Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS275059.roa
File: AS275059.roa (raw, json)
Hash identifier: s5gj41nmCXADqJb6xWY2s4gOr0gx7+Coc/TMT0RMhOI=
Subject key identifier: 83:97:71:7A:44:11:2E:CC:4B:D1:FF:77:C0:2D:DE:BE:9B:81:CB:95
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 253E12DAF7994181187D5389921C47950DDA548F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS275059.roa
Signing time: Wed 07 Oct 2026 00:13:05 +0000
ROA not before: Wed 07 Oct 2026 00:08:05 +0000
ROA not after: Wed 06 Oct 2027 00:13:05 +0000
asID: 275059
IP address blocks: 178.83.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:3e:12:da:f7:99:41:81:18:7d:53:89:92:1c:47:95:0d:da:54:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 7 00:08:05 2026 GMT
Not After : Oct 6 00:13:05 2027 GMT
Subject: CN=8397717A44112ECC4BD1FF77C02DDEBE9B81CB95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a3:e1:dc:1d:35:e9:a0:7b:b2:b9:7f:0a:7e:
ea:92:00:53:5e:3d:43:e1:10:38:db:82:01:d3:ed:
79:21:81:21:49:72:8b:b1:44:b9:56:a1:ac:1c:81:
fd:cb:45:d2:76:f5:f8:72:15:b3:47:6a:f4:f4:c0:
95:e9:58:4a:01:c4:fe:85:60:df:e0:32:66:75:16:
af:b7:c5:7e:3f:9d:56:6d:8a:da:44:cf:97:36:ed:
88:93:37:96:ad:33:19:19:ab:d0:74:a9:9a:75:e4:
88:0f:cc:03:e8:19:0c:04:5b:93:25:53:13:01:2f:
ce:ee:87:c6:fb:57:c9:bd:34:13:60:ab:c5:b1:6a:
1c:00:2c:b4:4f:f2:d9:a4:9c:98:ff:10:10:63:24:
71:f7:b3:c4:25:4b:1d:5a:c6:00:b2:0d:56:12:d9:
8c:e4:e3:f3:3c:48:36:d6:1a:59:d0:d2:70:b3:81:
23:c9:7c:8a:75:0d:e3:e2:d1:20:08:1b:9f:46:0d:
60:cf:26:76:ab:12:68:0b:e7:96:ec:ef:6a:a0:2b:
4b:a2:2b:89:27:57:de:82:cf:7d:25:3d:00:20:46:
5a:d1:f0:ce:06:55:6d:61:65:04:49:02:45:dc:82:
f7:30:ba:0e:ee:98:4f:b7:e2:ad:bb:ad:2c:43:81:
0b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:97:71:7A:44:11:2E:CC:4B:D1:FF:77:C0:2D:DE:BE:9B:81:CB:95
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS275059.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.104.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:9c:af:7b:67:e1:fc:83:27:f4:42:d4:e4:da:bf:a8:c7:49:
eb:15:32:7f:dd:60:1e:08:79:47:95:9b:6b:fe:d0:14:be:78:
19:bd:c9:60:9b:9d:80:24:21:5e:7e:89:37:69:b8:a4:cf:72:
ec:1e:b3:2f:4e:e6:1a:74:43:aa:e7:81:ca:73:dc:1f:4a:82:
0e:1f:b6:51:e5:79:c1:91:fb:7b:fe:7d:5c:96:88:62:54:21:
fd:2d:25:4f:49:63:f2:c5:a3:11:5d:f6:1e:1f:4f:6c:52:4f:
c2:14:0c:a2:56:f1:8f:3e:46:c0:26:01:f8:c3:d3:50:52:3c:
ef:06:fd:ff:8b:07:6f:7d:0c:5b:90:28:bf:9b:3a:8c:88:85:
c9:95:6d:89:ac:38:3f:d9:87:f0:e3:8b:48:43:5b:dc:8e:ab:
78:9d:ad:09:a3:23:a2:62:7f:24:56:91:4e:55:bf:94:19:4c:
77:98:a7:1b:52:36:50:84:d8:23:aa:ae:63:fc:e5:04:e2:3e:
0e:ea:9e:f3:1f:e9:61:ea:6a:35:58:92:cc:69:dd:cb:45:15:
3d:ea:74:49:30:0c:44:3d:ae:2f:5b:0a:79:41:8e:b0:5f:14:
31:5f:50:5d:ba:84:33:20:8b:d0:86:24:2b:91:08:fc:aa:7a:
16:0f:81:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 18:13:01 2026 by rpki-client