Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62164.roa
File: AS62164.roa (raw, json)
Hash identifier: omEnhqgCl6i2wK4PV2vshbQlAcajAu3V0zaCKm2oY8M=
Subject key identifier: 17:21:1F:E0:92:7A:C2:1A:93:E5:7F:3C:5D:E1:7A:6B:09:50:05:48
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 061A79D195F7C158B62E2DC6E869D0AE19D67FF7
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62164.roa
Signing time: Mon 02 Nov 2026 15:25:05 +0000
ROA not before: Mon 02 Nov 2026 15:20:05 +0000
ROA not after: Mon 01 Nov 2027 15:25:05 +0000
asID: 62164
IP address blocks: 96.62.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 07:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:1a:79:d1:95:f7:c1:58:b6:2e:2d:c6:e8:69:d0:ae:19:d6:7f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 2 15:20:05 2026 GMT
Not After : Nov 1 15:25:05 2027 GMT
Subject: CN=17211FE0927AC21A93E57F3C5DE17A6B09500548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:96:68:61:cd:b7:94:ed:ca:c3:a6:e8:49:24:
c0:c5:3d:6d:8f:63:3f:ea:8c:a6:1f:db:b5:bd:43:
4c:bb:ea:ef:6d:b7:9e:13:95:f5:0c:85:39:8c:ea:
9e:5c:85:da:bd:d5:6e:67:a6:c1:c8:cc:2e:df:88:
bc:4d:54:82:4b:1c:0d:41:10:c7:7e:e2:5e:36:e2:
9c:64:7e:9f:f1:01:b1:a7:8a:4e:37:ba:fd:94:24:
2f:8a:c5:d0:b6:fa:72:80:5c:c5:bc:7f:b6:4c:68:
33:9d:d4:ed:0a:3d:c0:dd:29:a4:f4:9c:e3:5e:0c:
90:e0:5a:67:3a:b8:60:4e:b2:5b:81:e1:bf:bd:80:
71:16:7c:1b:07:92:77:44:b3:35:fd:f7:b4:a0:3f:
bc:6c:3a:cf:93:f6:9f:4c:0b:3f:0a:d4:ef:66:31:
75:77:8a:a8:c9:36:b4:9d:00:4c:2f:d4:08:07:45:
93:22:da:b0:23:4a:8f:0e:c7:f1:b4:fe:2b:ca:7b:
ea:99:3f:e8:00:b7:a4:f4:fd:9e:b1:cf:9c:e3:cf:
b9:26:a5:79:d8:9e:57:ee:1a:41:93:b2:1d:54:01:
74:ad:f4:ae:56:d2:b4:d6:23:34:ec:9e:c9:59:7a:
7b:f6:db:4b:fb:a3:39:3d:ee:71:32:62:93:8e:c9:
61:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:21:1F:E0:92:7A:C2:1A:93:E5:7F:3C:5D:E1:7A:6B:09:50:05:48
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62164.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.217.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:c1:f3:02:7e:8a:83:68:c1:94:60:c2:90:34:79:4f:e3:b0:
9a:34:90:52:d7:83:bf:18:0f:c6:bc:ae:a9:60:3c:96:d9:12:
50:b5:05:45:de:5f:d8:e2:ea:54:91:17:62:c8:e5:34:b4:b2:
25:4d:3c:e3:b2:1f:bd:f4:0f:ed:97:b4:4d:cb:47:1f:13:51:
9c:f0:f3:57:95:f8:64:db:de:e4:3e:d9:9f:11:3b:63:63:ed:
e3:fd:e6:86:85:a6:b1:76:5a:3c:2f:c3:c8:e1:72:0e:bd:87:
02:7f:db:f8:1c:cd:99:8a:c1:e3:09:e3:fd:61:ba:a0:0a:19:
34:9e:50:e3:61:73:7f:ec:4d:28:6a:42:8f:06:4c:34:20:f5:
66:72:6e:3a:fa:7c:e9:65:28:7f:9d:0f:77:60:3d:63:e4:76:
41:74:62:3c:8b:6d:5e:08:d0:4f:d7:d6:b2:51:93:01:0e:26:
e2:8e:1f:f0:07:e8:e6:49:e8:9f:0a:20:ff:ba:17:d8:e1:03:
4f:05:ff:59:e8:44:3f:9c:b4:43:0d:ec:e3:1f:87:65:69:ef:
fb:aa:a8:f2:d2:e7:a5:88:a0:5b:95:54:03:a3:1c:74:89:6c:
eb:06:13:af:a4:aa:f7:de:42:ab:84:51:13:b1:fd:8c:91:3d:
db:2b:eb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:34:26 2026 by rpki-client