Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS274809.roa
File: AS274809.roa (raw, json)
Hash identifier: fdi+rUxpEt6+wWSSB8+7Uq+7FJkrk4Z3/HQto3T0fog=
Subject key identifier: 2C:C7:A2:00:0B:94:2F:28:26:A1:68:B0:8C:44:7E:CC:A9:FB:AD:52
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 72D8553A97957B2963A4156C580E72D7D5521833
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS274809.roa
Signing time: Mon 17 Aug 2026 18:08:31 +0000
ROA not before: Mon 17 Aug 2026 18:03:31 +0000
ROA not after: Mon 16 Aug 2027 18:08:31 +0000
asID: 274809
IP address blocks: 178.95.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 14:57:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:d8:55:3a:97:95:7b:29:63:a4:15:6c:58:0e:72:d7:d5:52:18:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 17 18:03:31 2026 GMT
Not After : Aug 16 18:08:31 2027 GMT
Subject: CN=2CC7A2000B942F2826A168B08C447ECCA9FBAD52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bf:3e:d3:08:ca:4f:53:43:2b:29:84:a2:bf:
9d:1e:88:ce:00:0d:5f:03:23:69:14:fe:53:b5:fa:
21:fb:a4:9a:98:2c:dc:fa:6f:27:30:35:80:69:eb:
9b:58:41:ce:9e:10:b0:e1:c2:7c:93:a1:33:12:3e:
48:b5:a6:37:d9:fa:fc:e1:96:c3:22:45:84:9a:1f:
3f:e8:35:5a:e3:98:3f:63:d5:aa:cc:cb:6b:c6:49:
7c:10:2a:c8:22:9a:80:22:91:78:f1:65:f2:95:91:
44:b3:68:4b:d5:87:43:14:f0:61:b4:1c:0c:03:e5:
96:b7:93:ee:3d:37:d7:73:42:8a:f4:2b:a7:72:e2:
ef:c2:64:70:c3:5d:68:82:ea:01:dc:51:26:9f:fd:
49:6a:7d:d2:09:26:f3:85:60:ee:35:a6:68:33:a7:
4d:ad:f8:df:95:20:d1:c6:17:95:c1:62:2b:1c:62:
7f:e2:1b:c1:d7:a2:98:01:20:d3:2b:dc:4b:48:58:
55:e6:2a:04:a1:ce:17:7a:2f:82:c2:19:ff:27:17:
80:3b:95:38:34:61:b5:2b:24:8f:99:c7:07:c3:4f:
12:70:60:33:77:20:6b:9f:1f:5b:5a:6a:d4:b8:64:
3d:dc:a4:44:7a:f5:9f:1a:2a:6d:49:40:6e:55:75:
ef:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C7:A2:00:0B:94:2F:28:26:A1:68:B0:8C:44:7E:CC:A9:FB:AD:52
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS274809.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.95.47.0/24
Signature Algorithm: sha256WithRSAEncryption
62:54:de:7e:bc:86:7d:82:60:e0:c6:0e:1a:df:c5:38:63:e1:
c0:65:e0:ed:e2:fd:b5:5c:43:7d:6f:09:06:4f:8f:d7:ee:81:
32:dd:2e:34:e9:a2:3b:85:d3:7d:6f:c1:e5:fc:15:45:81:35:
f3:5c:5d:3a:e7:f5:24:f1:74:4f:25:12:a5:4a:7e:ff:b4:48:
1a:ac:47:c6:7c:25:8e:bf:36:5b:09:8b:c7:75:b6:e9:0e:65:
71:0b:ef:44:43:63:e4:19:e1:be:67:a8:07:ac:b1:c9:37:58:
37:84:92:56:d3:46:55:d1:49:e4:1a:9c:5a:fa:38:a9:23:eb:
1e:9f:fe:99:a4:b3:a5:ff:d5:c8:df:c9:a2:54:dc:4a:c2:58:
86:7f:2a:6e:a2:4f:a9:07:32:06:94:c5:c7:8f:f1:a0:a3:d4:
35:4e:7f:cf:de:d2:4d:dc:03:00:36:3c:a6:6d:7c:43:78:ef:
bb:dc:b3:6a:1b:bb:6c:a7:27:bb:a2:7c:01:f9:d7:16:8f:0a:
9d:9f:4c:6e:68:f5:35:6d:6b:ec:34:d7:27:51:af:a0:f7:45:
65:e8:ce:ec:72:95:93:d0:5c:e3:be:4e:75:70:65:ef:8f:13:
dd:8a:08:ef:05:80:71:9f:4b:bf:1f:f6:87:77:0c:8f:72:58:
0d:98:82:cf
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUcthVOpeVeyljpBVsWA5y19VSGDMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA4MTcxODAzMzFaFw0yNzA4MTYxODA4MzFaMDMxMTAvBgNV
BAMTKDJDQzdBMjAwMEI5NDJGMjgyNkExNjhCMDhDNDQ3RUNDQTlGQkFENTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwvz7TCMpPU0MrKYSiv50eiM4A
DV8DI2kU/lO1+iH7pJqYLNz6bycwNYBp65tYQc6eELDhwnyToTMSPki1pjfZ+vzh
lsMiRYSaHz/oNVrjmD9j1arMy2vGSXwQKsgimoAikXjxZfKVkUSzaEvVh0MU8GG0
HAwD5Za3k+49N9dzQor0K6dy4u/CZHDDXWiC6gHcUSaf/UlqfdIJJvOFYO41pmgz
p02t+N+VINHGF5XBYiscYn/iG8HXopgBINMr3EtIWFXmKgShzhd6L4LCGf8nF4A7
lTg0YbUrJI+ZxwfDTxJwYDN3IGufH1taatS4ZD3cpER69Z8aKm1JQG5Vde9TAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQULMeiAAuULygmoWiwjER+zKn7rVIwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjc0ODA5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsl8v
MA0GCSqGSIb3DQEBCwUAA4IBAQBiVN5+vIZ9gmDgxg4a38U4Y+HAZeDt4v21XEN9
bwkGT4/X7oEy3S406aI7hdN9b8Hl/BVFgTXzXF065/Uk8XRPJRKlSn7/tEgarEfG
fCWOvzZbCYvHdbbpDmVxC+9EQ2PkGeG+Z6gHrLHJN1g3hJJW00ZV0UnkGpxa+jip
I+sen/6ZpLOl/9XI38miVNxKwliGfypuok+pBzIGlMXHj/Ggo9Q1Tn/P3tJN3AMA
NjymbXxDeO+73LNqG7tspye7onwB+dcWjwqdn0xuaPU1bWvsNNcnUa+g90Vl6M7s
cpWT0Fzjvk51cGXvjxPdigjvBYBxn0u/H/aHdwyPclgNmILP
-----END CERTIFICATE-----
Generated at Wed Sep 2 20:31:30 2026 by rpki-client