Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS275732.roa
File: AS275732.roa (raw, json)
Hash identifier: EwUexJZmU00+zgTPj0URgSpeNMdTQ06X1HnUQS/hHSE=
Subject key identifier: 3B:26:E9:30:FE:B5:B0:DE:7D:5F:AB:A9:97:7B:56:C5:CB:8B:F8:08
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 038C7F9F6E5A4547B69509EA6D92211511359548
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS275732.roa
Signing time: Wed 01 Jul 2026 19:39:02 +0000
ROA not before: Wed 01 Jul 2026 19:34:02 +0000
ROA not after: Wed 30 Jun 2027 19:39:02 +0000
asID: 275732
IP address blocks: 178.92.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:8c:7f:9f:6e:5a:45:47:b6:95:09:ea:6d:92:21:15:11:35:95:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 1 19:34:02 2026 GMT
Not After : Jun 30 19:39:02 2027 GMT
Subject: CN=3B26E930FEB5B0DE7D5FABA9977B56C5CB8BF808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c1:8a:f1:65:a9:f2:f3:6f:55:86:54:a3:af:
b9:59:36:50:b4:3c:16:f9:6f:bd:d0:db:d7:48:42:
34:d0:61:d7:be:10:41:43:a0:9d:e5:8b:e1:b0:71:
7d:9e:c6:58:b1:3d:7a:65:39:6a:c9:ea:fd:98:14:
cb:ee:27:3f:84:cb:2c:37:4c:ec:04:79:87:5d:88:
4c:43:7c:0f:c2:4c:a8:fe:df:2a:cb:ca:f8:e3:a4:
fc:b0:c6:77:b1:13:9f:97:69:86:39:a6:1b:1b:16:
f6:cd:19:3d:d1:86:de:eb:b7:68:1e:30:e0:3a:92:
f4:5c:67:b5:f1:d9:f4:97:27:e4:28:e6:6c:16:de:
52:82:4a:40:85:18:87:30:12:14:c7:91:2a:13:08:
7b:84:b9:21:9a:83:c8:76:fe:d5:5d:c8:ae:ec:f8:
3a:81:0b:dd:fb:99:96:7c:5f:3d:89:5c:0f:97:55:
7c:4a:af:ee:ea:32:62:7b:52:d5:0a:b8:d5:d3:e4:
64:6d:0a:df:bd:98:e6:47:a5:22:8b:01:80:f5:49:
c4:0d:28:80:45:d8:23:72:ee:48:2f:2a:e2:91:cc:
6a:e7:2f:d3:8a:d3:6e:da:db:c7:5e:07:72:9e:c3:
be:f5:8b:fa:9b:da:58:9e:98:4b:7a:ef:9c:25:44:
4d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:26:E9:30:FE:B5:B0:DE:7D:5F:AB:A9:97:7B:56:C5:CB:8B:F8:08
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS275732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.217.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c8:f4:17:6b:57:65:6b:cb:c0:9b:f1:ed:18:80:5b:70:a5:
81:cc:67:d8:a4:15:a6:0d:c2:f8:0e:ce:3a:0e:e7:b1:5f:a4:
a0:47:64:30:a5:c4:7e:bc:f0:20:6d:63:8b:77:1a:93:74:b9:
1d:7a:b0:21:81:f7:4f:8a:37:ee:9a:dd:81:37:af:fc:87:92:
23:ba:1f:e9:bd:b4:df:14:1a:84:15:0a:b2:ed:48:3c:bf:a7:
87:32:16:3d:5a:3c:58:91:b2:a1:81:d6:a7:2d:cd:c9:f6:dc:
75:32:fe:83:63:73:bf:b2:8e:e0:7f:59:08:68:3b:c6:0b:de:
d5:e9:33:bc:aa:38:75:ca:fa:39:fb:8b:9b:c0:d5:66:8c:e4:
5f:1b:19:5a:68:2f:ef:92:79:25:27:5c:b2:1f:c1:3f:b3:39:
2d:e9:63:47:91:59:3d:81:7f:76:bd:7d:c8:e6:6a:f8:02:25:
4e:8b:9e:86:c0:6f:d0:3d:b0:c0:d4:50:81:e0:06:05:e5:2d:
68:37:b2:55:d4:0a:97:45:47:22:ca:9b:c9:17:26:57:21:32:
ba:4d:c7:d2:a5:d8:b7:d9:60:f3:c6:10:4b:a6:5d:8f:6f:6b:
0e:47:00:21:46:84:fb:bf:51:93:cc:11:6b:94:e3:67:64:65:
11:4e:a5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 2 07:46:05 2026 by rpki-client