Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS274496.roa
File: AS274496.roa (raw, json)
Hash identifier: +N9wqiHS/NCEmK1ysr9n9pCVNT0hua4zCGIOwM2lD8M=
Subject key identifier: CA:E6:33:C3:90:6D:38:EE:54:A1:E6:86:50:06:20:2D:1E:53:6F:81
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 064C08F90C8FF2925CDB90B4CFC5E15D51DDC532
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS274496.roa
Signing time: Tue 27 Oct 2026 06:21:23 +0000
ROA not before: Tue 27 Oct 2026 06:16:23 +0000
ROA not after: Tue 26 Oct 2027 06:21:23 +0000
asID: 274496
IP address blocks: 2a13:9500:1f8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 01:37:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:4c:08:f9:0c:8f:f2:92:5c:db:90:b4:cf:c5:e1:5d:51:dd:c5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 27 06:16:23 2026 GMT
Not After : Oct 26 06:21:23 2027 GMT
Subject: CN=CAE633C3906D38EE54A1E6865006202D1E536F81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:94:e3:51:da:e5:bf:69:3d:2f:e7:69:72:
7c:f3:bc:f4:de:35:7c:67:fb:b9:3e:f1:a6:09:42:
06:95:9b:13:06:95:dc:77:89:ad:0b:c1:99:a2:58:
a8:02:46:a7:1d:94:f3:60:67:40:bc:86:9d:7a:bc:
df:f4:69:be:05:24:f4:04:bd:68:ed:a4:d0:15:3d:
11:b0:0a:c8:0e:01:9b:bb:85:93:ff:42:ad:d9:9f:
ac:c9:b6:79:89:3b:f5:1c:29:b8:18:6e:e4:ad:d3:
6a:6c:42:cb:a7:8c:3a:93:09:60:1a:f0:26:6d:fa:
18:64:cc:81:6a:f6:c6:84:3a:79:31:cd:db:24:3f:
e0:74:5d:13:98:4e:eb:b0:ae:22:2d:c2:7d:5c:f5:
45:1a:a6:1c:62:38:a7:0b:3b:20:56:4f:47:29:7f:
7e:87:1c:55:56:87:55:f1:4d:91:7b:89:0e:8a:63:
07:03:7a:8c:9b:b0:f4:f5:95:43:29:6d:33:02:6e:
68:9d:d8:5c:c2:3a:73:c1:eb:99:d2:b1:6b:53:2e:
a7:8d:eb:9b:0d:2a:5a:7d:1f:c9:d9:de:1b:5a:37:
d6:44:cf:6a:8f:a0:ad:e6:43:e6:e2:ad:84:37:7e:
2d:ff:21:05:0a:a0:d9:72:4e:29:37:70:c3:fa:3a:
a1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E6:33:C3:90:6D:38:EE:54:A1:E6:86:50:06:20:2D:1E:53:6F:81
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS274496.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1f8::/48
Signature Algorithm: sha256WithRSAEncryption
a8:fa:32:d7:f9:7e:b5:f0:89:15:9c:10:41:fd:c4:68:c4:74:
8f:8e:23:7b:04:d2:d4:90:a8:3e:7d:47:16:ca:37:8f:0f:bb:
f8:c8:a8:f1:df:4c:27:3d:c0:24:9f:d2:1b:f4:07:1e:11:3e:
e6:66:77:f2:51:05:ae:ac:9a:5b:59:40:11:12:77:d3:14:b9:
32:09:68:0a:4c:ac:62:3e:15:8b:15:90:8b:7d:e2:47:10:b5:
2f:4d:c9:53:11:d3:c9:d0:3a:70:9f:c5:25:33:f2:11:75:f8:
ae:f4:30:6a:aa:4c:13:0d:e9:38:61:ff:6a:65:ea:11:57:e1:
85:70:da:cb:d8:21:da:6c:2c:f2:11:ba:07:1e:74:7e:37:da:
1e:72:ce:d2:79:a8:6e:d5:19:5f:0f:f4:90:f2:4b:68:ba:d2:
2e:f2:ab:6e:d2:a2:2b:de:fe:ca:bd:38:4e:d0:99:5d:ae:60:
39:e5:d2:51:eb:12:f9:00:54:f1:ce:b7:4b:70:8b:4d:ef:01:
8a:6b:4d:20:31:ab:10:78:79:17:0b:6d:ac:ad:8f:37:3f:5d:
26:ec:db:f9:78:aa:1e:72:89:12:81:46:14:fe:f1:43:04:37:
44:51:58:10:91:af:b2:49:60:54:10:c8:10:f1:f4:4e:3e:6e:
c0:c2:7c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:01:57 2026 by rpki-client