Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS274983.roa
File: AS274983.roa (raw, json)
Hash identifier: rh32siKirRc8Eqyjey4qqiWknj8RidLLIWWs4bZjI1Y=
Subject key identifier: 23:55:3B:D8:4D:A4:B3:8C:BF:38:67:13:BF:FD:AE:DC:AB:6D:D1:C4
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3CEB31FEDF76542751B3CE8A6438B990342BFC97
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS274983.roa
Signing time: Tue 06 Oct 2026 02:38:56 +0000
ROA not before: Tue 06 Oct 2026 02:33:56 +0000
ROA not after: Tue 05 Oct 2027 02:38:56 +0000
asID: 274983
IP address blocks: 150.241.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:eb:31:fe:df:76:54:27:51:b3:ce:8a:64:38:b9:90:34:2b:fc:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 6 02:33:56 2026 GMT
Not After : Oct 5 02:38:56 2027 GMT
Subject: CN=23553BD84DA4B38CBF386713BFFDAEDCAB6DD1C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:86:aa:7f:e7:ab:64:2d:37:e5:99:eb:05:e0:
6e:56:8a:d1:d5:0d:84:97:ad:8d:48:67:a5:d5:31:
67:01:7e:d8:1f:96:57:5e:83:32:f5:86:9e:8d:c2:
fd:87:aa:79:ba:53:90:be:d1:07:21:44:7b:96:0d:
ea:1d:aa:a6:4e:07:ea:9a:bd:3c:6f:5c:b7:b9:8a:
ce:b4:88:d6:3d:88:69:ea:c8:1a:77:d6:2d:34:25:
13:2d:67:dc:3f:50:42:13:17:e5:73:94:95:87:e8:
27:b3:7e:80:4e:5c:ac:3a:5f:f2:0e:bd:e8:1a:28:
b3:36:fc:80:a8:58:22:6a:27:3d:6b:9e:c8:54:8b:
25:0b:15:82:ea:fb:47:6c:02:02:da:e9:b7:8a:2d:
4b:7d:f7:1c:c2:ec:a5:d6:e8:32:9e:04:45:8b:fc:
7c:fb:db:72:28:08:7d:eb:b0:f6:e5:ec:87:66:b0:
fe:bb:c5:66:a2:f8:ec:a9:a1:0f:fe:a5:4e:93:b7:
d4:67:96:75:3a:09:f1:04:8a:cd:58:0a:39:8c:8b:
1a:5d:30:d8:f8:08:40:d0:b7:24:d8:d6:a2:2e:98:
ec:ca:d4:74:1e:2c:7d:e4:e4:f0:f0:52:06:7e:45:
ad:e6:02:1e:b0:52:d9:05:3c:37:86:59:95:55:8d:
97:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:55:3B:D8:4D:A4:B3:8C:BF:38:67:13:BF:FD:AE:DC:AB:6D:D1:C4
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS274983.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.136.0/24
Signature Algorithm: sha256WithRSAEncryption
51:56:9a:f3:a8:6d:b8:f4:f3:2b:82:19:9a:65:fe:a3:28:39:
39:4a:6b:61:ff:6b:d1:ef:22:a5:2b:c9:d2:fb:f0:2d:80:90:
de:f6:79:53:ba:eb:a8:e9:3f:f5:2d:44:e5:37:ff:51:1e:8a:
b2:3a:1f:9c:af:d3:5a:1d:a1:b0:d9:f0:8b:fc:66:0c:f7:9f:
e4:ba:99:24:3e:56:e5:d0:36:7c:a5:d0:a2:66:05:57:53:00:
e0:16:8d:df:2e:84:da:3e:10:a5:64:41:61:bb:4e:42:d4:a1:
4b:c0:6f:34:4a:35:ca:4f:63:3a:5f:bb:a0:2f:95:85:19:d1:
d4:2a:5f:34:e6:4e:b7:45:a0:e7:4a:03:8b:3e:99:10:7a:1d:
e7:38:57:d3:23:94:59:99:44:a5:43:4b:98:61:d6:a6:1a:85:
c5:1b:45:d0:7e:db:b2:79:1e:f6:32:b0:02:4a:3d:03:03:a8:
62:df:ec:e6:d0:3e:e0:a4:1b:80:bd:1a:8a:6a:51:72:df:aa:
a4:5a:6d:c6:41:fd:ea:3d:00:d9:29:dc:5f:2d:7c:51:d3:18:
08:b8:93:12:9b:99:b7:03:44:25:a1:39:cd:ff:a7:ee:e5:92:
ba:68:cb:cc:16:87:a0:50:58:69:9b:29:55:16:3b:d4:71:e2:
60:87:df:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:09:27 2026 by rpki-client