Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS270158.roa
File: AS270158.roa (raw, json)
Hash identifier: wAKJCGSDaWIdfAfXQKgAtmH/haufu2vQI4Mq2u4++KE=
Subject key identifier: 62:CC:4C:9B:AF:76:F0:2C:06:77:7F:2F:56:66:56:02:8E:64:AE:2B
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3D00987DBCA29E50D5AF02F315C6E95AF90C2CCE
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS270158.roa
Signing time: Sun 06 Sep 2026 20:34:39 +0000
ROA not before: Sun 06 Sep 2026 20:29:39 +0000
ROA not after: Sun 05 Sep 2027 20:34:39 +0000
asID: 270158
IP address blocks: 95.135.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Sep 2026 18:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:00:98:7d:bc:a2:9e:50:d5:af:02:f3:15:c6:e9:5a:f9:0c:2c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 6 20:29:39 2026 GMT
Not After : Sep 5 20:34:39 2027 GMT
Subject: CN=62CC4C9BAF76F02C06777F2F566656028E64AE2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:24:f3:42:33:83:b7:d7:3b:8f:3a:bf:ec:8f:
9a:5d:f9:ce:ce:75:0d:0a:e5:a0:69:c6:0b:4d:96:
43:6c:e0:1b:c2:59:92:89:29:8d:a3:b0:84:45:fb:
0e:bb:f8:2a:60:ef:6e:06:9f:cd:72:42:85:bf:e8:
32:db:1f:fb:17:b5:c2:bf:20:4a:8e:56:15:a3:3d:
5d:85:f1:5d:c6:ac:43:36:5f:07:8b:f1:da:b3:5c:
47:95:7c:24:58:09:3d:13:61:aa:4d:33:8d:52:e1:
0f:36:a2:55:cb:9b:95:35:c6:74:67:04:80:9d:71:
e2:0a:05:5b:06:37:fc:eb:24:7a:6f:61:dc:40:19:
e3:c7:df:62:97:f6:88:f6:a8:7d:ba:75:7f:9b:41:
f3:c5:3b:16:0d:ed:5d:47:cd:87:51:40:6b:68:7f:
48:71:a0:80:8d:92:f6:02:e7:bb:ef:70:83:b9:2a:
fc:95:d7:36:09:06:47:80:a0:53:71:04:c7:65:8d:
11:c0:85:9a:f5:27:16:c9:c0:5d:e5:a2:45:37:d8:
c7:4a:49:96:28:67:e5:05:1a:ab:f4:4a:35:35:1e:
85:af:cc:bf:2d:a7:9c:6a:90:e4:c1:46:28:e0:09:
e1:c1:10:c9:aa:60:6c:25:c6:03:b4:3f:3d:f2:3d:
0b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CC:4C:9B:AF:76:F0:2C:06:77:7F:2F:56:66:56:02:8E:64:AE:2B
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS270158.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.126.0/24
Signature Algorithm: sha256WithRSAEncryption
71:d7:5a:f4:66:6d:a0:05:6b:b9:91:06:8f:4b:57:34:e0:b4:
ac:f5:84:75:ed:e7:57:70:55:61:0a:f6:c8:1b:8e:00:a4:0e:
66:cf:60:ac:b9:78:10:34:f9:09:36:b5:3a:1b:63:4e:49:be:
75:c5:cf:bd:f5:d0:37:12:7b:63:0d:e7:49:35:02:a2:0e:c9:
bd:4d:cb:bc:9c:e0:af:b3:4e:a4:6a:21:2a:ce:7d:f3:2b:5a:
84:66:fa:95:d5:fb:93:e7:b5:16:b2:27:bc:f1:f0:45:94:04:
8f:d2:05:d2:e3:23:1d:31:23:3e:53:a0:6c:73:9c:9c:18:be:
cb:b9:f0:d6:14:c9:06:4b:fa:f0:48:46:f9:f4:74:b5:bb:19:
84:41:0c:3e:e1:21:5d:8f:38:20:fb:55:72:5d:b7:2e:fc:d0:
bf:6f:63:64:55:a8:a2:38:f1:9c:17:f2:e1:42:49:c8:d4:bf:
b9:8d:be:8b:48:f5:9f:71:00:8f:76:3d:f6:e3:e8:d2:24:8f:
21:38:40:97:f9:3a:54:aa:b3:95:07:b0:e8:84:67:79:26:5f:
bb:33:48:1c:08:9b:48:e0:fa:ac:d1:f5:45:6c:be:5a:92:b2:
9c:7b:47:6a:8c:66:28:34:4c:45:c9:2b:90:33:9c:fd:1a:e2:
9b:a9:13:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 7 03:41:32 2026 by rpki-client