Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS27411.roa
File: AS27411.roa (raw, json)
Hash identifier: zOMXIyMXmj+dKV6PjZhHmyUF8z8/Nf9lsQ4fY7O2Hdo=
Subject key identifier: 69:96:A2:97:0B:3C:32:45:DD:B1:04:BB:53:3D:F2:68:FA:F7:B0:A6
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 18F0847C4A1EA4C92C3B0303F0B10F15686CF3F9
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS27411.roa
Signing time: Tue 10 Feb 2026 11:36:46 +0000
ROA not before: Tue 10 Feb 2026 11:31:46 +0000
ROA not after: Tue 09 Feb 2027 11:36:46 +0000
asID: 27411
IP address blocks: 148.135.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:f0:84:7c:4a:1e:a4:c9:2c:3b:03:03:f0:b1:0f:15:68:6c:f3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 10 11:31:46 2026 GMT
Not After : Feb 9 11:36:46 2027 GMT
Subject: CN=6996A2970B3C3245DDB104BB533DF268FAF7B0A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:55:b6:8f:45:d7:df:33:c0:11:c6:4c:45:22:
a7:63:a9:b3:88:f5:00:68:c0:5a:62:e4:eb:0a:ae:
3c:80:e4:af:5c:48:ca:a6:cd:8b:d5:ae:ce:0e:e7:
03:d8:7c:b3:eb:a4:37:b9:bb:ce:b3:4a:f2:07:d7:
25:48:4e:f4:78:1a:f7:73:0b:44:0a:bd:ab:d2:7a:
1b:f3:3b:7b:c2:26:bf:72:76:2b:f3:a0:b6:4f:5d:
94:62:ea:3a:a4:25:df:5b:57:b5:6a:32:5e:5e:d4:
fe:83:f4:a6:cc:cd:65:80:f7:5b:6f:29:eb:0f:03:
aa:91:fc:40:2d:f4:9c:fa:9d:39:11:eb:76:b9:86:
74:5d:ef:c7:ff:6a:26:29:dd:36:14:86:58:6c:5e:
ca:6c:0d:1a:55:b2:0b:bc:ce:70:53:fc:37:3d:7c:
8e:48:d0:d5:6c:87:a3:6c:e8:37:66:f3:b6:8e:00:
67:94:7c:bf:81:90:7a:78:45:8d:20:c8:67:71:7f:
62:97:67:3c:1f:b9:cf:ad:4f:20:53:e5:5a:fb:d3:
1f:de:ba:fa:22:5f:c9:4a:17:00:90:e3:dc:ba:20:
32:ae:67:3f:2a:61:bc:e1:d0:90:13:9f:f1:a9:e7:
6e:8c:d2:e1:23:b5:65:c1:a9:69:a1:89:19:46:42:
49:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:96:A2:97:0B:3C:32:45:DD:B1:04:BB:53:3D:F2:68:FA:F7:B0:A6
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS27411.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.144.0/24
Signature Algorithm: sha256WithRSAEncryption
87:da:62:c1:2d:fb:74:1e:3d:5c:16:9f:50:57:d6:d0:5c:a8:
96:7a:a4:e5:6f:88:0b:69:31:a4:ba:44:76:a2:16:1d:ca:f4:
e4:f4:f0:0d:ff:5f:58:45:ed:0d:de:eb:33:2d:4e:af:cb:44:
2c:81:1d:e4:9b:55:ba:6f:74:7b:2d:5e:8a:df:4b:05:7b:83:
80:d6:91:3a:39:0f:55:0f:c6:20:71:cd:1a:54:51:18:82:f0:
bf:40:89:88:a8:c5:07:e9:55:01:83:07:bb:86:77:a8:2c:37:
e6:e1:98:db:15:0d:60:83:5b:91:62:5f:2a:35:89:da:ad:6d:
79:a3:60:b9:31:91:47:06:72:3e:f2:85:5e:ec:c2:ca:14:c6:
ac:cf:9b:38:13:5e:a8:53:f2:bc:1c:bb:db:9b:50:8f:d5:94:
13:2f:aa:cc:66:50:cb:c1:e7:e9:d8:b6:be:b2:28:b1:ba:27:
23:47:3e:b8:65:ce:2f:b0:39:a4:66:e3:5b:22:b6:fa:72:6f:
1e:da:6b:e8:d8:6a:e2:c2:6f:e1:1a:24:94:79:c8:9d:a8:7c:
d7:86:1e:b5:58:8a:4d:07:7d:8d:9e:14:96:b9:aa:ac:6f:cf:
b3:2f:84:5f:73:81:54:24:b8:f1:7c:a0:88:51:4f:f3:24:0e:
9e:7f:5d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 11:55:56 2026 by rpki-client