Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS267192.roa
File: AS267192.roa (raw, json)
Hash identifier: xZzHy5zygOPmjdM5Mw/NplzxxCrtLWWc5bMAA++7LT8=
Subject key identifier: 5D:60:C8:B2:78:67:7B:D7:0B:A8:BD:70:CC:91:19:AB:94:B3:E4:A5
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4D176B3FE4ED0AC7450DDA2650DDA9920FC433F4
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS267192.roa
Signing time: Tue 13 Oct 2026 13:55:58 +0000
ROA not before: Tue 13 Oct 2026 13:50:58 +0000
ROA not after: Tue 12 Oct 2027 13:55:58 +0000
asID: 267192
IP address blocks: 178.95.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:17:6b:3f:e4:ed:0a:c7:45:0d:da:26:50:dd:a9:92:0f:c4:33:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 13 13:50:58 2026 GMT
Not After : Oct 12 13:55:58 2027 GMT
Subject: CN=5D60C8B278677BD70BA8BD70CC9119AB94B3E4A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:41:5f:19:76:78:b0:2a:77:56:53:58:8f:8e:
a4:17:5e:c8:97:8e:cf:9e:c3:03:80:fd:53:c2:29:
97:d4:0a:b8:1c:81:44:f0:95:ff:3f:98:00:e8:ab:
76:c3:3c:55:a7:60:e8:44:c3:7c:0b:19:2b:79:c6:
d0:d1:4c:e5:79:e0:b6:9a:50:9a:52:88:8d:0d:8e:
a1:87:c8:38:7a:74:8d:44:92:14:4c:51:a6:53:85:
83:f9:b1:1a:22:1d:5c:ba:3a:30:59:21:45:06:f8:
82:60:1b:dd:e5:cf:a8:3a:dd:96:31:d4:27:43:92:
ba:76:b4:55:61:d2:ab:c0:1e:71:64:da:e4:c6:cb:
11:a7:25:6a:db:90:18:fe:5b:1b:24:c3:dd:be:21:
da:59:c3:52:1f:49:84:fc:96:df:05:e7:5f:58:fb:
88:1a:5d:14:39:08:c1:ef:14:50:1e:6f:ee:36:d1:
2f:48:7d:e8:3a:a3:44:ca:0b:6b:c2:0f:98:79:fc:
86:d4:31:b8:ec:6e:a5:de:0a:68:f4:68:4a:7f:b0:
9c:9e:bc:ca:26:0b:91:48:7b:80:68:9d:55:6c:3f:
d0:86:6c:f2:e3:84:0f:97:a1:92:f9:ee:d6:8d:f2:
0f:09:7b:9a:57:dd:af:b9:47:1e:ab:9c:38:b6:63:
a0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:60:C8:B2:78:67:7B:D7:0B:A8:BD:70:CC:91:19:AB:94:B3:E4:A5
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS267192.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.95.27.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:12:fb:e4:f6:7b:b6:80:f4:a9:0b:8c:b6:e9:9f:98:83:36:
ef:94:f5:a2:b0:27:de:9e:41:9c:82:0c:67:a5:f2:1d:6e:08:
3f:6c:16:85:cb:af:a8:c8:aa:81:6b:c2:7d:54:8c:4a:59:50:
de:83:78:89:a9:0d:67:2a:b2:29:ef:e8:38:66:d4:37:8b:17:
9f:02:67:22:e4:78:e4:34:b1:44:f6:9b:1a:6c:ec:dc:e0:8e:
e2:af:5c:7c:51:26:73:10:cb:5f:8e:a2:76:b8:89:d1:34:5a:
df:ae:9e:d8:35:8a:3e:c7:88:77:48:34:b4:76:ad:a0:a6:42:
17:19:95:96:2d:40:01:12:bc:00:37:69:b6:ec:44:cd:ed:1a:
51:35:07:26:27:e0:9d:65:52:a6:dd:99:01:7d:cb:bd:1b:d8:
2b:3a:b6:8a:98:7d:99:af:63:dd:e5:36:3e:5d:cd:1d:79:1b:
f0:6b:24:be:c9:15:4d:62:f1:8c:2f:82:c7:16:25:26:81:f2:
bc:7f:ba:1f:f4:d7:b5:dd:aa:1a:f5:ed:23:7f:a5:92:9e:90:
f3:52:51:99:00:8a:9f:ac:b6:c1:a8:e7:72:7c:f2:e6:22:bb:
85:67:82:98:bc:3d:ce:e1:5e:3b:44:32:5a:c5:84:f7:76:85:
03:ab:bb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 23:17:15 2026 by rpki-client