Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS274311.roa
File: AS274311.roa (raw, json)
Hash identifier: mMWQh52v6Xnn4h0ttreCGX0//4fBOQl9T1o0lb5Wpts=
Subject key identifier: C4:4E:3C:39:BB:9E:5F:23:51:00:38:8C:2C:99:9A:D7:CD:D8:09:A3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 018905587CD993B1AB5B9C6412CFEE49E65EE5B8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS274311.roa
Signing time: Wed 29 Jul 2026 16:53:52 +0000
ROA not before: Wed 29 Jul 2026 16:48:52 +0000
ROA not after: Wed 28 Jul 2027 16:53:52 +0000
asID: 274311
IP address blocks: 2a13:9500:1ad::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:05:58:7c:d9:93:b1:ab:5b:9c:64:12:cf:ee:49:e6:5e:e5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 29 16:48:52 2026 GMT
Not After : Jul 28 16:53:52 2027 GMT
Subject: CN=C44E3C39BB9E5F235100388C2C999AD7CDD809A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:2f:4c:6c:21:61:30:ee:83:d3:43:48:cb:
8e:7b:32:fb:06:76:78:f0:e7:ef:43:09:ac:82:fb:
25:ef:30:d5:c7:4e:2c:3b:03:10:d5:97:ff:73:61:
1c:57:ec:26:5d:f6:b1:1c:dd:f7:6d:e9:92:ab:06:
48:69:54:11:f4:ae:66:3d:70:d7:01:56:f9:8d:06:
24:79:c5:f1:9e:35:1e:55:18:5e:9d:8e:0c:9a:cc:
51:bf:86:c9:cb:c5:d2:46:bb:ac:59:4b:ec:fc:10:
4b:32:ee:6e:86:0d:35:ed:48:68:b5:50:2d:ad:f6:
32:1f:14:df:45:1d:07:2c:a9:06:7c:e9:ec:17:ab:
26:6c:f0:aa:d2:cc:12:22:bb:b1:b9:42:99:b2:94:
37:fc:24:86:50:66:aa:9e:c4:b7:3d:23:a8:29:dd:
4b:11:4c:a1:bf:61:4e:eb:23:40:53:2a:89:d7:db:
a1:df:47:e8:9d:c7:66:aa:bf:41:4a:49:33:da:ef:
00:f0:92:0e:f9:34:41:af:5f:d2:72:f4:8e:5a:83:
26:64:1c:00:ae:64:cd:00:44:48:94:26:11:5d:15:
d7:08:cf:3e:90:55:83:b4:d0:f7:86:c2:ee:06:3e:
c0:2d:10:90:82:ee:cb:3a:22:1f:c1:e0:47:e8:8c:
36:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4E:3C:39:BB:9E:5F:23:51:00:38:8C:2C:99:9A:D7:CD:D8:09:A3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS274311.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1ad::/48
Signature Algorithm: sha256WithRSAEncryption
3d:f4:3a:59:ee:95:cc:b4:6e:84:88:89:bf:2a:d1:be:61:6d:
77:09:50:45:ec:a5:64:3e:2a:37:87:2b:f4:be:aa:28:1c:c2:
0a:85:b0:fd:88:bf:a5:86:c5:6a:5e:c9:e4:77:39:90:0f:b3:
f8:3e:19:4f:c2:4c:08:9e:46:3d:9f:d0:39:ae:61:b1:02:b2:
f1:0b:0a:d9:69:ca:d6:fc:12:e3:b0:e3:c6:0b:75:a5:73:5f:
cd:22:60:fd:ca:3c:08:a6:c7:88:a1:85:57:b2:20:83:7d:d6:
69:bb:a5:38:25:6e:ba:86:99:ba:b5:e1:a6:66:19:53:61:c7:
78:c0:99:0f:fa:6b:ef:1b:3a:cb:09:17:7c:cb:ba:81:61:c0:
83:f8:ae:88:0c:46:a4:c9:22:4f:87:8c:d1:95:b4:e3:04:76:
9d:f1:1e:95:61:b8:41:77:af:46:91:ce:55:17:a1:5f:70:f1:
be:31:23:e0:96:25:f3:0e:74:1d:b3:7c:ba:ec:65:86:ee:0c:
28:1a:09:e3:7a:70:fc:85:ed:66:bb:96:cc:63:23:1a:24:fa:
36:34:09:c8:7f:88:8d:25:9f:50:5e:87:47:9e:03:61:b0:32:
d3:e9:51:86:ed:96:41:7a:37:5e:e7:13:2d:a4:db:81:7b:3c:
ea:70:01:35
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUAYkFWHzZk7GrW5xkEs/uSeZe5bgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA3MjkxNjQ4NTJaFw0yNzA3MjgxNjUzNTJaMDMxMTAvBgNV
BAMTKEM0NEUzQzM5QkI5RTVGMjM1MTAwMzg4QzJDOTk5QUQ3Q0REODA5QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0lC9MbCFhMO6D00NIy457MvsG
dnjw5+9DCayC+yXvMNXHTiw7AxDVl/9zYRxX7CZd9rEc3fdt6ZKrBkhpVBH0rmY9
cNcBVvmNBiR5xfGeNR5VGF6djgyazFG/hsnLxdJGu6xZS+z8EEsy7m6GDTXtSGi1
UC2t9jIfFN9FHQcsqQZ86ewXqyZs8KrSzBIiu7G5QpmylDf8JIZQZqqexLc9I6gp
3UsRTKG/YU7rI0BTKonX26HfR+idx2aqv0FKSTPa7wDwkg75NEGvX9Jy9I5agyZk
HACuZM0AREiUJhFdFdcIzz6QVYO00PeGwu4GPsAtEJCC7ss6Ih/B4EfojDYBAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUxE48ObueXyNRADiMLJma183YCaMwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjc0MzExLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV
AAGtMA0GCSqGSIb3DQEBCwUAA4IBAQA99DpZ7pXMtG6EiIm/KtG+YW13CVBF7KVk
Pio3hyv0vqooHMIKhbD9iL+lhsVqXsnkdzmQD7P4PhlPwkwInkY9n9A5rmGxArLx
CwrZacrW/BLjsOPGC3Wlc1/NImD9yjwIpseIoYVXsiCDfdZpu6U4JW66hpm6teGm
ZhlTYcd4wJkP+mvvGzrLCRd8y7qBYcCD+K6IDEakySJPh4zRlbTjBHad8R6VYbhB
d69Gkc5VF6FfcPG+MSPgliXzDnQds3y67GWG7gwoGgnjenD8he1mu5bMYyMaJPo2
NAnIf4iNJZ9QXodHngNhsDLT6VGG7ZZBejde5xMtpNuBezzqcAE1
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:24 2026 by rpki-client