Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS272547.roa
File: AS272547.roa (raw, json)
Hash identifier: zCOOdH2np5lZmElhAxUWNfs+DOTuKfYyzi3yO+rB73g=
Subject key identifier: 0D:88:AE:01:29:C0:66:97:CF:CA:01:EA:77:0F:BB:3E:01:21:13:8C
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 26471265FD2E08AA43F7C466C1EEBAD76EF089EF
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS272547.roa
Signing time: Wed 03 Jun 2026 16:47:27 +0000
ROA not before: Wed 03 Jun 2026 16:42:27 +0000
ROA not after: Wed 02 Jun 2027 16:47:27 +0000
asID: 272547
IP address blocks: 162.141.110.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 01:42:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:47:12:65:fd:2e:08:aa:43:f7:c4:66:c1:ee:ba:d7:6e:f0:89:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 3 16:42:27 2026 GMT
Not After : Jun 2 16:47:27 2027 GMT
Subject: CN=0D88AE0129C06697CFCA01EA770FBB3E0121138C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e7:d5:ee:35:bd:2f:a8:03:b5:15:54:12:a1:
53:ff:f9:31:9a:79:e4:d5:8e:43:12:2e:1f:88:77:
c8:c0:a5:bd:ed:1e:84:d9:94:13:e1:1c:bd:39:61:
8e:f6:29:0e:06:4c:55:b7:4e:48:b2:b5:a5:28:fa:
0d:a3:a0:58:4d:bc:cb:23:aa:ec:d5:e9:b4:f3:0d:
63:e0:bb:dd:14:12:8f:a4:ca:c6:85:f5:be:df:b6:
18:b2:ae:94:a8:30:be:f8:93:e8:05:fd:97:92:c2:
f6:2c:9f:74:e4:ea:b6:1b:4b:11:3d:45:72:f8:b5:
ab:8f:80:41:8b:a4:d0:cb:b6:7b:2f:da:1d:fa:a1:
c6:b3:51:f5:6b:a0:42:99:f5:e0:66:9e:89:ee:82:
12:c9:b8:09:fc:9e:74:5c:d3:5f:3d:09:e6:ca:95:
cd:02:5b:b3:5a:aa:0b:e1:6b:15:b8:40:5b:df:79:
30:81:88:3a:9d:46:37:31:4b:85:8b:ee:03:51:d0:
dd:02:8c:fc:63:70:fd:cf:62:ce:01:a3:c6:ec:01:
e3:70:4e:b8:a1:0d:9e:c5:c7:5a:1e:53:ec:fc:dc:
21:38:24:cd:70:06:db:a4:82:3f:0d:6f:ab:6c:cf:
55:02:7b:73:3e:08:60:3a:e2:c7:34:c4:cc:69:f1:
89:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:88:AE:01:29:C0:66:97:CF:CA:01:EA:77:0F:BB:3E:01:21:13:8C
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS272547.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.110.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:22:5c:26:8e:44:c7:f8:ba:02:97:67:5e:8b:5c:da:c2:8c:
0c:05:19:8c:92:29:4b:85:c8:f8:05:19:d0:87:51:4b:e4:48:
b7:ac:b0:04:da:ac:79:06:ae:1e:53:58:ef:aa:76:ad:f6:64:
d6:e4:88:59:b0:23:34:39:c5:c0:c8:28:4f:ab:b0:35:9a:ef:
c3:5a:31:93:4f:f3:59:ef:18:77:b4:c1:ad:0b:34:be:c0:51:
ad:2a:fb:e2:15:64:3f:05:bf:c0:02:6a:96:10:67:f1:86:74:
b0:02:7f:7f:3e:17:45:8d:0a:d8:88:c9:a7:20:bf:41:aa:bf:
ff:9d:fb:e4:26:bc:6d:44:5a:19:af:c0:ce:98:3f:b7:9e:96:
a3:41:67:d3:59:6e:1e:e1:52:99:ab:cb:69:f1:e8:e6:da:19:
35:3f:a8:87:55:41:da:53:3a:7f:43:56:21:30:cb:6a:d0:30:
3e:f0:0e:f7:79:9c:d6:03:05:58:20:cd:54:7e:3c:6a:4e:32:
ca:db:46:2b:7b:30:fc:e1:66:e1:09:c2:78:df:b0:73:c9:ca:
c9:f7:f1:30:1f:ed:6b:48:84:d1:cf:21:9c:b0:b1:9b:cb:eb:
07:9f:ba:af:de:e1:c0:5d:eb:34:9a:3d:46:5e:29:4d:b3:fc:
57:aa:76:3b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUJkcSZf0uCKpD98Rmwe66127wie8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA2MDMxNjQyMjdaFw0yNzA2MDIxNjQ3MjdaMDMxMTAvBgNV
BAMTKDBEODhBRTAxMjlDMDY2OTdDRkNBMDFFQTc3MEZCQjNFMDEyMTEzOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb59XuNb0vqAO1FVQSoVP/+TGa
eeTVjkMSLh+Id8jApb3tHoTZlBPhHL05YY72KQ4GTFW3TkiytaUo+g2joFhNvMsj
quzV6bTzDWPgu90UEo+kysaF9b7fthiyrpSoML74k+gF/ZeSwvYsn3Tk6rYbSxE9
RXL4tauPgEGLpNDLtnsv2h36ocazUfVroEKZ9eBmnonughLJuAn8nnRc0189CebK
lc0CW7NaqgvhaxW4QFvfeTCBiDqdRjcxS4WL7gNR0N0CjPxjcP3PYs4Bo8bsAeNw
TrihDZ7Fx1oeU+z83CE4JM1wBtukgj8Nb6tsz1UCe3M+CGA64sc0xMxp8YllAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUDYiuASnAZpfPygHqdw+7PgEhE4wwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjcyNTQ3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoo1u
MA0GCSqGSIb3DQEBCwUAA4IBAQB6IlwmjkTH+LoCl2dei1zawowMBRmMkilLhcj4
BRnQh1FL5Ei3rLAE2qx5Bq4eU1jvqnat9mTW5IhZsCM0OcXAyChPq7A1mu/DWjGT
T/NZ7xh3tMGtCzS+wFGtKvviFWQ/Bb/AAmqWEGfxhnSwAn9/PhdFjQrYiMmnIL9B
qr//nfvkJrxtRFoZr8DOmD+3npajQWfTWW4e4VKZq8tp8ejm2hk1P6iHVUHaUzp/
Q1YhMMtq0DA+8A73eZzWAwVYIM1UfjxqTjLK20YrezD84WbhCcJ437BzycrJ9/Ew
H+1rSITRzyGcsLGby+sHn7qv3uHAXes0mj1GXilNs/xXqnY7
-----END CERTIFICATE-----
Generated at Thu Jun 4 11:08:53 2026 by rpki-client