Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS272073.roa
File: AS272073.roa (raw, json)
Hash identifier: bUq7RYtrVbA/jPMtRVxonkdv2VeHTNuGAzUKOeuUUqQ=
Subject key identifier: 8D:C2:00:7A:92:73:B0:7F:2C:C7:48:E2:63:64:49:CB:B7:5E:CA:D7
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 358CC48D16CB1B680B1745AE627715B9C9608F99
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS272073.roa
Signing time: Sun 24 Aug 2025 17:06:46 +0000
ROA not before: Sun 24 Aug 2025 17:01:46 +0000
ROA not after: Sun 23 Aug 2026 17:06:46 +0000
asID: 272073
IP address blocks: 147.78.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 22:58:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:8c:c4:8d:16:cb:1b:68:0b:17:45:ae:62:77:15:b9:c9:60:8f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Aug 24 17:01:46 2025 GMT
Not After : Aug 23 17:06:46 2026 GMT
Subject: CN=8DC2007A9273B07F2CC748E2636449CBB75ECAD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:22:ba:4b:ad:28:6e:ff:02:f3:fd:e1:fb:65:
b3:60:c7:6d:86:5e:ad:e1:86:6d:c4:63:66:1b:61:
9c:03:17:97:c3:02:14:ec:7b:c9:92:31:c1:fa:8b:
0d:35:03:25:65:cf:0d:81:b0:7b:d4:09:68:d6:30:
80:da:60:47:d9:7d:53:43:9d:2a:95:5e:63:b7:11:
92:d6:8b:cf:79:02:37:95:4b:90:37:b1:22:cb:f5:
22:fa:7b:30:84:d7:33:07:ca:77:73:21:c9:db:eb:
92:e5:b1:25:9b:51:b3:e8:90:9a:63:97:a5:26:6f:
19:21:a8:aa:5d:6b:ed:7c:e2:b1:4a:bd:a6:e8:26:
d8:22:07:6e:cd:4a:81:8b:79:b9:64:92:cf:13:04:
97:37:e1:45:b6:a3:ca:14:47:8a:42:20:10:2c:b9:
e4:5a:c9:92:37:77:f6:9f:41:4f:96:93:ae:2b:83:
92:23:e1:be:c5:35:82:3a:d5:82:0e:d4:0f:77:98:
85:98:2c:08:13:be:b9:13:aa:07:8d:e7:dc:d7:8b:
77:9d:29:4e:37:1d:24:d2:e6:2a:ef:2b:9d:9f:36:
b8:db:0b:6b:b0:31:46:01:b1:03:23:be:f2:68:71:
14:9b:a9:46:af:a7:87:91:fb:b7:5a:51:2a:19:b9:
8f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C2:00:7A:92:73:B0:7F:2C:C7:48:E2:63:64:49:CB:B7:5E:CA:D7
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS272073.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.120.0/24
Signature Algorithm: sha256WithRSAEncryption
23:95:32:f2:e8:5d:a8:55:f4:04:8c:ea:d9:d8:4d:22:3e:06:
fb:26:d5:65:7f:d9:ef:c3:60:ac:ca:f5:31:bd:91:b6:05:ef:
8e:2a:8f:29:00:c1:79:4d:26:02:e1:b2:e0:cd:69:3f:75:e9:
98:49:62:28:51:01:8f:5d:ec:07:27:95:b4:91:06:07:04:2e:
a7:97:d9:e0:f8:17:68:be:71:3d:f4:91:23:cf:8e:9d:77:d9:
f5:68:b0:54:63:ef:4d:ac:ae:4e:0c:9c:c5:a8:31:17:35:06:
1d:cc:59:bd:80:cc:9e:ca:3e:85:e1:a2:14:6a:96:f0:fc:bc:
77:92:09:9e:ae:1f:74:43:ac:84:e7:8a:f6:7d:65:8f:65:c9:
e9:23:f0:b7:c3:9b:31:b9:ae:64:c6:c4:43:1b:c0:04:fa:db:
f8:9c:3a:b3:c3:4e:ab:4a:31:bc:8d:4f:61:78:37:5f:44:9a:
6c:9c:e9:7f:01:5a:2f:d5:a8:ff:7e:96:3f:19:b9:de:ad:94:
0a:db:49:67:a6:9b:c0:69:65:71:9b:4d:29:6c:b9:de:38:7c:
f5:bc:2c:ae:13:59:ad:1f:8f:54:b7:40:22:83:85:b7:1f:a4:
09:a9:05:4a:34:2a:a0:da:3d:3d:d3:04:81:56:65:41:e5:58:
78:53:29:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 13:40:27 2025 by rpki-client