsrxw6Gyxg8Ns6eESM/bXQ2pcZ+mGHQzu/+yVJLuusYKHr/E
xNSDWq/qrKsoHNdCxQzlkYBXsp/lIQPoNxxc+RMAELUces8Z0YNwF476sIrmyS7y
593WkfsNArj4o2WTXxMnPfkZZpbebff9hAhJ+JgPCdA5Biba
-----END CERTIFICATE-----
Generated at Mon Jul 20 18:33:51 2026 by rpki-client