Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS274581.roa
File: AS274581.roa (raw, json)
Hash identifier: INAAoRhPfC/GPJOByzlHvTSB0K2Oj7XZK3U0ciaVHaM=
Subject key identifier: 09:66:26:79:BD:C5:A4:06:3D:4B:04:A8:8B:F0:CB:54:BB:60:50:62
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 416AB5CAFF8B4ECF27C2D9A4FC9D97CEE3BDA737
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS274581.roa
Signing time: Sat 21 Feb 2026 10:39:07 +0000
ROA not before: Sat 21 Feb 2026 10:34:07 +0000
ROA not after: Sat 20 Feb 2027 10:39:07 +0000
asID: 274581
IP address blocks: 2a13:9500:13d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 11:47:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:6a:b5:ca:ff:8b:4e:cf:27:c2:d9:a4:fc:9d:97:ce:e3:bd:a7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 21 10:34:07 2026 GMT
Not After : Feb 20 10:39:07 2027 GMT
Subject: CN=09662679BDC5A4063D4B04A88BF0CB54BB605062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:94:d4:55:67:3e:8a:6b:d0:90:60:76:39:e4:
13:f4:6e:2d:53:e4:1a:8b:41:de:d2:af:3c:34:de:
85:67:7a:00:1a:b5:8a:db:c0:da:4a:80:b3:cd:8b:
8e:9a:dd:6e:cb:0d:d2:d6:f7:fc:19:7c:c3:ad:68:
88:94:93:b8:7f:93:33:12:5c:84:0c:b5:37:b0:62:
51:cd:b3:06:cc:03:a4:92:fb:b4:40:56:17:d8:a2:
ab:df:a4:61:f7:73:ed:c1:ac:72:6c:09:2d:67:c5:
39:48:a5:dc:de:9c:92:17:c0:a2:66:5a:fd:d9:77:
f5:82:a5:58:74:c7:24:88:50:6b:94:52:ce:21:60:
2a:ff:75:23:99:0a:65:4e:53:aa:c7:4a:ca:6b:b7:
62:e7:75:4a:b6:86:53:fe:66:37:41:ee:de:9a:3b:
43:f5:92:e4:e0:0c:90:fa:e3:4e:6e:0c:5c:25:87:
04:14:c4:a9:50:56:1b:5d:83:c3:3d:58:1e:12:99:
a6:1b:70:b0:fd:34:49:ae:03:c3:69:7d:41:02:6e:
45:c3:26:67:67:4a:95:de:36:4a:3a:c3:1f:f5:46:
1b:65:4d:11:b2:c9:12:66:34:f6:2e:0b:3c:21:d3:
d2:c4:90:b4:39:05:63:4e:8e:d6:7f:e8:1a:88:8c:
83:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:66:26:79:BD:C5:A4:06:3D:4B:04:A8:8B:F0:CB:54:BB:60:50:62
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS274581.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:13d::/48
Signature Algorithm: sha256WithRSAEncryption
6c:c8:cb:fd:2f:16:1e:ac:09:4a:32:97:b9:6f:21:1c:a5:a6:
d2:ce:7a:21:c2:8f:70:87:a6:d0:a0:c7:8c:ce:ed:61:39:8b:
b4:40:85:53:7b:1e:21:dd:fd:05:70:f2:f3:00:e2:2f:49:7b:
de:62:88:c2:b8:b8:bf:11:61:42:ce:90:ac:eb:4f:3b:04:cd:
d6:b9:cb:5a:0c:7f:23:30:28:08:1b:f0:ad:34:29:46:07:49:
ea:28:7b:f8:ad:99:17:1c:df:51:dc:63:9c:a2:c9:84:b8:d3:
87:b1:82:76:d3:79:a3:83:2d:9b:75:6e:ce:18:e0:9f:b0:a7:
d2:81:20:ee:0b:9d:5d:9e:5a:7e:c9:22:33:6e:48:3f:08:13:
d9:54:21:ab:7f:c2:37:70:3f:60:e7:35:b6:93:41:52:b6:ad:
78:73:36:64:93:92:e7:e0:04:d3:48:47:0d:dd:4c:52:85:fe:
30:6f:1b:c2:b0:d4:d8:41:a9:a4:b2:c8:46:f2:87:95:42:81:
48:c3:72:c7:57:72:2d:84:55:a5:7f:c7:6e:f3:51:a4:8e:6d:
99:b1:74:a7:3b:ee:70:06:03:69:e7:3b:50:0d:7f:cc:0d:3d:
fb:c0:63:ed:18:ea:ac:15:d7:59:36:6a:3c:ff:b3:5c:41:78:
24:81:7f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:30:38 2026 by rpki-client