Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS270111.roa
File: AS270111.roa (raw, json)
Hash identifier: y4SiSHsinLKJHsogsamuNuSPdExzX9YEODNM7+g4P8Y=
Subject key identifier: 4A:E9:02:C3:50:BC:62:60:16:D9:7C:62:0F:BD:ED:08:77:43:B9:E3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5585AAD4017D1331EAF93285ABB1679E9E94A79C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS270111.roa
Signing time: Thu 09 Jul 2026 09:49:07 +0000
ROA not before: Thu 09 Jul 2026 09:44:07 +0000
ROA not after: Thu 08 Jul 2027 09:49:07 +0000
asID: 270111
IP address blocks: 2a13:9500:be::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:85:aa:d4:01:7d:13:31:ea:f9:32:85:ab:b1:67:9e:9e:94:a7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 9 09:44:07 2026 GMT
Not After : Jul 8 09:49:07 2027 GMT
Subject: CN=4AE902C350BC626016D97C620FBDED087743B9E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ec:53:93:10:cf:6c:af:b1:f2:04:af:9f:6d:
b9:cf:1c:89:a1:02:21:3e:c0:10:88:6a:e2:c6:e5:
c5:33:bc:67:bf:92:d5:06:34:96:fe:e9:a1:7c:21:
90:f8:98:05:7d:05:46:75:27:61:7c:ac:b2:3e:ef:
cd:f5:a7:c4:18:14:61:a3:06:25:2f:32:05:d2:5f:
25:53:03:44:23:06:b5:f0:36:e7:2d:4d:01:d2:7c:
dc:4c:2b:43:76:3a:2a:9b:0a:4f:b7:33:72:33:9a:
f8:77:2f:f7:3c:0b:25:39:b9:9a:41:0f:05:95:31:
4c:06:a2:97:07:bb:5c:a1:29:ae:11:47:65:40:85:
61:66:16:33:03:ad:b7:6e:78:0e:66:fa:3b:e1:20:
5c:c6:c6:b5:2c:10:07:08:95:df:54:73:f3:0f:6d:
c1:2d:1d:11:d0:4d:c7:b8:06:05:33:b8:a0:10:cb:
bf:0b:c1:01:e3:58:b5:af:55:d0:59:5c:33:d9:a9:
05:2f:b2:b9:b4:96:09:9c:f0:d2:c2:27:f3:32:fd:
1a:86:f4:71:3e:84:ab:51:05:c0:6c:74:15:5b:42:
a8:67:b1:57:b3:f1:c4:fd:ea:b3:d6:f5:da:bb:49:
76:9f:c9:b4:b4:e9:b0:ac:3f:6c:0d:dd:24:36:20:
80:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E9:02:C3:50:BC:62:60:16:D9:7C:62:0F:BD:ED:08:77:43:B9:E3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS270111.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:be::/48
Signature Algorithm: sha256WithRSAEncryption
76:92:3f:c8:21:d0:77:f3:5e:2d:f7:d3:06:43:5c:b7:6a:c5:
a1:db:d7:1a:32:44:dd:d7:47:5e:c0:0d:05:3f:c7:db:00:8b:
80:26:ee:67:49:e9:4a:74:d7:ae:26:0a:96:07:ba:32:c5:46:
04:31:9f:fe:fc:0c:4b:48:d5:74:bc:29:8b:3c:be:74:74:b7:
77:21:f5:58:65:81:6a:ce:18:a3:3e:42:e0:bc:76:63:a8:b2:
a3:aa:fa:64:f2:c1:88:fc:82:fd:7e:6e:1b:47:0c:53:08:62:
e0:b3:9d:e5:60:20:c6:ed:62:41:b8:95:d0:25:b9:8a:b6:97:
90:da:10:fd:48:39:7a:3c:73:c6:aa:3c:b3:66:7d:76:6d:fa:
cf:73:6d:ca:e4:11:01:3e:af:8b:e7:2d:df:0f:bf:45:02:cd:
b5:a2:19:3e:f1:d6:cd:8f:88:57:f5:e8:6b:56:23:9a:11:2f:
be:dd:94:52:19:8b:b7:76:40:a2:ba:1e:5a:44:af:54:03:07:
2a:ea:3b:1f:14:38:1b:b1:e3:80:2b:76:fc:db:a0:e1:f6:82:
41:20:66:7d:55:f4:2f:fa:7a:69:59:8c:cd:28:c4:ab:08:41:
95:d5:04:cc:43:d1:6d:0a:c0:44:50:95:de:e3:a5:b4:1f:da:
32:60:1b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:08:27 2026 by rpki-client