Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS262287.roa
File: AS262287.roa (raw, json)
Hash identifier: FA+zInlakAeD1PfJSXwOhlmfpLJ/m+5IXroBspkt4x4=
Subject key identifier: DF:1E:09:6A:90:D3:C9:99:D2:DD:C4:A7:33:35:07:47:4A:92:88:5F
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 10FABC2BF58C2F77B45B99EB995528CEE6D9100D
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS262287.roa
Signing time: Thu 07 May 2026 07:51:22 +0000
ROA not before: Thu 07 May 2026 07:46:22 +0000
ROA not after: Thu 06 May 2027 07:51:22 +0000
asID: 262287
IP address blocks: 85.208.74.0/24 maxlen: 24
85.208.75.0/24 maxlen: 24
181.41.220.0/24 maxlen: 24
181.214.65.0/24 maxlen: 24
181.214.67.0/24 maxlen: 24
181.214.150.0/24 maxlen: 24
181.214.151.0/24 maxlen: 24
181.214.249.0/24 maxlen: 24
181.215.11.0/24 maxlen: 24
181.215.19.0/24 maxlen: 24
181.215.80.0/24 maxlen: 24
181.215.85.0/24 maxlen: 24
181.215.97.0/24 maxlen: 24
181.215.99.0/24 maxlen: 24
181.215.101.0/24 maxlen: 24
181.215.102.0/24 maxlen: 24
181.215.103.0/24 maxlen: 24
181.215.104.0/24 maxlen: 24
181.215.105.0/24 maxlen: 24
181.215.106.0/24 maxlen: 24
181.215.128.0/24 maxlen: 24
181.215.150.0/24 maxlen: 24
181.215.156.0/24 maxlen: 24
181.215.172.0/24 maxlen: 24
181.215.195.0/24 maxlen: 24
191.96.19.0/24 maxlen: 24
191.96.47.0/24 maxlen: 24
191.96.73.0/24 maxlen: 24
191.96.111.0/24 maxlen: 24
191.96.116.0/24 maxlen: 24
191.96.126.0/24 maxlen: 24
191.96.139.0/24 maxlen: 24
191.96.247.0/24 maxlen: 24
191.101.152.0/24 maxlen: 24
191.101.154.0/24 maxlen: 24
191.101.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:fa:bc:2b:f5:8c:2f:77:b4:5b:99:eb:99:55:28:ce:e6:d9:10:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: May 7 07:46:22 2026 GMT
Not After : May 6 07:51:22 2027 GMT
Subject: CN=DF1E096A90D3C999D2DDC4A7333507474A92885F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0e:38:9d:f7:a3:e3:92:fd:cf:64:8d:66:15:
d3:38:30:85:8b:d2:d0:94:22:23:03:e9:36:06:42:
c9:0a:8f:ba:e9:d4:75:db:e7:52:ab:27:01:3d:10:
a8:2c:83:4d:39:19:b3:31:a3:27:5b:28:4d:66:f9:
f9:09:ae:90:3f:9e:0a:c0:4e:75:cb:d1:08:bf:8d:
68:33:31:0e:8f:bb:73:a4:68:87:9e:b7:6a:ae:cf:
17:b9:f1:91:35:82:2b:9e:88:13:a9:fe:7b:8f:96:
4e:72:52:8e:8b:a5:0d:11:f4:a0:1a:76:cb:61:1e:
fc:36:4d:f2:20:36:0c:54:37:72:0e:a7:95:c8:1e:
1e:fa:08:58:1b:c6:a5:f6:49:29:ca:84:01:8a:c0:
38:93:aa:2c:aa:96:2d:ed:e6:a1:28:68:c8:b5:72:
3a:47:3a:d3:76:3d:c6:98:95:c8:04:f8:e2:8d:c2:
67:d0:b5:0b:f9:cc:44:9e:20:01:65:90:cb:dc:a3:
77:6c:07:a9:8f:92:77:89:46:aa:90:18:d2:ce:94:
31:c9:ca:67:7c:10:a5:b0:b5:ac:d7:6d:12:53:a4:
c5:72:e3:2d:32:cf:65:88:ce:22:ab:bf:18:06:91:
78:00:5d:ae:97:15:2d:99:04:29:4d:98:63:ab:4c:
60:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1E:09:6A:90:D3:C9:99:D2:DD:C4:A7:33:35:07:47:4A:92:88:5F
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS262287.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.74.0/23
181.41.220.0/24
181.214.65.0/24
181.214.67.0/24
181.214.150.0/23
181.214.249.0/24
181.215.11.0/24
181.215.19.0/24
181.215.80.0/24
181.215.85.0/24
181.215.97.0/24
181.215.99.0/24
181.215.101.0-181.215.106.255
181.215.128.0/24
181.215.150.0/24
181.215.156.0/24
181.215.172.0/24
181.215.195.0/24
191.96.19.0/24
191.96.47.0/24
191.96.73.0/24
191.96.111.0/24
191.96.116.0/24
191.96.126.0/24
191.96.139.0/24
191.96.247.0/24
191.101.152.0/24
191.101.154.0/24
191.101.225.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ec:a2:5d:21:cf:c1:88:2e:5d:11:d8:6f:7f:17:a7:6c:54:
62:4d:34:10:70:8f:40:e1:fb:52:b4:4a:fe:cd:bd:b4:8a:35:
17:0c:cc:64:95:b4:66:5d:73:ac:3d:ef:04:6b:f0:62:47:aa:
df:d4:7a:97:8c:ad:a4:f5:5d:6b:9a:44:a3:80:d0:a9:62:e7:
e5:62:1a:76:e8:fb:e6:4a:fb:ee:cb:81:1c:ba:d7:1e:d5:6f:
78:d2:08:4f:04:92:f7:ad:d3:77:4b:c8:00:53:c5:09:6a:cb:
5a:b0:94:7d:ef:68:bc:eb:2c:32:6c:50:45:d8:00:50:4a:aa:
c5:0e:a7:f8:24:64:ef:38:20:ed:2c:13:71:3d:07:00:04:5c:
65:14:54:3e:88:53:26:f9:63:b2:fd:81:64:53:18:13:14:d5:
a0:91:9b:ee:44:8a:db:c5:bb:16:2b:cd:03:93:a3:9f:78:f2:
b9:e1:eb:72:33:57:d2:f1:b4:64:b8:fd:03:3a:22:5a:1c:dd:
84:cf:69:c8:c2:8d:bc:47:76:88:7a:59:88:f9:8d:af:cc:56:
ef:59:3e:8c:b9:23:87:5d:25:a8:7f:f3:b2:4a:34:2e:1a:86:
01:ad:ab:dc:ef:2f:06:ff:31:43:f7:77:6a:2c:dc:67:9d:60:
71:fd:f2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:15:59 2026 by rpki-client