Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS272605.roa
File: AS272605.roa (raw, json)
Hash identifier: HW3yi7hZQh1WKyeizUHFA+Cgwq9VUUZerxrssIq+BP4=
Subject key identifier: 1A:BB:45:64:6E:B6:63:1A:1A:7F:85:E2:81:D7:08:45:6F:C2:40:7E
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 770C1FC0DE06A8DAB7D6DEB5D7823526A9073F16
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS272605.roa
Signing time: Sat 01 Aug 2026 17:39:21 +0000
ROA not before: Sat 01 Aug 2026 17:34:21 +0000
ROA not after: Sat 31 Jul 2027 17:39:21 +0000
asID: 272605
IP address blocks: 178.95.25.0/24 maxlen: 24
178.95.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:0c:1f:c0:de:06:a8:da:b7:d6:de:b5:d7:82:35:26:a9:07:3f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 1 17:34:21 2026 GMT
Not After : Jul 31 17:39:21 2027 GMT
Subject: CN=1ABB45646EB6631A1A7F85E281D708456FC2407E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:77:33:8c:de:02:06:12:bb:c9:71:e6:96:39:
9d:b2:41:25:1c:81:17:9e:6c:bb:9a:6a:d9:81:3e:
f1:88:d1:aa:f9:0c:49:a8:fc:c9:d1:6a:9c:02:29:
3d:f3:b6:28:b7:a9:09:7e:49:cd:81:ff:52:31:e6:
45:18:ba:66:f7:21:e1:6a:db:37:f4:7c:b4:6a:c1:
c3:d9:01:7f:b9:da:4c:b8:55:c1:72:e3:80:d9:1d:
40:b0:ca:bf:ad:b5:5e:f2:58:6a:35:d1:8f:0f:e3:
01:0f:80:18:95:2a:6e:39:31:56:94:a9:1d:4d:a7:
67:f1:8d:22:e3:16:87:e1:51:a3:2f:d7:a7:d8:d8:
f5:4d:4e:af:e0:53:e6:ec:0f:f4:e7:d8:02:6f:1b:
bf:9c:0a:49:30:4e:e5:cb:a0:3c:ce:54:29:0b:70:
e4:b2:f6:4b:1a:44:95:ea:a5:24:7d:b8:1e:18:0a:
91:41:d4:5d:73:d6:d7:f2:92:c4:34:80:21:d5:0b:
7b:09:a4:78:75:e6:ca:1e:c3:e6:70:37:18:ef:f4:
cc:05:f1:41:00:b9:99:12:41:28:4c:34:cf:ae:3a:
72:c2:64:ab:8a:5f:f6:4b:0e:ce:99:aa:94:49:5f:
ed:a6:50:15:89:9b:70:32:2f:65:f8:86:80:d6:f3:
98:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BB:45:64:6E:B6:63:1A:1A:7F:85:E2:81:D7:08:45:6F:C2:40:7E
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS272605.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.95.25.0/24
178.95.35.0/24
Signature Algorithm: sha256WithRSAEncryption
23:bf:6d:5a:b1:f9:1d:8a:7c:04:f1:10:78:02:6d:2c:63:c5:
7e:7e:4d:cd:a5:29:44:dc:7e:66:e5:c6:74:e2:80:f1:01:bd:
13:76:ae:c2:08:b2:6f:3f:af:00:9f:86:b8:fd:68:ad:b0:67:
10:52:89:65:c4:51:e8:72:a4:93:cf:06:24:32:60:f8:fe:3d:
57:af:cb:c2:78:2f:6e:26:76:a4:c1:af:1b:f4:5b:8e:3f:d0:
3b:0d:fa:63:7b:cf:82:73:eb:8c:77:1f:5f:96:5d:cf:80:e1:
2b:52:98:ad:01:a7:17:75:87:a8:79:76:5c:5e:b2:2e:11:c0:
17:90:0d:6f:01:2b:f1:f1:8e:b0:13:e0:ae:df:75:57:88:36:
32:78:8d:be:88:31:3c:17:87:92:01:fb:41:dd:24:13:3f:60:
aa:06:86:bc:10:b5:de:81:1a:32:6c:e6:7c:c9:08:49:a0:87:
d4:6e:bb:99:9b:ec:89:97:43:05:4f:6d:88:72:0a:21:02:76:
c5:ec:26:04:7b:ea:3f:d3:2b:03:fa:c4:9d:92:f6:08:63:a1:
d3:35:62:5c:1f:11:58:c4:71:45:40:93:17:c5:bf:7c:e5:ff:
e4:35:80:b2:0c:99:36:cd:68:04:67:74:8c:d3:92:df:fa:df:
c9:ed:45:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 06:45:02 2026 by rpki-client