Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS267192.roa
File: AS267192.roa (raw, json)
Hash identifier: nn8f8vFvvmWbwyK8b6yt7AVY8+9420t3P5k0dIJ4wgE=
Subject key identifier: 73:82:52:8A:EC:1E:06:BA:B1:6F:0D:B4:35:EC:44:50:E9:56:A0:BF
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 339CC4D1E03BDC034B6BCA3E131BDAB83AA56D3A
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS267192.roa
Signing time: Thu 16 Jul 2026 17:25:39 +0000
ROA not before: Thu 16 Jul 2026 17:20:39 +0000
ROA not after: Thu 15 Jul 2027 17:25:39 +0000
asID: 267192
IP address blocks: 178.95.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Jul 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:9c:c4:d1:e0:3b:dc:03:4b:6b:ca:3e:13:1b:da:b8:3a:a5:6d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 16 17:20:39 2026 GMT
Not After : Jul 15 17:25:39 2027 GMT
Subject: CN=7382528AEC1E06BAB16F0DB435EC4450E956A0BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a5:8f:74:ae:c5:2a:a2:17:4f:0b:27:8e:93:
24:51:38:4b:3c:26:f4:fb:1a:7a:46:a8:a4:5f:28:
c5:29:7c:61:9c:5f:a5:f9:42:95:a6:ee:6f:87:9a:
81:5d:d3:5b:dd:28:72:f7:25:2c:1d:02:c4:1b:af:
28:0b:1c:9f:0a:30:52:a6:9a:b6:83:d0:2f:0d:f5:
33:35:fe:57:40:8c:7b:32:c2:14:fa:0c:bc:4b:13:
4f:21:3b:3d:c3:8b:ba:86:1b:05:57:b4:c8:7c:8b:
4e:0c:39:be:28:4a:58:25:a6:76:ef:ff:a6:e9:ff:
ef:1c:08:57:f2:32:18:2c:85:7f:9f:b8:24:c6:76:
9f:23:6d:5c:fb:07:46:52:80:4f:21:17:42:c1:3a:
72:ea:86:0f:e4:a1:67:6d:1b:d3:69:d6:b0:3e:d7:
33:31:fa:d0:f1:c8:af:1c:2a:23:23:bd:91:18:e0:
cc:1b:5d:32:32:31:26:d0:fc:54:ef:d5:29:a8:92:
76:10:ab:e8:ef:69:a0:8f:43:a9:7c:e0:42:ef:1a:
ed:c7:e4:2a:86:e6:f4:28:ce:05:42:0f:0b:81:0f:
5b:d1:6a:c9:8b:3b:1f:0a:03:e8:60:02:77:09:64:
1a:86:5a:b7:69:e7:44:df:a3:66:c7:ba:76:9e:97:
43:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:82:52:8A:EC:1E:06:BA:B1:6F:0D:B4:35:EC:44:50:E9:56:A0:BF
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS267192.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.95.27.0/24
Signature Algorithm: sha256WithRSAEncryption
56:36:e0:c5:49:4f:42:aa:04:09:45:7e:d8:5b:ee:f0:56:48:
c2:25:96:d6:94:92:29:8f:99:95:7a:f7:6d:a7:32:01:e3:0e:
cd:2d:b5:92:be:6d:46:3b:a2:b3:0b:10:a5:ae:13:08:43:67:
d8:10:ed:b2:16:7e:e9:e2:5a:23:24:a5:4d:33:75:f5:a2:c3:
db:6a:c8:db:cd:78:a6:28:8a:1a:75:6c:e2:28:30:11:ee:09:
ec:0c:3e:93:04:5f:08:8b:cd:c4:b2:31:89:04:12:1e:84:0a:
e7:66:b7:43:25:04:ce:e7:b9:05:60:79:df:5c:13:22:dd:5d:
fd:ca:6b:c4:d1:35:8a:f0:f9:a7:d6:88:0b:32:43:6e:48:4f:
ab:63:8b:74:28:c6:55:20:4d:74:42:d7:8a:49:28:72:9b:5e:
b7:e0:21:0b:af:c2:b2:5e:d5:a5:4b:4d:a0:c6:27:dc:cc:71:
93:31:8f:71:5a:05:dc:af:dd:e8:c1:bb:c6:3d:45:c8:a7:65:
5d:a5:ca:33:82:9c:b1:a7:b0:8c:1b:e6:1b:e4:ed:61:26:5a:
0d:eb:85:f4:28:41:8e:3d:56:bb:d8:10:14:07:04:c5:75:8d:
49:9d:f7:3a:93:05:eb:fa:dd:1b:0e:cb:1a:35:58:c2:59:70:
c3:35:0f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 06:43:39 2026 by rpki-client