Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS269070.roa
File: AS269070.roa (raw, json)
Hash identifier: t3M90aFMlxa9EqeK9xQ/UpEs1SzxwpWEPRiA6D9jz2k=
Subject key identifier: 8C:B3:3A:5B:D1:EE:96:82:62:AB:AB:44:57:FB:99:87:28:47:6B:24
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 169DC90F68525508E8FC06B7A79C5DA5D5B352DE
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS269070.roa
Signing time: Sat 05 Sep 2026 00:01:18 +0000
ROA not before: Fri 04 Sep 2026 23:56:18 +0000
ROA not after: Sat 04 Sep 2027 00:01:18 +0000
asID: 269070
IP address blocks: 179.61.154.0/24 maxlen: 24
181.214.95.0/24 maxlen: 24
181.215.0.0/24 maxlen: 24
181.215.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:9d:c9:0f:68:52:55:08:e8:fc:06:b7:a7:9c:5d:a5:d5:b3:52:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 4 23:56:18 2026 GMT
Not After : Sep 4 00:01:18 2027 GMT
Subject: CN=8CB33A5BD1EE968262ABAB4457FB998728476B24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:12:09:b3:0a:3d:9f:8e:de:45:70:db:bf:7d:
62:dc:06:de:77:39:ab:a5:0d:34:ba:5c:52:15:f6:
1a:2e:f9:28:29:19:6d:b8:03:5b:77:75:98:4c:1c:
5c:f5:9c:7a:d6:63:3f:68:0e:0e:f5:e8:8c:3c:51:
14:4f:1b:e3:cd:d9:ea:b4:c1:f3:30:c2:98:f0:64:
ac:b7:5f:b8:28:50:76:af:79:62:7a:40:54:25:78:
dd:ba:d9:be:d5:4f:94:ce:32:84:17:16:01:e1:4d:
a4:64:96:81:7b:e3:25:8f:c5:c7:10:a2:1c:1e:be:
11:e1:bf:37:1c:d0:04:96:f8:ce:f3:ad:da:0d:15:
31:a0:57:29:4b:f2:93:91:b7:27:aa:15:b4:15:bb:
a4:f3:81:bb:32:01:bb:5d:fb:b0:f0:94:15:0f:e9:
89:a7:37:86:03:85:f7:a6:c9:23:38:29:88:dc:58:
86:d1:60:38:9f:7b:03:a9:ba:91:d6:c8:19:89:07:
83:f3:8c:3f:a3:c4:12:f8:29:4c:01:88:02:c0:79:
fa:d7:4c:0a:97:21:2a:38:2f:a7:9c:6a:9a:02:26:
32:97:e9:50:94:38:26:e2:13:46:4d:e2:c3:18:3d:
1b:02:50:95:60:15:c1:30:ff:ee:e8:fe:e3:52:d3:
20:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B3:3A:5B:D1:EE:96:82:62:AB:AB:44:57:FB:99:87:28:47:6B:24
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS269070.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.154.0/24
181.214.95.0/24
181.215.0.0/24
181.215.48.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:26:6c:db:71:50:62:75:2c:de:55:d8:00:a5:a2:3c:ea:07:
af:8c:64:2a:a1:5b:11:5a:57:bc:60:65:e0:4f:d3:2b:65:34:
01:d1:be:27:14:3d:a0:f4:31:1d:90:ad:e4:d3:df:e4:ec:f4:
e6:bd:4e:75:cf:86:a1:21:4d:ef:db:d1:86:05:95:ca:2f:fc:
3b:a1:32:65:68:e2:1b:10:e9:0b:ac:90:d4:9e:2d:0a:fb:84:
1e:93:08:ba:7d:e0:8f:54:2b:63:48:7e:ca:ed:23:92:0a:2a:
9f:8d:52:59:d8:9a:7a:99:59:de:fe:af:5a:be:a3:48:55:07:
5f:bd:99:4f:4a:ba:91:47:13:3f:62:d1:bb:ed:b3:72:02:c5:
d3:cf:9a:98:c4:fc:2f:31:cd:b7:21:87:d3:5e:04:99:c2:2f:
2e:c5:3b:30:c9:db:e0:69:68:4b:db:c2:18:40:95:54:b2:1c:
22:ed:92:1e:74:1e:8f:36:f5:a2:98:b3:33:eb:c1:0e:41:fc:
e5:83:af:8a:60:9b:6f:93:be:45:73:8e:3d:64:60:5b:e5:0c:
67:88:fc:cf:8e:28:58:dd:26:46:64:95:76:86:0c:8f:46:48:
5c:30:7c:b9:82:3d:6b:28:b5:99:a2:c6:ab:83:22:fb:33:1a:
ff:ec:f1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:30:54 2026 by rpki-client