Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS274978.roa
File: AS274978.roa (raw, json)
Hash identifier: ztPBv7ns3U+XwHoSzekIpdVZ8wxVH28XdXuCm6OIEAk=
Subject key identifier: 9C:24:D5:F7:F0:AA:EA:33:7D:66:89:30:41:5B:4E:39:C4:F2:B8:1E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 71A67EF8730D0F6C9B984BBD14EBA2B2CA546154
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS274978.roa
Signing time: Mon 06 Jul 2026 13:48:20 +0000
ROA not before: Mon 06 Jul 2026 13:43:20 +0000
ROA not after: Mon 05 Jul 2027 13:48:20 +0000
asID: 274978
IP address blocks: 82.24.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:a6:7e:f8:73:0d:0f:6c:9b:98:4b:bd:14:eb:a2:b2:ca:54:61:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 6 13:43:20 2026 GMT
Not After : Jul 5 13:48:20 2027 GMT
Subject: CN=9C24D5F7F0AAEA337D668930415B4E39C4F2B81E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5e:65:6e:72:a1:86:34:11:f2:b9:df:f0:62:
31:9b:e6:40:08:15:cd:a3:3c:05:a5:01:7d:47:40:
44:ea:5e:f7:e1:98:55:cc:45:b3:41:4d:0b:04:a4:
24:8f:0f:8f:7e:7b:5f:78:bd:65:19:76:16:77:2c:
19:34:0a:7f:1a:78:f2:25:0f:40:29:8c:b0:51:d3:
f8:07:c0:cb:44:1e:73:a8:bb:0e:ed:e1:13:11:ce:
5d:83:ea:20:e6:8e:61:17:f4:c2:61:a9:58:10:d5:
83:e7:08:8a:51:3a:78:36:73:ea:fa:ed:c0:79:73:
ab:59:02:db:31:70:78:48:7a:56:6a:5b:ee:67:8f:
a9:04:e8:e3:57:3c:0c:6e:51:04:2b:8b:c1:c4:56:
e6:be:e4:21:3d:33:2f:d6:62:10:3f:bc:ae:4f:dc:
7f:b5:31:2d:23:4f:15:7e:0e:70:6d:73:5a:e3:2c:
df:f9:a7:fe:7c:e6:92:1a:7c:ed:d8:f9:52:f4:ef:
38:43:13:37:89:46:0e:0b:82:fe:7c:39:68:5d:5e:
54:fa:11:44:7e:62:b7:d9:41:f1:f9:72:ab:5c:80:
82:7b:6a:e3:c3:5d:2d:d2:22:a7:b8:11:5f:4a:7c:
73:7e:0e:d6:93:4f:73:6e:c4:77:b1:87:78:0c:9e:
46:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:24:D5:F7:F0:AA:EA:33:7D:66:89:30:41:5B:4E:39:C4:F2:B8:1E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS274978.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.59.0/24
Signature Algorithm: sha256WithRSAEncryption
17:cd:ee:ee:f3:1a:e4:90:fe:5b:d8:7d:57:7a:91:93:46:71:
6f:b4:0a:df:9d:84:d1:6f:eb:d1:68:09:87:d9:59:b0:a6:60:
c2:30:24:d1:6f:a0:0d:65:fc:1d:98:ff:90:50:bc:d1:93:b0:
d7:9e:51:de:f1:e2:26:47:2c:6a:4d:07:13:0f:32:e6:20:c2:
98:66:bd:9e:e5:9c:6b:3a:95:7c:1d:87:b1:b0:43:a9:fe:64:
a7:ae:67:a1:38:4a:bb:0c:24:82:e4:fd:35:50:f7:01:ed:2e:
f4:6c:74:8c:97:15:6a:54:0c:da:bd:1b:f1:4d:f1:fa:52:d6:
38:5f:de:d1:f9:d0:9c:74:4c:f3:46:5d:b8:ab:c0:92:6e:7f:
a6:4f:69:b0:3b:52:80:e7:bc:f6:dc:a3:a2:1f:5d:38:56:53:
98:a1:5a:7d:5b:97:78:fd:80:15:e4:41:f4:bd:ae:6f:c4:5f:
41:38:5a:25:97:05:2a:fb:88:6c:0a:c7:84:13:93:0e:8e:0c:
88:0b:0a:de:58:70:38:2d:fe:18:85:5a:b8:f3:9b:fd:e9:1d:
bf:6a:b6:0b:cc:09:ce:73:50:ee:db:37:44:fe:0a:df:01:1d:
57:e8:3a:d7:68:fd:3e:86:d4:3d:fa:13:39:37:4c:71:30:03:
21:69:f8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:05:14 2026 by rpki-client