Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS274087.roa
File: AS274087.roa (raw, json)
Hash identifier: 6U/mb9uqiESmp80jeE29Ht06iVmMp0uqzu1IpyokDn0=
Subject key identifier: A0:D0:68:89:02:EF:F0:0E:78:29:86:CF:91:B1:22:90:8D:64:9D:8E
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 1FCFA6DE48928E9D43504C3A6292579779A30937
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS274087.roa
Signing time: Thu 02 Jul 2026 16:42:52 +0000
ROA not before: Thu 02 Jul 2026 16:37:52 +0000
ROA not after: Thu 01 Jul 2027 16:42:52 +0000
asID: 274087
IP address blocks: 177.29.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 14:38:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:cf:a6:de:48:92:8e:9d:43:50:4c:3a:62:92:57:97:79:a3:09:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Jul 2 16:37:52 2026 GMT
Not After : Jul 1 16:42:52 2027 GMT
Subject: CN=A0D0688902EFF00E782986CF91B122908D649D8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:30:c4:0c:95:a4:f7:ba:e5:c8:2a:88:2c:5b:
4d:28:66:52:e3:36:67:2a:80:33:e9:b9:7b:fb:b7:
4c:e7:74:11:1d:43:59:88:89:ac:c5:3f:32:d7:a8:
7f:e0:40:4f:da:cc:fe:0f:b5:97:9f:f0:10:93:ea:
ea:7c:96:4a:1a:de:f1:db:e6:25:33:84:80:3f:69:
d9:74:dd:5c:45:9d:b8:ab:c1:00:5a:61:99:d3:c0:
fd:fe:1c:d2:34:2f:80:8f:94:41:e7:71:ab:ef:2c:
6a:43:07:0f:26:02:3c:fd:aa:24:d7:02:04:5c:ab:
70:4b:7b:4f:ef:bd:76:c0:8e:9f:2a:9b:7b:02:74:
19:98:8a:4e:1f:b2:42:bc:15:3f:1b:35:03:c0:75:
e4:37:2f:36:7b:89:4f:e9:e8:5b:30:5c:14:ed:45:
31:a8:3b:cc:74:e1:a8:e6:7b:8d:d4:7d:8d:6b:34:
3a:d3:62:ad:b7:bc:6c:50:78:7b:ed:d1:08:56:77:
3c:56:4d:c9:17:9b:be:aa:21:45:e6:f2:de:10:bc:
d0:b9:b8:97:38:de:e0:44:e0:00:4a:d7:e9:6c:e9:
07:2f:62:7b:97:45:61:17:ae:f8:e8:d2:0c:d5:f1:
4e:4f:9c:86:9b:41:56:6e:37:8c:95:6c:af:1c:4a:
c6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D0:68:89:02:EF:F0:0E:78:29:86:CF:91:B1:22:90:8D:64:9D:8E
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS274087.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.29.128.0/24
Signature Algorithm: sha256WithRSAEncryption
73:42:4e:28:3e:1e:f4:41:61:2b:6e:af:4e:5e:cf:97:f2:82:
b2:50:f9:a0:6f:20:1a:45:fa:be:f3:0e:50:06:ad:ec:bd:66:
1a:2c:71:92:a5:ba:d9:d8:c2:b2:70:34:e5:ce:90:08:b5:8a:
af:2d:e3:c4:11:5f:88:21:77:85:23:85:e0:7f:59:95:c1:06:
c1:76:5d:54:03:d5:30:9f:a5:65:1c:c3:01:93:02:a5:65:4e:
7a:39:2a:62:6c:b7:ec:58:34:ff:5b:0a:7c:52:b4:42:28:9e:
7f:9a:d3:1c:32:df:29:af:75:81:1e:8c:a8:c6:94:bf:40:f1:
72:e1:cc:54:8d:af:cc:ac:f0:6e:17:52:8c:7e:2a:53:e1:a7:
3c:49:09:4a:53:5c:8a:02:7e:33:d5:de:03:55:2f:74:c7:f1:
d1:14:3c:af:4b:01:05:0d:5c:c5:13:ac:48:a5:92:18:06:57:
49:4b:ad:c6:4f:88:c4:a9:d5:87:96:f1:9f:4a:63:0c:01:6f:
f1:96:1b:1c:b9:56:f9:c4:0f:e8:26:de:f8:98:1d:a0:92:ee:
12:cd:c5:f8:a4:20:b4:fa:e1:ed:b4:93:9c:39:f2:8a:c5:34:
52:5c:81:9f:6f:75:10:6c:30:05:94:ef:a6:8b:be:59:96:d9:
9f:9f:75:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:57:55 2026 by rpki-client