Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS271799.roa
File: AS271799.roa (raw, json)
Hash identifier: F45+5FWRHs3vPRQb9KVnckUtwOf1Msx7e4ekV3nGcFo=
Subject key identifier: B6:54:F7:83:CE:7B:4F:3F:0D:47:06:DE:CD:F0:AE:7D:A5:52:48:A9
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 76BBA421C05033EAF9954B3DE0A941E214A7C129
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS271799.roa
Signing time: Mon 06 Jul 2026 17:48:57 +0000
ROA not before: Mon 06 Jul 2026 17:43:57 +0000
ROA not after: Mon 05 Jul 2027 17:48:57 +0000
asID: 271799
IP address blocks: 181.214.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 07:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:bb:a4:21:c0:50:33:ea:f9:95:4b:3d:e0:a9:41:e2:14:a7:c1:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 6 17:43:57 2026 GMT
Not After : Jul 5 17:48:57 2027 GMT
Subject: CN=B654F783CE7B4F3F0D4706DECDF0AE7DA55248A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:72:6a:f2:7a:36:a3:56:57:7d:25:8a:41:91:
d7:c7:92:8e:91:e8:68:64:4d:55:97:5b:dc:d9:37:
2b:b2:1d:4e:c1:4c:a6:03:43:99:cc:ca:88:67:90:
a1:30:14:95:da:97:2e:0e:e8:d3:a0:8f:43:84:3b:
8f:2a:b0:d1:6d:91:c3:e8:da:f4:69:56:b0:42:a2:
75:a2:08:3b:49:09:82:a2:fe:a4:e7:c3:4d:04:cc:
a7:33:c3:17:63:94:f5:81:34:62:c2:ea:18:2e:ef:
7e:b1:b3:c1:c5:de:4d:32:11:f2:07:e9:a4:e6:9a:
a5:25:3b:9c:ad:ab:0a:95:09:17:06:90:c1:32:ea:
1e:13:06:b0:eb:d9:de:a0:95:93:1a:3e:e7:6f:fc:
ee:f3:cb:cd:b0:cf:95:0c:cd:a5:2e:71:73:1f:4c:
23:bf:d8:55:5b:04:fa:37:0b:9d:f9:bb:36:56:be:
1b:2a:51:72:84:c3:c2:e4:92:09:ba:5e:db:76:37:
bf:45:4d:93:d7:26:8f:52:e7:c2:22:07:25:7b:4f:
d8:69:3d:d8:78:76:d8:2d:f8:d7:3c:3b:c0:f4:28:
dc:b5:cc:28:2d:b4:1b:4c:87:cc:7b:7e:4e:ac:b2:
37:fb:ae:d8:4f:ee:3c:2c:b9:57:89:b1:08:cd:12:
cc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:54:F7:83:CE:7B:4F:3F:0D:47:06:DE:CD:F0:AE:7D:A5:52:48:A9
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS271799.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.29.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:c5:eb:29:0e:78:3c:37:ca:7d:19:dc:ed:11:d3:9a:ae:95:
e9:f4:29:a3:0e:0c:f7:3e:55:6c:b6:63:a8:50:34:82:07:14:
db:ca:6f:3b:81:9b:82:2f:63:14:11:1a:b5:fe:94:98:56:c4:
89:70:68:10:29:9c:49:d4:45:8f:b6:fd:c9:b9:80:de:27:dd:
b1:cf:b2:66:79:9a:e4:3b:95:a1:fa:7b:0d:ce:75:b3:ea:5e:
08:f3:af:49:de:75:73:ff:c1:77:10:52:ea:5a:35:4a:20:33:
dd:10:72:ee:64:4a:35:37:86:8c:7f:f5:f7:17:f1:aa:ac:4f:
95:ce:b0:27:d7:f0:04:05:e8:3a:bb:e5:eb:49:31:2f:d9:41:
f1:81:ed:48:c3:b2:93:e3:9a:a8:31:8f:21:2f:6c:3e:09:21:
6d:26:42:08:a0:a8:6a:3b:e9:ae:e4:3f:1c:3a:55:2b:ee:18:
45:65:d1:54:1c:b4:12:ab:ee:fb:aa:4a:3e:4f:17:c6:cf:b7:
8f:5e:75:32:71:56:7e:b9:9a:be:a6:bf:43:2c:e1:f6:ce:4d:
d9:c9:6a:ee:c4:70:7b:18:e5:a7:32:22:d2:bc:4b:72:c6:d3:
5d:5d:2c:7f:67:91:2a:4e:8d:7f:49:77:93:b1:bd:3d:95:89:
77:59:64:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 16:39:44 2026 by rpki-client