Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS268581.roa
File: AS268581.roa (raw, json)
Hash identifier: EEMUBi6uTqpj4QFAAjPGMQdCs+S8vKRxU2mdDcjh6fk=
Subject key identifier: 2F:54:33:D0:42:1B:60:5B:50:9B:91:4C:4B:73:2D:58:D5:94:02:AD
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 73637EFA7A534EB5232CD9E548A8168EF4FD14E1
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS268581.roa
Signing time: Thu 27 Aug 2026 15:28:59 +0000
ROA not before: Thu 27 Aug 2026 15:23:59 +0000
ROA not after: Thu 26 Aug 2027 15:28:59 +0000
asID: 268581
IP address blocks: 178.95.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 14:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:63:7e:fa:7a:53:4e:b5:23:2c:d9:e5:48:a8:16:8e:f4:fd:14:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 27 15:23:59 2026 GMT
Not After : Aug 26 15:28:59 2027 GMT
Subject: CN=2F5433D0421B605B509B914C4B732D58D59402AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ca:76:c5:19:1f:ec:3a:55:f5:13:2b:43:b5:
ea:2a:3e:2a:b1:41:80:d2:20:1f:aa:1e:f0:df:18:
ff:da:4f:ee:37:a1:80:a5:bf:7b:5d:0f:90:5b:98:
35:0a:54:56:72:8a:9e:2f:fa:f2:5e:81:f4:62:5a:
3e:40:41:14:2f:bd:c1:1e:f8:0d:cc:09:59:14:74:
77:bf:3c:1d:83:5a:94:92:87:df:7c:65:a3:47:b4:
9c:bd:8b:65:67:66:9c:8a:05:d4:21:3e:12:bd:27:
2c:f1:d6:22:9d:45:33:6f:9e:35:1e:4a:67:16:90:
5a:44:c2:f2:d3:5d:7e:e3:5a:7f:a7:00:63:dc:f7:
13:2e:89:97:67:72:4b:0b:9e:8a:24:da:46:12:4b:
1d:26:69:a5:79:65:ad:a8:bb:6d:ee:9b:40:0a:57:
93:e8:a8:fe:9c:a2:2f:08:16:87:60:06:cf:fb:b0:
09:9c:2d:54:32:b1:1c:2a:46:34:7d:96:5e:b5:fa:
29:13:73:cc:e6:ad:09:80:00:b8:a8:59:78:ce:17:
cb:7e:95:2e:65:74:e9:8e:8d:9e:54:a4:95:85:bb:
59:8f:ad:d2:39:27:09:0f:86:e1:84:8c:d7:05:9d:
58:40:bb:76:a7:c4:ca:89:fd:16:46:db:91:44:75:
4e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:54:33:D0:42:1B:60:5B:50:9B:91:4C:4B:73:2D:58:D5:94:02:AD
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS268581.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.95.44.0/24
Signature Algorithm: sha256WithRSAEncryption
56:31:75:a7:f8:de:8f:83:8f:92:e7:fb:ea:14:2b:d1:ef:ad:
05:b5:84:22:ed:c0:79:54:56:34:ea:a8:63:23:30:ac:e7:23:
9b:c2:9f:cb:b6:09:86:9c:5c:7d:5c:42:e4:01:d1:d1:20:d1:
79:43:ab:bc:8a:b7:20:67:c7:9b:00:6e:22:39:4a:12:66:1e:
c6:4f:09:4f:8e:f4:19:7a:5f:8a:0e:a5:be:8c:74:84:06:03:
3f:e9:4b:04:98:58:b9:26:98:2c:1c:da:69:4e:7e:d5:24:17:
db:71:90:67:f9:72:ea:0a:27:f3:68:06:93:7e:e4:d7:4a:3d:
29:cf:26:a4:08:a5:5d:8b:71:49:44:c2:90:95:d6:a1:26:3d:
b2:b9:11:3e:7a:e4:d8:76:47:b8:6a:d3:3f:97:73:28:2d:9c:
f9:b2:94:1b:be:ec:6d:b8:94:cb:97:26:15:45:a0:8f:94:ca:
af:88:97:c8:90:ce:9f:a9:68:7e:40:89:e3:1d:d0:f1:1f:be:
af:d2:f4:83:c2:f0:b4:a6:e7:5d:ef:95:a1:c7:db:76:de:f9:
e5:c3:99:df:66:31:60:f1:8e:9c:1e:c6:d7:b7:f9:14:9b:bf:
fa:e9:63:b4:07:1e:66:fd:0f:e9:10:bc:3b:3b:33:df:c9:b6:
59:e2:08:60
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUc2N++npTTrUjLNnlSKgWjvT9FOEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA4MjcxNTIzNTlaFw0yNzA4MjYxNTI4NTlaMDMxMTAvBgNV
BAMTKDJGNTQzM0QwNDIxQjYwNUI1MDlCOTE0QzRCNzMyRDU4RDU5NDAyQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiynbFGR/sOlX1EytDteoqPiqx
QYDSIB+qHvDfGP/aT+43oYClv3tdD5BbmDUKVFZyip4v+vJegfRiWj5AQRQvvcEe
+A3MCVkUdHe/PB2DWpSSh998ZaNHtJy9i2VnZpyKBdQhPhK9Jyzx1iKdRTNvnjUe
SmcWkFpEwvLTXX7jWn+nAGPc9xMuiZdncksLnook2kYSSx0maaV5Za2ou23um0AK
V5PoqP6coi8IFodgBs/7sAmcLVQysRwqRjR9ll61+ikTc8zmrQmAALioWXjOF8t+
lS5ldOmOjZ5UpJWFu1mPrdI5JwkPhuGEjNcFnVhAu3anxMqJ/RZG25FEdU6dAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUL1Qz0EIbYFtQm5FMS3MtWNWUAq0wHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjY4NTgxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsl8s
MA0GCSqGSIb3DQEBCwUAA4IBAQBWMXWn+N6Pg4+S5/vqFCvR760FtYQi7cB5VFY0
6qhjIzCs5yObwp/LtgmGnFx9XELkAdHRINF5Q6u8ircgZ8ebAG4iOUoSZh7GTwlP
jvQZel+KDqW+jHSEBgM/6UsEmFi5JpgsHNppTn7VJBfbcZBn+XLqCifzaAaTfuTX
Sj0pzyakCKVdi3FJRMKQldahJj2yuRE+euTYdke4atM/l3MoLZz5spQbvuxtuJTL
lyYVRaCPlMqviJfIkM6fqWh+QInjHdDxH76v0vSDwvC0pudd75Whx9t23vnlw5nf
ZjFg8Y6cHsbXt/kUm7/66WO0Bx5m/Q/pELw7OzPfybZZ4ghg
-----END CERTIFICATE-----
Generated at Fri Aug 28 00:22:50 2026 by rpki-client