Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS270439.roa
File: AS270439.roa (raw, json)
Hash identifier: UBUZ/uqftKPH8PfsLfsHi3h0p55mBDF3SG3RJjKp9tw=
Subject key identifier: 30:77:64:EF:88:82:F2:F3:D5:CC:CB:96:B9:73:9D:DE:08:4D:E5:BB
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 639ED38B9DFB61EB921A181D1BC16E54B071E75D
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS270439.roa
Signing time: Fri 09 Oct 2026 14:36:50 +0000
ROA not before: Fri 09 Oct 2026 14:31:50 +0000
ROA not after: Fri 08 Oct 2027 14:36:50 +0000
asID: 270439
IP address blocks: 141.11.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:9e:d3:8b:9d:fb:61:eb:92:1a:18:1d:1b:c1:6e:54:b0:71:e7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 9 14:31:50 2026 GMT
Not After : Oct 8 14:36:50 2027 GMT
Subject: CN=307764EF8882F2F3D5CCCB96B9739DDE084DE5BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:70:5b:9b:9e:13:29:4e:52:64:b7:b1:e7:4a:
d0:a8:25:52:5b:3a:fb:5a:96:db:d3:5d:67:8c:7e:
4c:34:a5:12:ad:2e:e3:05:b7:07:18:cc:c7:20:37:
26:7a:23:bd:9d:98:85:ab:37:55:ab:94:9e:ab:fc:
9c:4f:58:a6:77:c7:19:33:e1:28:43:08:e6:10:bc:
cb:ec:8c:ac:b8:f6:dd:a8:0c:1d:8b:64:4c:09:6e:
c5:68:a3:14:d9:5c:0d:14:8c:1f:58:ec:b9:46:a0:
a5:d3:51:1d:8b:9f:90:19:65:6f:ca:f5:0a:85:7f:
be:4a:25:68:51:3b:f7:1a:71:05:03:92:fb:98:00:
00:06:e8:71:f8:6d:a1:58:bd:38:10:49:ba:2f:49:
b6:ea:34:da:03:93:21:0d:9d:08:e7:3f:b3:e6:a7:
f3:0a:90:40:55:a1:96:dc:32:47:40:90:2f:33:61:
b2:a2:15:11:ca:e2:df:a4:81:c2:c2:db:fc:62:2b:
25:cc:23:9b:21:51:e1:20:94:be:3d:13:21:9d:05:
2f:0a:95:0b:5d:78:3c:ff:33:07:fa:72:13:50:0a:
cd:2b:52:69:39:f1:25:dc:19:16:0c:ba:57:56:88:
24:8e:66:11:fc:44:1e:b8:20:f7:85:57:aa:06:6e:
f5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:77:64:EF:88:82:F2:F3:D5:CC:CB:96:B9:73:9D:DE:08:4D:E5:BB
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS270439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.47.0/24
Signature Algorithm: sha256WithRSAEncryption
38:14:b4:2d:ee:b2:8b:e3:82:f7:80:ce:03:58:5f:20:80:02:
44:12:7f:bb:64:c6:9e:70:c4:78:c5:a6:b1:d9:87:90:7f:a0:
92:54:73:ea:9a:ed:a6:ef:e5:4a:e8:99:3c:a2:0a:e3:36:a8:
1b:14:c4:7a:82:a4:ea:91:1d:70:d7:d8:f9:de:78:5f:42:67:
32:73:d8:43:44:dc:6f:9c:61:d9:c9:1d:63:b8:b4:e0:d3:c5:
d4:01:03:b6:17:c9:96:38:e8:e1:1d:32:f4:86:ce:fe:2f:41:
25:e7:91:a3:ef:c5:83:f4:37:e0:15:6f:16:46:1b:b6:bd:5d:
26:f3:0c:65:f2:42:cd:d3:f4:5a:7b:fa:5c:f0:be:15:ec:34:
ab:fc:3c:91:36:88:50:b7:0c:6d:b1:8f:a8:d1:b8:8e:6c:89:
ac:80:0b:a6:4a:32:89:2f:ab:4b:fc:db:0a:6c:a7:0f:85:86:
38:71:7a:12:85:f8:d5:15:aa:d7:ef:6c:71:a7:12:2c:34:2c:
4c:f0:90:62:8c:c0:a0:fa:0b:21:67:97:7d:96:e1:19:72:cb:
f2:29:f1:11:60:69:f6:fc:c4:81:2d:c5:72:8e:48:94:bc:57:
a8:bf:9b:e5:9d:0b:a7:54:50:d2:a2:b1:ce:c9:22:9b:5c:59:
f4:a3:08:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 04:03:25 2026 by rpki-client