Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS1273.roa
File: AS1273.roa (raw, json)
Hash identifier: TXnFKyz6Z2em2mIz7Qn5WTJNUhO9Ea4rBSMRorWlt8s=
Subject key identifier: 25:4B:D9:5B:E9:BC:6F:6A:8D:88:9F:44:6D:09:DB:75:20:C2:AB:70
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2E7DBDAB392CF4297DB91111F4776F9D4194FF20
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS1273.roa
Signing time: Mon 28 Sep 2026 10:44:05 +0000
ROA not before: Mon 28 Sep 2026 10:39:05 +0000
ROA not after: Mon 27 Sep 2027 10:44:05 +0000
asID: 1273
IP address blocks: 87.81.0.0/20 maxlen: 24
87.81.16.0/20 maxlen: 24
94.117.0.0/16 maxlen: 24
176.25.0.0/17 maxlen: 24
176.26.0.0/16 maxlen: 24
176.27.0.0/17 maxlen: 24
188.222.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:7d:bd:ab:39:2c:f4:29:7d:b9:11:11:f4:77:6f:9d:41:94:ff:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 28 10:39:05 2026 GMT
Not After : Sep 27 10:44:05 2027 GMT
Subject: CN=254BD95BE9BC6F6A8D889F446D09DB7520C2AB70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f1:db:40:e7:37:dd:b7:82:94:91:61:4e:8f:
1d:e3:32:17:5c:d6:1d:3b:e5:3d:80:81:b4:5f:f0:
83:c5:13:ec:9b:1c:09:5c:10:28:5b:6e:99:b0:8c:
3e:2f:01:81:54:82:85:ac:5b:77:6d:4b:fe:a5:b1:
2f:88:9c:60:51:6d:76:20:35:53:2f:87:6a:ff:e3:
c9:8e:4b:c7:bc:d4:35:e8:aa:74:ba:f4:e2:14:43:
32:d4:7d:38:8f:a2:47:da:3f:67:49:64:c0:b3:b8:
43:ce:cc:d2:1f:2a:3d:2c:95:5a:d7:6d:ae:b2:b2:
3d:54:2a:ea:0f:54:66:8e:66:5d:2c:3f:36:06:6d:
40:7a:42:a5:35:33:e4:ca:85:f0:df:cc:26:8c:96:
e3:a1:0d:ad:b8:8d:a5:5c:29:f0:07:d5:f6:ef:de:
e1:82:92:7f:92:ac:6b:68:a6:94:ba:26:75:b4:c3:
2a:58:9e:0c:39:09:24:2a:b6:ef:a7:ad:df:1e:98:
90:b3:e6:9a:a8:7c:06:8b:89:98:0e:fb:09:de:0a:
9a:c2:35:a3:38:db:1c:35:32:21:e5:89:23:27:db:
33:dc:32:25:7b:9c:1f:98:3b:cc:11:e9:07:07:46:
c6:1d:c3:34:af:3f:88:d1:70:8c:16:d5:06:e4:59:
88:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4B:D9:5B:E9:BC:6F:6A:8D:88:9F:44:6D:09:DB:75:20:C2:AB:70
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS1273.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.81.0.0/19
94.117.0.0/16
176.25.0.0/17
176.26.0.0-176.27.127.255
188.222.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2a:c5:94:96:d2:65:51:ac:57:8f:8b:ee:8d:53:2c:12:e6:67:
79:9a:d8:eb:7c:4c:f7:a6:49:3e:7f:a7:94:b9:f2:da:40:ae:
18:aa:5e:23:fd:d9:6b:a9:8d:e7:e5:97:37:11:7c:37:7a:42:
09:27:fb:a1:8a:a0:71:4f:95:64:3d:e0:b6:84:c2:0e:bd:1e:
44:2f:a8:81:b2:35:f8:28:0f:87:fb:51:3d:53:be:59:61:45:
ff:df:19:97:f0:d8:43:90:84:3b:2c:79:62:7e:13:4e:f8:75:
93:fb:23:41:b2:81:9c:98:2e:b2:14:8a:38:c9:8c:2e:9d:00:
3f:92:90:ad:71:1c:25:85:77:da:a6:97:2e:98:ab:ec:86:04:
bb:50:f9:e8:91:fd:89:53:46:7f:4d:eb:9b:20:19:9f:86:54:
e9:80:af:6f:33:9f:53:a0:db:cb:c4:c1:5e:31:bb:23:f9:c8:
c3:40:48:b7:d4:35:57:c3:4a:0e:e1:65:d5:b7:c4:a9:34:36:
0a:43:3c:29:90:34:c1:1f:b5:74:35:90:8c:05:16:b3:de:d6:
f5:82:35:b5:25:05:c3:28:1f:80:3c:47:47:7a:30:2f:56:a5:
2f:85:b8:20:0e:1c:19:f2:81:c8:f3:f0:37:ea:11:36:dd:3e:
f1:87:e7:57
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgIULn29qzks9Cl9uRER9HdvnUGU/yAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA5MjgxMDM5MDVaFw0yNzA5MjcxMDQ0MDVaMDMxMTAvBgNV
BAMTKDI1NEJEOTVCRTlCQzZGNkE4RDg4OUY0NDZEMDlEQjc1MjBDMkFCNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC78dtA5zfdt4KUkWFOjx3jMhdc
1h075T2AgbRf8IPFE+ybHAlcEChbbpmwjD4vAYFUgoWsW3dtS/6lsS+InGBRbXYg
NVMvh2r/48mOS8e81DXoqnS69OIUQzLUfTiPokfaP2dJZMCzuEPOzNIfKj0slVrX
ba6ysj1UKuoPVGaOZl0sPzYGbUB6QqU1M+TKhfDfzCaMluOhDa24jaVcKfAH1fbv
3uGCkn+SrGtoppS6JnW0wypYngw5CSQqtu+nrd8emJCz5pqofAaLiZgO+wneCprC
NaM42xw1MiHliSMn2zPcMiV7nB+YO8wR6QcHRsYdwzSvP4jRcIwW1QbkWYg9AgMB
AAGjggIlMIICITAdBgNVHQ4EFgQUJUvZW+m8b2qNiJ9EbQnbdSDCq3AwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMTI3My5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA8BggrBgEFBQcBBwEB/wQtMCswKQQCAAEwIwMEBVdRAAMD
AF51AwQHsBkAMAsDAwGwGgMEB7AbAAMDALzeMA0GCSqGSIb3DQEBCwUAA4IBAQAq
xZSW0mVRrFePi+6NUywS5md5mtjrfEz3pkk+f6eUufLaQK4Yql4j/dlrqY3n5Zc3
EXw3ekIJJ/uhiqBxT5VkPeC2hMIOvR5EL6iBsjX4KA+H+1E9U75ZYUX/3xmX8NhD
kIQ7LHlifhNO+HWT+yNBsoGcmC6yFIo4yYwunQA/kpCtcRwlhXfappcumKvshgS7
UPnokf2JU0Z/TeubIBmfhlTpgK9vM59ToNvLxMFeMbsj+cjDQEi31DVXw0oO4WXV
t8SpNDYKQzwpkDTBH7V0NZCMBRaz3tb1gjW1JQXDKB+APEdHejAvVqUvhbggDhwZ
8oHI8/A36hE23T7xh+dX
-----END CERTIFICATE-----
Generated at Mon Oct 19 08:01:12 2026 by rpki-client