Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS273973.roa
File: AS273973.roa (raw, json)
Hash identifier: ZPAkKPfPSTcrPkpMpZsAqVM2iQJ6EmF/3Yq2di0ZhwU=
Subject key identifier: BD:EA:89:C9:AE:66:14:26:00:50:DC:60:E1:7F:8B:D0:E0:72:0C:7A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 172E4050811BA220A5DE94075193791DF6F8B37E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS273973.roa
Signing time: Sun 09 Aug 2026 03:53:44 +0000
ROA not before: Sun 09 Aug 2026 03:48:44 +0000
ROA not after: Sun 08 Aug 2027 03:53:44 +0000
asID: 273973
IP address blocks: 140.233.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:2e:40:50:81:1b:a2:20:a5:de:94:07:51:93:79:1d:f6:f8:b3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 9 03:48:44 2026 GMT
Not After : Aug 8 03:53:44 2027 GMT
Subject: CN=BDEA89C9AE6614260050DC60E17F8BD0E0720C7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:35:81:5c:ad:a5:63:00:91:b9:4e:c5:c4:71:
df:ff:87:41:fd:4f:ac:5f:d3:29:e2:95:96:23:09:
33:58:fd:b7:9f:a2:d5:91:09:97:46:11:d5:ba:a0:
10:f0:b7:7d:2b:40:39:5d:a8:38:7d:e8:29:2f:82:
03:41:38:07:e9:5e:90:fe:39:9d:53:77:f4:f0:b0:
9e:26:91:ee:ef:7e:c8:74:47:76:20:94:08:2c:0c:
8f:d4:70:0d:2e:d7:a7:7b:9c:97:9d:33:00:bd:f5:
fc:b8:7f:43:57:48:ac:4c:92:2b:d3:36:95:f7:28:
fc:f7:fb:b6:aa:93:28:18:98:a4:a8:d5:40:fd:a8:
8a:93:03:32:53:83:fa:c8:af:b1:25:18:97:e1:a5:
80:32:44:58:07:39:56:73:39:cd:87:3c:08:f9:80:
52:53:1e:ea:62:25:fb:33:71:88:ad:bb:3c:23:44:
66:77:18:78:3e:b1:6a:70:2f:d0:fa:e0:12:c5:57:
56:11:f0:d4:eb:05:dd:42:5c:5b:74:80:3e:9d:7b:
b7:45:4a:eb:b5:ff:69:c6:45:eb:32:2f:4c:14:b9:
65:1d:74:49:b1:43:27:47:39:4a:94:97:41:cd:a0:
eb:16:d6:3d:00:18:49:79:0d:f6:51:b9:d5:5a:0c:
da:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EA:89:C9:AE:66:14:26:00:50:DC:60:E1:7F:8B:D0:E0:72:0C:7A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS273973.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.173.0/24
Signature Algorithm: sha256WithRSAEncryption
25:ab:16:11:d6:ac:88:3a:d8:a7:fc:47:b8:5d:15:6a:51:cc:
a0:33:c1:04:f6:1b:ba:45:68:9c:ff:f3:6e:b4:65:22:1f:98:
04:eb:71:bc:2b:8e:95:c0:21:5d:95:58:6b:d3:a8:af:fa:0b:
9c:1e:6b:92:0a:45:19:d8:65:c0:33:e2:f0:cb:5a:42:ea:a7:
54:ac:18:a7:ef:04:39:6b:77:a6:ac:dc:e9:64:d0:62:91:be:
fb:cd:11:5a:36:5f:fa:d0:aa:22:da:89:11:c7:ab:7c:bd:69:
93:9f:58:28:a3:89:43:fb:96:67:6b:f8:1f:e2:43:09:25:86:
bc:0f:df:a8:eb:7c:fe:d5:b9:b8:4d:6b:ee:6b:e3:f6:a5:7e:
71:b0:b3:41:70:21:82:a3:6f:8b:59:3c:95:cb:90:bc:f1:48:
37:bf:9d:85:05:2c:0f:43:cc:62:eb:91:3f:c8:f1:c6:7f:a8:
40:c9:83:ff:8c:da:00:5f:47:7a:65:e1:d4:b6:f6:38:1d:54:
9d:98:8d:18:9b:7b:a0:92:df:60:71:20:c7:25:57:8e:e3:8a:
85:0d:e9:eb:58:01:9f:ee:4c:3a:a6:81:dc:26:50:54:28:db:
a6:11:12:32:e9:b1:2b:21:8a:59:ca:ff:49:04:1f:09:1f:8d:
ab:68:4e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:47:23 2026 by rpki-client