Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS273043.roa
File: AS273043.roa (raw, json)
Hash identifier: J5XmuJxWgaFve963e8mjbZSN9H6IDO/exl7LJq+RNyc=
Subject key identifier: DE:9A:26:4E:CC:AD:DC:FD:68:64:FF:9E:41:56:4A:F0:F2:4C:7E:E1
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 58BA2F10CE27353564CA0EC4D3803F5E46643ED3
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS273043.roa
Signing time: Thu 30 Jul 2026 08:45:49 +0000
ROA not before: Thu 30 Jul 2026 08:40:49 +0000
ROA not after: Thu 29 Jul 2027 08:45:49 +0000
asID: 273043
IP address blocks: 177.29.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 11:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:ba:2f:10:ce:27:35:35:64:ca:0e:c4:d3:80:3f:5e:46:64:3e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Jul 30 08:40:49 2026 GMT
Not After : Jul 29 08:45:49 2027 GMT
Subject: CN=DE9A264ECCADDCFD6864FF9E41564AF0F24C7EE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:13:67:4b:65:08:86:2c:de:48:87:9b:e0:cb:
de:94:c2:e5:58:fa:6c:34:6a:ce:f0:17:9b:2f:e8:
b5:5d:9b:14:5f:11:8c:ca:48:39:44:9b:16:af:92:
91:35:cb:0a:f0:ad:de:05:34:c8:2e:fe:8d:a9:25:
ea:6a:49:56:fd:30:ec:47:9a:0b:6f:3d:84:97:41:
2e:8d:4c:90:0b:85:e1:06:25:43:48:79:bd:55:79:
fc:cc:dc:29:6f:db:22:43:30:22:05:20:89:e0:f2:
f8:d6:b9:b3:e5:12:03:3d:5b:6e:a9:79:c0:eb:37:
a0:c9:d7:f9:76:14:06:8b:ab:c2:8e:73:04:b2:85:
3a:97:9d:b4:89:b3:c3:55:06:c7:84:8d:5f:95:dc:
12:12:1a:a4:07:cd:50:2b:ca:57:66:3f:8f:14:de:
87:7a:4e:d8:19:56:fa:d2:46:07:c0:de:a0:65:a7:
c4:f7:26:00:ed:0d:d3:1c:5b:47:4f:87:a2:fd:d5:
cc:48:f5:bb:f5:25:e3:3c:dc:1f:10:9e:74:36:fd:
af:73:d2:30:ff:db:92:94:57:7b:86:c2:5e:58:1a:
0a:a3:a9:e0:08:dd:76:22:fc:5e:87:e6:98:44:84:
02:8e:40:d9:81:0c:46:56:9d:0a:be:bf:9d:7c:53:
0d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9A:26:4E:CC:AD:DC:FD:68:64:FF:9E:41:56:4A:F0:F2:4C:7E:E1
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS273043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.29.224.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:9c:b2:10:78:29:0d:0a:d9:16:70:b6:ae:1e:9e:92:2e:ac:
d6:36:49:9e:31:27:19:68:01:2d:60:c1:13:94:1c:80:cb:4e:
12:3e:77:04:79:57:a2:6f:51:e2:3a:9b:7e:82:90:16:63:bf:
12:24:f4:17:79:3f:bd:47:98:9f:48:9b:be:fa:e6:d1:7e:6f:
ee:38:ee:3b:fb:0e:11:1a:cd:2d:ac:7b:86:ce:1b:38:aa:fe:
c9:d6:6a:df:4f:d1:c0:59:d7:25:db:cf:2e:3e:cd:06:70:ce:
93:54:7d:6d:81:a8:45:71:81:fa:fd:22:e4:70:88:ca:f6:29:
5c:1c:56:5f:bc:97:54:43:d1:3d:53:a0:4d:83:1a:d1:7a:18:
d1:08:de:55:a5:77:dc:67:49:94:7b:f4:af:4b:17:ba:cf:e0:
0f:b1:12:d7:6a:fb:66:ff:62:4b:dc:36:73:fb:b2:9f:6d:e1:
6d:83:41:9c:a2:61:63:05:e0:8c:81:6c:88:01:ab:68:97:25:
5c:21:98:d3:69:8a:88:f0:a2:b5:83:40:1e:4a:3f:66:dc:fe:
61:53:6e:6d:83:c8:e1:a5:68:f8:41:0c:cd:76:30:30:c2:09:
e8:d5:5a:f7:1c:9f:eb:33:f5:67:52:ae:43:3e:00:66:9f:9a:
a9:f0:d5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:47:42 2026 by rpki-client