Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS275732.roa
File: AS275732.roa (raw, json)
Hash identifier: usu86KSpL9BBU9I79dowbecttPDUrxpH6rbFtSCO+CM=
Subject key identifier: 3B:F7:50:8D:0A:8A:2A:18:7E:E2:BD:C7:38:FE:72:A1:94:28:01:CB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 01E774A4D77FDD47B51E5A956C719BD49CEA5D85
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS275732.roa
Signing time: Thu 09 Jul 2026 22:31:59 +0000
ROA not before: Thu 09 Jul 2026 22:26:59 +0000
ROA not after: Thu 08 Jul 2027 22:31:59 +0000
asID: 275732
IP address blocks: 178.83.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:e7:74:a4:d7:7f:dd:47:b5:1e:5a:95:6c:71:9b:d4:9c:ea:5d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 9 22:26:59 2026 GMT
Not After : Jul 8 22:31:59 2027 GMT
Subject: CN=3BF7508D0A8A2A187EE2BDC738FE72A1942801CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c8:09:ac:5a:3f:ad:39:8f:52:2b:fa:a9:31:
6e:f6:55:aa:32:97:ca:98:35:1c:b0:13:7e:3a:a9:
df:fc:14:37:f1:6c:ba:a1:cb:86:e5:7f:95:0a:3c:
ef:45:6d:0a:14:97:11:ad:c3:f9:a4:7c:ad:bb:f2:
9a:b3:9f:ee:33:44:80:07:a2:72:d9:f0:42:2f:25:
db:91:bf:e1:d6:f1:19:7b:06:f9:06:9a:6b:16:4d:
00:60:4f:65:c7:10:c9:bf:04:87:11:ed:ca:c1:eb:
8b:05:23:7b:b5:48:14:ef:a6:65:11:9e:36:ab:4e:
10:4e:48:27:07:d6:02:f5:89:07:e5:fc:a8:b1:89:
db:da:1d:3b:d3:7f:05:b9:50:96:6b:7e:e4:f7:ed:
3e:76:4d:6d:01:dc:9e:0e:1b:39:c6:a8:4f:e8:50:
6e:03:93:31:30:24:db:df:7f:72:6a:20:44:b6:d5:
e0:20:28:b0:23:ff:b6:a6:87:f3:38:3e:cb:ec:81:
f6:e5:ea:ff:bb:ad:11:bd:f1:10:1f:04:68:e8:30:
75:8a:27:71:fe:fd:4d:ce:78:cf:68:40:45:de:88:
85:bf:9c:61:4b:b2:0c:39:e9:d2:75:17:2a:96:23:
10:9b:7a:4a:ef:af:6c:6b:a6:6e:e7:c1:c9:d1:e2:
24:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F7:50:8D:0A:8A:2A:18:7E:E2:BD:C7:38:FE:72:A1:94:28:01:CB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS275732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.14.0/24
Signature Algorithm: sha256WithRSAEncryption
01:b4:34:ce:7d:71:2c:06:9f:ef:81:48:43:20:12:0e:a8:96:
26:b9:17:82:e3:88:35:ed:cc:18:0d:24:80:e7:ae:ba:78:e9:
66:96:c8:32:7a:3b:6d:ce:1a:62:7b:31:c9:87:04:e1:0e:a1:
20:5b:dc:0f:70:81:00:5d:e6:69:29:0e:68:96:4d:46:75:4f:
4c:55:d2:22:e0:41:cd:3e:cf:ca:07:d1:1d:88:6b:26:83:b6:
52:f2:36:26:40:9a:e6:84:b2:ca:94:be:d1:c8:9f:e4:36:ac:
1e:51:59:62:68:b7:78:b7:b7:ef:f3:b4:db:39:68:5f:9f:a8:
39:58:41:98:56:87:4e:fa:96:08:d4:65:e0:75:ad:77:68:5d:
cd:b7:11:ce:0b:92:c6:1a:c2:fd:98:24:a0:ba:99:8c:9a:bb:
0b:cf:41:11:97:ed:ec:62:53:be:45:a2:f1:eb:e2:0d:ad:4c:
f6:7d:03:b1:79:71:55:2f:fe:42:94:22:d9:35:c6:3a:d0:b2:
31:8b:a0:10:26:53:0a:b8:e8:94:07:a2:dd:32:f5:8f:9f:fb:
23:3b:f6:78:af:cb:5e:0c:fd:0b:7e:22:66:02:c8:36:fc:07:
e0:b0:5d:03:9a:58:fd:95:c8:82:26:f1:1e:95:e8:a2:e6:f7:
bd:b1:41:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:05:14 2026 by rpki-client