Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS272605.roa
File: AS272605.roa (raw, json)
Hash identifier: BW0vJRJc7fBy408uak7KHxSbtODCHbcxGOznFYw2b/g=
Subject key identifier: 5F:43:D0:11:C5:02:46:C5:C9:D0:77:D1:21:E3:0C:E5:A1:0D:0F:DB
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6DE34458C36E6E4FC3797CEA22D201DCF9F6E891
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS272605.roa
Signing time: Thu 09 Jul 2026 14:55:16 +0000
ROA not before: Thu 09 Jul 2026 14:50:16 +0000
ROA not after: Thu 08 Jul 2027 14:55:16 +0000
asID: 272605
IP address blocks: 178.95.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Jul 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:e3:44:58:c3:6e:6e:4f:c3:79:7c:ea:22:d2:01:dc:f9:f6:e8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 9 14:50:16 2026 GMT
Not After : Jul 8 14:55:16 2027 GMT
Subject: CN=5F43D011C50246C5C9D077D121E30CE5A10D0FDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:77:9f:9f:39:28:c3:ef:e9:25:b1:c7:a5:24:
b5:63:a6:bf:27:6a:7b:84:db:c6:fc:f9:b5:06:a6:
6b:76:01:dc:2e:d0:03:62:79:43:58:ce:7c:8d:af:
24:b3:a8:30:f1:6e:f6:09:87:90:43:9c:8b:12:31:
8c:bb:42:a7:c4:ed:a2:aa:ad:d6:1a:5e:8f:9b:bb:
61:d3:7e:f7:0c:87:ee:1e:c4:bd:e6:e4:0a:54:c8:
9c:06:11:82:87:7e:58:99:4a:3f:bc:4a:66:30:0b:
5d:a5:e4:e9:74:2c:88:39:59:3d:d8:44:e7:6c:66:
a1:3f:3c:9f:d1:2e:7f:f9:03:cd:ee:1e:2b:ea:80:
68:22:42:16:08:ec:a4:f7:50:6c:f6:e6:b8:26:93:
15:ba:70:f8:dc:56:3d:12:ff:7c:8f:a9:d1:a6:fa:
2f:4a:c7:79:ca:68:94:43:9c:19:72:63:7d:24:3d:
7a:c1:49:74:d6:50:3f:b2:8a:52:8e:7f:7f:d0:ad:
79:fb:3c:d2:9c:ca:c4:f8:98:a4:3a:c9:5a:37:1a:
68:7d:e1:89:c5:0a:4e:31:23:a6:3f:9a:4d:c0:6e:
4f:b0:10:f2:1c:0d:fd:78:b4:38:63:05:fd:3b:69:
91:ce:68:07:3e:81:32:a2:00:13:9d:73:cc:f7:e5:
72:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:43:D0:11:C5:02:46:C5:C9:D0:77:D1:21:E3:0C:E5:A1:0D:0F:DB
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS272605.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.95.25.0/24
Signature Algorithm: sha256WithRSAEncryption
47:9f:ff:12:2f:95:68:f5:da:af:c3:06:a4:35:96:c3:00:3d:
86:97:f2:3c:b2:40:29:4d:81:ae:3b:b6:bd:66:48:a9:9f:f7:
68:62:73:73:78:76:d9:1e:ba:72:b4:13:d0:24:3a:96:3d:75:
d8:a5:50:e2:db:71:98:72:38:09:c5:f7:a4:37:ec:30:8e:43:
f3:2f:aa:5b:1d:3e:55:58:7f:79:83:63:21:62:db:f9:24:00:
1b:40:39:0c:33:fb:bb:88:c7:4e:35:9f:6d:3c:77:6e:ed:dc:
21:43:3e:6c:ee:f0:e6:7a:6e:bd:e7:21:c5:34:a1:d8:00:64:
4e:89:bc:b8:16:b8:46:2a:71:60:b1:31:44:17:5e:33:41:a8:
81:78:5d:40:c5:d1:e7:94:07:e5:d9:16:c4:f1:77:73:c3:fa:
e2:41:d3:97:e8:c9:57:3a:c7:35:34:84:61:fa:6a:9b:dc:90:
93:9e:6a:74:ce:0c:17:50:44:fb:e1:1c:45:55:38:d2:ae:93:
2d:12:ee:77:e5:3b:67:91:d3:fa:da:7d:a5:26:9c:3a:37:c8:
0b:7f:53:cc:ba:18:f2:1a:b2:ec:71:ea:4c:07:ba:a1:55:ee:
4a:92:80:38:33:5a:98:ed:e2:d6:2b:b3:43:f3:45:bd:32:97:
07:58:97:31
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUbeNEWMNubk/DeXzqItIB3Pn26JEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA3MDkxNDUwMTZaFw0yNzA3MDgxNDU1MTZaMDMxMTAvBgNV
BAMTKDVGNDNEMDExQzUwMjQ2QzVDOUQwNzdEMTIxRTMwQ0U1QTEwRDBGREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChd5+fOSjD7+klscelJLVjpr8n
anuE28b8+bUGpmt2Adwu0ANieUNYznyNrySzqDDxbvYJh5BDnIsSMYy7QqfE7aKq
rdYaXo+bu2HTfvcMh+4exL3m5ApUyJwGEYKHfliZSj+8SmYwC12l5Ol0LIg5WT3Y
ROdsZqE/PJ/RLn/5A83uHivqgGgiQhYI7KT3UGz25rgmkxW6cPjcVj0S/3yPqdGm
+i9Kx3nKaJRDnBlyY30kPXrBSXTWUD+yilKOf3/QrXn7PNKcysT4mKQ6yVo3Gmh9
4YnFCk4xI6Y/mk3Abk+wEPIcDf14tDhjBf07aZHOaAc+gTKiABOdc8z35XIxAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUX0PQEcUCRsXJ0HfRIeMM5aEND9swHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjcyNjA1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsl8Z
MA0GCSqGSIb3DQEBCwUAA4IBAQBHn/8SL5Vo9dqvwwakNZbDAD2Gl/I8skApTYGu
O7a9Zkipn/doYnNzeHbZHrpytBPQJDqWPXXYpVDi23GYcjgJxfekN+wwjkPzL6pb
HT5VWH95g2MhYtv5JAAbQDkMM/u7iMdONZ9tPHdu7dwhQz5s7vDmem695yHFNKHY
AGROiby4FrhGKnFgsTFEF14zQaiBeF1AxdHnlAfl2RbE8Xdzw/riQdOX6MlXOsc1
NIRh+mqb3JCTnmp0zgwXUET74RxFVTjSrpMtEu535TtnkdP62n2lJpw6N8gLf1PM
uhjyGrLscepMB7qhVe5KkoA4M1qY7eLWK7ND80W9MpcHWJcx
-----END CERTIFICATE-----
Generated at Thu Jul 9 22:37:45 2026 by rpki-client