Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS271993.roa
File: AS271993.roa (raw, json)
Hash identifier: mz+aAKSFmVKdLB0guzgI9ZuFni9StbKqQk6FZ9RAZmw=
Subject key identifier: 4B:6E:4B:5B:FC:B8:CC:EA:8B:42:90:40:82:5C:58:3F:1D:38:2B:30
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1784EAA95109535B60D3A308BDF9C52B8DB985BC
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS271993.roa
Signing time: Wed 14 Oct 2026 15:22:38 +0000
ROA not before: Wed 14 Oct 2026 15:17:38 +0000
ROA not after: Wed 13 Oct 2027 15:22:38 +0000
asID: 271993
IP address blocks: 2a13:9500:1f0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:84:ea:a9:51:09:53:5b:60:d3:a3:08:bd:f9:c5:2b:8d:b9:85:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 14 15:17:38 2026 GMT
Not After : Oct 13 15:22:38 2027 GMT
Subject: CN=4B6E4B5BFCB8CCEA8B429040825C583F1D382B30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:5e:11:48:26:a1:3a:52:ac:01:88:1c:86:1c:
a3:67:28:f6:96:af:25:73:f7:f5:01:73:81:4a:73:
5f:4d:09:e1:9e:40:41:f7:3d:29:e4:57:e0:6c:f2:
f2:58:c7:ae:ed:f8:d4:07:b8:fb:cd:92:22:e5:e3:
49:ef:57:99:3c:8b:30:b2:e6:53:d1:55:c7:b0:4f:
5a:9f:37:ab:e5:10:46:5f:9f:56:21:af:19:43:8e:
84:33:bf:b0:02:e5:41:ba:de:fa:40:7d:41:e4:d6:
f8:d9:21:47:d5:88:a1:54:e6:45:bd:82:16:65:4c:
d8:a6:7d:59:98:e7:58:03:ba:fb:6c:be:fd:98:cc:
55:cb:cb:ca:f0:67:fe:a8:24:ff:b3:e6:18:11:b0:
b7:e4:7e:db:71:f7:56:3a:45:59:15:43:ec:72:dc:
e2:6e:7f:57:b2:4c:9b:59:50:56:cb:da:ec:6e:63:
d2:ad:10:83:f6:ee:f2:6b:8c:bb:f9:08:ac:d9:f0:
cc:31:05:e8:94:c5:fd:64:f8:dc:42:d6:b5:ae:15:
97:90:91:f0:ec:dd:f2:3f:e9:b6:c0:e3:65:46:be:
1f:60:d3:c5:7e:0c:ef:b5:44:e4:7c:ae:9b:95:75:
22:e1:79:eb:f6:94:1c:83:ac:f1:5f:d7:a3:fa:b9:
e6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6E:4B:5B:FC:B8:CC:EA:8B:42:90:40:82:5C:58:3F:1D:38:2B:30
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS271993.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1f0::/48
Signature Algorithm: sha256WithRSAEncryption
6e:c3:fd:34:ef:1c:0d:f1:52:e1:c9:fa:55:81:6d:88:70:7f:
28:ac:9f:46:9a:0f:23:e6:d5:77:b1:74:2c:a0:23:44:58:c6:
91:5d:25:4f:bd:68:df:aa:9a:cb:d8:0d:4e:a5:3d:23:a3:03:
93:1d:9c:01:46:30:48:a0:fc:86:62:ca:f3:ba:2f:ff:7d:4d:
a9:ba:82:41:2d:76:e9:09:0a:15:f0:1e:53:94:2c:12:9e:d9:
9d:20:e9:af:31:af:8e:c5:e7:75:fb:a9:18:41:ff:5c:a8:5a:
f7:40:d2:98:25:95:c9:f3:13:17:90:68:5f:b3:cf:9f:eb:6f:
98:90:b6:85:42:cf:d6:45:ed:ae:59:69:6e:6c:fe:b8:73:b1:
f4:8c:ed:f6:fe:c9:41:0f:86:3f:4b:ea:66:9d:a7:7b:bf:e6:
f2:57:82:b7:ca:46:6f:4d:2c:01:88:57:60:90:f9:f3:2e:60:
86:38:92:b7:c1:be:c3:6b:76:b0:8f:9e:ba:4a:7d:db:9f:3c:
b5:99:6a:d7:7d:c8:12:a0:7d:ef:49:25:a7:ac:59:61:81:78:
fc:cf:32:87:0e:33:ee:7e:e9:b5:bd:bb:a5:cd:ca:fc:dd:26:
f7:fa:2c:fe:58:92:5f:0a:54:9f:c1:d3:37:9c:49:e3:f4:01:
7e:f3:cc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 09:13:02 2026 by rpki-client