Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS64267.roa
File: AS64267.roa (raw, json)
Hash identifier: a4rUiRIww51oqar7evskrrc5Z6B2zsG+Uhe9luKPETI=
Subject key identifier: 9E:F3:36:8D:DD:FA:D5:76:1B:71:EF:BF:27:4D:C1:D9:FC:52:06:AA
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 13F47E8A8E762E6494193720DB63844545682CB8
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS64267.roa
Signing time: Tue 21 Jul 2026 14:10:05 +0000
ROA not before: Tue 21 Jul 2026 14:05:05 +0000
ROA not after: Tue 20 Jul 2027 14:10:05 +0000
asID: 64267
IP address blocks: 143.14.188.0/24 maxlen: 24
150.241.174.0/24 maxlen: 24
150.241.234.0/24 maxlen: 24
150.241.251.0/24 maxlen: 24
155.117.81.0/24 maxlen: 24
162.141.48.0/24 maxlen: 24
162.141.116.0/24 maxlen: 24
162.141.138.0/24 maxlen: 24
167.148.136.0/24 maxlen: 24
167.148.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:f4:7e:8a:8e:76:2e:64:94:19:37:20:db:63:84:45:45:68:2c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 21 14:05:05 2026 GMT
Not After : Jul 20 14:10:05 2027 GMT
Subject: CN=9EF3368DDDFAD5761B71EFBF274DC1D9FC5206AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:03:90:4f:fc:8e:6a:0c:32:72:64:4a:f9:5c:
f7:b7:6e:3e:04:c3:40:b4:8b:fd:29:4b:43:5a:19:
f4:c4:69:73:57:86:c2:14:71:f7:d6:a5:62:62:25:
de:aa:b3:44:5f:5f:90:e8:b8:25:e8:ef:18:ea:01:
ee:62:f5:e7:0e:c2:6a:2e:10:c3:d8:f8:b4:9a:e1:
bd:50:b2:9c:f3:0e:bf:76:d8:07:49:14:7e:24:38:
34:e8:fa:b2:a1:86:1c:8b:3e:f2:1b:85:9f:be:54:
ba:87:0a:59:ff:5d:af:05:dc:51:d7:3f:bb:45:6e:
e2:cc:d1:46:36:42:7b:18:d7:e4:18:e1:f3:06:2b:
fc:68:0d:f3:84:4e:ee:3b:6c:1e:32:7c:65:94:f6:
86:33:4c:49:a9:84:1a:7e:41:0a:dd:9d:69:4a:f3:
db:6e:7b:eb:bc:6c:ff:04:62:61:d4:75:a7:57:fc:
c0:d0:12:86:e8:e6:e5:b3:06:91:57:65:51:fd:0e:
9c:1a:5e:62:ef:91:da:0d:c8:db:f1:a6:08:49:95:
12:a8:ff:3f:4c:5f:83:f7:32:9d:60:d4:f6:1f:95:
22:3f:34:fc:ef:93:c7:c2:ef:f6:8d:fc:4b:c8:71:
0f:70:63:f3:a0:f8:9c:ba:a4:ba:21:cb:d2:5b:24:
d7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F3:36:8D:DD:FA:D5:76:1B:71:EF:BF:27:4D:C1:D9:FC:52:06:AA
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS64267.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.188.0/24
150.241.174.0/24
150.241.234.0/24
150.241.251.0/24
155.117.81.0/24
162.141.48.0/24
162.141.116.0/24
162.141.138.0/24
167.148.136.0/24
167.148.162.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:03:f8:a5:8b:6a:ef:32:d4:f7:84:c8:42:d8:7b:be:e2:b1:
64:5a:d3:bd:e3:09:2b:66:aa:b7:3d:44:39:4d:30:58:80:24:
52:25:4a:30:08:31:26:61:79:5b:74:45:f5:e4:75:93:a0:ab:
35:a6:a1:f7:27:d1:89:5f:ea:a1:db:6e:96:4f:e2:bd:07:91:
f7:be:0b:73:66:26:40:e2:cb:f4:6d:49:78:0c:b4:49:9a:e4:
db:22:82:1b:70:78:97:93:2b:bf:78:2f:58:a9:fb:73:98:70:
65:c5:58:be:55:e7:41:aa:31:d4:3c:b4:be:63:ce:e6:3d:2a:
76:0c:71:e7:84:18:76:be:84:30:90:85:97:da:5f:30:f5:3f:
f0:8b:01:54:bf:9f:63:bc:89:a6:c5:76:2e:7a:4a:75:b3:a7:
48:08:97:4d:5e:5d:bc:08:10:c0:98:b8:56:b0:43:a8:cc:44:
c3:1d:f4:ec:b3:c2:8d:b8:9d:f8:23:9a:47:3e:dc:ab:e2:e1:
66:b2:78:da:b1:ff:bd:d7:1e:51:e3:45:1a:69:44:80:c4:53:
7e:34:90:84:62:82:52:a3:f7:af:a2:3b:ad:60:dd:89:e7:20:
25:c2:ce:4f:6c:aa:02:91:9f:42:78:c6:77:c3:94:ac:77:48:
48:26:bd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:53:51 2026 by rpki-client