Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS5065.roa
File: AS5065.roa (raw, json)
Hash identifier: 9gK7QryVCDK9BNtvIUTPGd/4kDunR2uQikqhIC0Ci9Q=
Subject key identifier: 22:B0:69:F7:24:E3:42:92:2F:ED:AF:6A:08:69:4D:26:4D:DF:30:D6
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 573ED516F9A8407EF4E96F53EEAE0C47208DD479
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS5065.roa
Signing time: Fri 13 Nov 2026 08:49:41 +0000
ROA not before: Fri 13 Nov 2026 08:44:41 +0000
ROA not after: Fri 12 Nov 2027 08:49:41 +0000
asID: 5065
IP address blocks: 96.62.69.0/24 maxlen: 24
96.62.72.0/24 maxlen: 24
96.62.75.0/24 maxlen: 24
96.62.76.0/24 maxlen: 24
96.62.78.0/24 maxlen: 24
96.62.84.0/24 maxlen: 24
96.62.89.0/24 maxlen: 24
96.62.131.0/24 maxlen: 24
148.135.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 07:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:3e:d5:16:f9:a8:40:7e:f4:e9:6f:53:ee:ae:0c:47:20:8d:d4:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 13 08:44:41 2026 GMT
Not After : Nov 12 08:49:41 2027 GMT
Subject: CN=22B069F724E342922FEDAF6A08694D264DDF30D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:01:c5:43:cc:85:5d:b8:6b:9f:b4:13:f1:b9:
78:3f:0a:8b:1f:18:91:2b:37:ea:80:fc:dc:ea:4c:
5a:e6:fd:06:00:9d:0e:e3:6b:1e:f7:ef:b7:17:62:
69:f6:c7:29:9c:43:d8:15:c1:13:31:2e:22:84:99:
ea:5e:69:96:8e:85:51:c4:97:07:67:89:ae:e1:cb:
50:96:8d:c2:92:c3:cc:88:cd:3f:fd:c8:4f:11:38:
e0:97:f7:b3:93:f7:91:ea:9c:85:a1:04:07:cb:c5:
22:11:3e:1b:1b:22:ce:12:2c:79:dd:be:aa:74:2f:
f3:5d:c1:b4:57:88:a8:ef:bd:20:34:2a:cd:b1:6e:
c0:1f:06:48:d1:f0:13:75:c7:46:28:c8:c5:f9:7c:
cd:0d:ae:dc:af:74:78:b5:5a:1f:e6:ab:14:ba:b5:
11:f5:50:3e:6c:6f:89:da:e9:45:e8:e9:09:8d:2b:
19:bd:73:4c:cc:8e:1e:cc:e6:5f:75:10:23:7e:47:
23:3c:5d:42:8a:1f:51:79:59:2a:a0:11:e2:69:79:
ac:74:fa:e7:6d:86:69:5d:61:99:a6:20:e3:bf:af:
c5:99:38:c1:27:95:a7:a7:1f:92:37:b0:70:e1:ba:
8a:c8:7d:b6:1f:ca:ce:bf:aa:c4:fe:b8:b2:ed:71:
5f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B0:69:F7:24:E3:42:92:2F:ED:AF:6A:08:69:4D:26:4D:DF:30:D6
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS5065.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.69.0/24
96.62.72.0/24
96.62.75.0-96.62.76.255
96.62.78.0/24
96.62.84.0/24
96.62.89.0/24
96.62.131.0/24
148.135.153.0/24
Signature Algorithm: sha256WithRSAEncryption
75:c0:b8:ab:f5:17:9c:59:4c:ec:4f:b3:73:5a:92:f6:9a:45:
46:03:a1:f1:15:96:eb:39:95:fe:ae:cf:68:c3:01:c3:ce:86:
f6:af:63:e5:c6:76:2b:04:2c:50:a4:d1:a8:73:cf:58:be:1f:
af:ec:60:1c:11:87:6d:8e:7e:3e:41:a9:a9:68:1c:b5:95:54:
dc:2b:b2:89:ac:15:be:12:ac:99:5f:80:70:f9:69:76:8e:5d:
44:f8:c3:55:83:13:7e:c9:a7:3f:d1:b4:51:5a:a5:12:1f:d0:
7e:7e:bd:cf:5f:d6:a6:8a:4e:4e:17:08:2f:b6:83:45:08:44:
87:dc:dc:4a:35:35:1c:56:b3:47:d0:7a:5b:e2:7d:51:c7:5d:
a9:97:f5:d8:fa:32:40:37:26:55:4b:40:72:34:41:28:a5:31:
d1:d7:62:11:8f:77:3a:b8:02:9d:0c:01:ed:2e:bd:90:6f:39:
3c:29:73:40:a5:87:f2:ee:2d:94:d9:e7:86:6d:e8:47:a0:ee:
0b:17:80:2c:9a:e9:ae:e2:30:13:9d:6b:37:61:3b:94:16:17:
9b:a9:ce:26:1e:93:41:be:84:7f:50:d6:15:86:23:de:23:34:
03:a0:96:f9:e4:d8:ee:89:fc:94:b0:76:db:24:80:75:b7:6e:
b1:50:7a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:29:50 2026 by rpki-client