Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS272696.roa
File: AS272696.roa (raw, json)
Hash identifier: IQdfoUwthpBucV8SRZo5fiNLAvDUrSFpwk48/X9CuNo=
Subject key identifier: AA:78:E4:CC:65:79:85:F9:20:B8:D0:FC:B8:07:89:06:90:A4:47:5F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 781924C04AE147324F7E855C44259309754262AA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS272696.roa
Signing time: Tue 30 Sep 2025 16:50:14 +0000
ROA not before: Tue 30 Sep 2025 16:45:14 +0000
ROA not after: Tue 29 Sep 2026 16:50:14 +0000
asID: 272696
IP address blocks: 82.27.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:19:24:c0:4a:e1:47:32:4f:7e:85:5c:44:25:93:09:75:42:62:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 30 16:45:14 2025 GMT
Not After : Sep 29 16:50:14 2026 GMT
Subject: CN=AA78E4CC657985F920B8D0FCB807890690A4475F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:85:2d:5f:6f:b9:ff:cf:d6:c3:e5:82:3e:61:
9d:3f:30:85:5f:65:92:51:e6:64:d0:c2:2b:3a:05:
78:e0:27:da:41:ca:db:bb:2b:7b:52:4c:91:35:bb:
bb:aa:b2:78:71:b7:f9:3b:eb:90:4b:36:1c:64:64:
61:9a:18:3f:28:ad:5f:b0:71:a9:4f:16:70:cb:64:
9b:25:bf:25:50:b8:f1:d1:4f:09:4a:6d:0d:41:eb:
42:64:b7:d5:83:cd:f6:66:1b:6d:95:9b:9c:2a:02:
29:5e:42:3d:e9:32:92:02:51:9b:31:67:7a:77:8c:
f5:b5:2a:59:25:e7:31:32:2f:8a:03:6a:81:b0:e4:
51:ca:c5:81:b9:74:a0:89:82:92:a4:f9:71:06:a9:
65:42:22:d2:fc:da:92:1d:20:29:76:ff:81:5f:0a:
18:13:9d:84:8d:53:6f:05:01:ff:ea:97:f9:a2:a9:
86:d0:29:98:1b:04:88:a6:af:fe:9f:15:b6:07:09:
4c:3a:1a:48:48:09:62:a7:c7:b7:32:2c:9d:65:86:
03:84:da:0c:26:5c:5d:ca:e3:5a:60:0f:57:e4:9a:
13:81:2d:35:1c:4c:d3:4c:65:db:02:5c:b3:d2:20:
0f:60:ed:49:27:99:92:8c:d0:d2:6c:9c:f6:9e:40:
1d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:78:E4:CC:65:79:85:F9:20:B8:D0:FC:B8:07:89:06:90:A4:47:5F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS272696.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.17.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:21:4b:cd:dd:02:32:3f:04:dc:a5:a4:a0:10:ae:68:50:5b:
07:d3:57:28:5c:a5:cc:2d:7b:ff:9e:a4:db:93:2d:24:51:a8:
80:e1:73:5a:d4:fc:bf:26:b5:15:79:62:f5:0e:45:c2:ef:9f:
9c:fd:c2:eb:5c:c2:04:a2:57:19:81:9c:71:81:ef:44:52:b6:
82:bb:c2:8c:e8:45:ec:22:5c:54:a3:9a:15:58:4e:73:33:2d:
9f:59:99:f1:65:2c:f4:3a:1e:2b:e1:61:c0:c3:6a:0d:06:e2:
4f:b4:72:48:62:3b:ac:82:3e:30:86:a0:8b:c7:1a:af:bf:d6:
95:bd:d2:0f:f3:35:52:a7:07:74:14:99:e4:eb:45:8b:f2:6b:
5b:58:83:95:be:49:c5:75:1c:3a:dc:92:60:19:a5:b1:c2:9e:
79:5f:d9:97:d2:7a:41:34:1e:04:72:a6:01:48:e4:b2:64:b4:
e4:1b:7f:c4:e2:1d:7b:bf:f0:c9:25:8e:6e:59:6f:df:23:69:
50:c2:c9:07:d8:88:e6:c2:38:5e:73:68:e2:29:63:3b:07:36:
8f:52:6f:4b:a5:3e:bd:09:c4:e3:79:e7:45:c1:68:4b:3a:b9:
7c:01:94:64:cc:ad:2f:21:9b:c2:e1:cf:93:76:e7:ae:52:35:
88:a6:58:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:29:27 2025 by rpki-client