Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS272015.roa
File: AS272015.roa (raw, json)
Hash identifier: Ea0QnbpKcAfDcx3s1QQZRiAWERMnUXc/PiAwELJ4vB4=
Subject key identifier: 35:14:A5:6C:A5:2D:14:B1:4F:3D:8B:F2:32:F2:13:88:6C:D1:11:6E
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7A86EF57CAD4E3B0BE2D389449C0902D299CBA7F
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS272015.roa
Signing time: Tue 23 Jun 2026 15:48:38 +0000
ROA not before: Tue 23 Jun 2026 15:43:38 +0000
ROA not after: Tue 22 Jun 2027 15:48:38 +0000
asID: 272015
IP address blocks: 45.88.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:86:ef:57:ca:d4:e3:b0:be:2d:38:94:49:c0:90:2d:29:9c:ba:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 23 15:43:38 2026 GMT
Not After : Jun 22 15:48:38 2027 GMT
Subject: CN=3514A56CA52D14B14F3D8BF232F213886CD1116E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fb:26:83:ce:32:3e:14:cc:8a:c1:48:e6:14:
a2:88:5c:8e:bd:01:f7:36:fb:59:d7:16:3d:6b:6c:
a7:e7:6e:ad:40:d2:3f:17:cd:c1:32:0d:a9:28:b6:
92:a8:ec:da:f9:ab:85:1b:8f:5e:ed:30:88:ea:d5:
d2:7f:02:5b:03:fc:91:ab:05:72:60:95:58:e3:70:
77:58:76:81:0b:bc:0b:b6:48:09:9d:ea:e6:47:46:
59:9a:f2:9b:4e:e4:c9:36:18:c0:2c:2f:86:9e:3d:
23:a5:a5:37:f4:50:d6:19:a3:b5:ac:9c:65:01:68:
06:97:c3:79:11:78:43:dc:68:ba:1b:da:96:ba:28:
1f:f8:cb:56:22:0d:65:4d:34:fb:63:52:5e:05:c4:
c5:7b:35:45:de:e4:c6:67:ad:28:bb:3d:12:7d:49:
98:75:95:9b:ef:d3:af:c8:e3:4d:fa:37:2d:e3:a5:
67:c9:d4:20:27:49:d3:f8:ed:79:15:c8:41:26:e3:
b4:06:11:cc:eb:e9:32:31:64:70:4f:c9:d7:bb:67:
9a:ef:2f:7d:f6:d4:e8:65:d1:8f:9c:54:7c:2b:32:
4d:44:46:5b:97:b4:bf:14:8f:1b:22:33:0f:fe:6c:
10:1d:1d:8f:1f:4c:e7:7a:02:59:b5:61:00:a7:c6:
bd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:14:A5:6C:A5:2D:14:B1:4F:3D:8B:F2:32:F2:13:88:6C:D1:11:6E
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS272015.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.99.0/24
Signature Algorithm: sha256WithRSAEncryption
13:96:93:c2:06:e3:08:f4:38:a6:94:b2:28:57:5f:c7:af:3b:
70:43:e3:d3:4e:1a:36:36:8d:3c:bb:c7:ef:d4:a1:37:ee:ce:
ed:d3:df:17:e1:a9:03:d3:e7:d1:5d:f0:26:7b:26:63:70:f1:
28:b5:3a:f2:9e:01:10:0d:20:4f:6c:32:48:21:98:48:56:30:
4d:cd:d5:85:84:18:71:c6:c5:31:4b:9f:74:10:8e:80:a2:ad:
92:d3:b6:d0:65:52:ac:3b:d9:af:97:48:4c:35:ee:af:64:91:
6d:4f:f3:9d:a2:36:be:a4:40:9b:94:b5:e7:a3:46:36:07:56:
f7:4d:6e:2f:6a:6d:48:0d:12:18:53:45:a3:b8:ee:b0:ef:46:
cb:3f:3b:3e:0b:60:0b:7e:a4:eb:af:93:34:56:56:ee:8f:b0:
62:21:25:21:ba:eb:81:cd:ab:65:13:f5:d0:f6:9c:bc:46:90:
55:5b:41:0c:af:41:e2:1e:fb:15:d8:34:16:08:d5:46:67:88:
52:17:11:b1:6e:5b:2f:3b:16:56:f7:ed:31:51:ae:46:e7:60:
f9:d3:f0:e7:2d:77:dd:bb:b3:fa:d1:49:ce:16:ab:14:0d:3e:
8f:89:e9:74:2f:a1:f5:1b:a2:24:a1:f6:fb:b7:fb:bf:86:bb:
ae:c2:3e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:44:07 2026 by rpki-client