Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS262287.roa
File: AS262287.roa (raw, json)
Hash identifier: Ikm6M1XgtYZvLF1dZ1zz7zmdyBuR/GLmSTgGI5AWpSU=
Subject key identifier: FA:0A:F5:A0:64:23:BF:51:0A:AB:9A:64:15:01:C4:CF:3C:6E:6D:1A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7896DE30EE520EF78694062FBD020DBC791FE477
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS262287.roa
Signing time: Fri 10 Oct 2025 13:20:26 +0000
ROA not before: Fri 10 Oct 2025 13:15:26 +0000
ROA not after: Fri 09 Oct 2026 13:20:26 +0000
asID: 262287
IP address blocks: 85.208.74.0/24 maxlen: 24
85.208.75.0/24 maxlen: 24
181.41.220.0/24 maxlen: 24
181.214.65.0/24 maxlen: 24
181.214.67.0/24 maxlen: 24
181.214.150.0/24 maxlen: 24
181.214.151.0/24 maxlen: 24
181.214.249.0/24 maxlen: 24
181.215.11.0/24 maxlen: 24
181.215.19.0/24 maxlen: 24
181.215.80.0/24 maxlen: 24
181.215.85.0/24 maxlen: 24
181.215.97.0/24 maxlen: 24
181.215.99.0/24 maxlen: 24
181.215.101.0/24 maxlen: 24
181.215.102.0/24 maxlen: 24
181.215.103.0/24 maxlen: 24
181.215.104.0/24 maxlen: 24
181.215.105.0/24 maxlen: 24
181.215.106.0/24 maxlen: 24
181.215.128.0/24 maxlen: 24
181.215.150.0/24 maxlen: 24
181.215.156.0/24 maxlen: 24
181.215.172.0/24 maxlen: 24
181.215.195.0/24 maxlen: 24
191.96.19.0/24 maxlen: 24
191.96.47.0/24 maxlen: 24
191.96.73.0/24 maxlen: 24
191.96.139.0/24 maxlen: 24
191.96.247.0/24 maxlen: 24
191.101.152.0/24 maxlen: 24
191.101.154.0/24 maxlen: 24
191.101.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:96:de:30:ee:52:0e:f7:86:94:06:2f:bd:02:0d:bc:79:1f:e4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 10 13:15:26 2025 GMT
Not After : Oct 9 13:20:26 2026 GMT
Subject: CN=FA0AF5A06423BF510AAB9A641501C4CF3C6E6D1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f7:62:77:77:10:41:40:2f:dc:40:79:47:a3:
96:e1:01:ef:27:eb:3c:60:11:4c:23:2a:a6:84:59:
43:1b:c7:25:96:72:05:df:62:8c:32:16:2a:8d:3f:
e4:bb:df:2a:24:d8:30:4a:a6:f4:d2:e7:ab:b5:ed:
a6:d4:6f:59:a0:2e:c0:9e:35:63:a2:89:f3:b8:53:
5c:79:52:86:6c:a7:a2:7a:7b:23:57:7e:f0:61:0d:
9e:89:01:d1:3c:cf:1b:26:3c:96:68:d7:38:d7:e6:
a0:e0:3e:4b:a3:7b:1b:7a:0d:df:7f:73:96:22:1a:
6b:c6:85:d8:b4:23:c9:e6:d4:da:bd:4b:e9:f4:41:
24:49:e9:d7:91:7b:5a:7f:08:a8:55:e2:59:da:68:
45:73:11:8b:41:a4:1a:67:51:40:27:17:79:d1:38:
3c:9f:5d:55:d6:ea:78:b2:3a:92:f1:d2:96:f0:58:
96:29:6c:c7:34:5c:3d:96:87:97:96:3c:be:a3:6a:
a8:37:b1:e1:7a:6f:07:bd:1c:5c:65:af:b9:e6:7a:
0e:ef:ec:ef:fa:7d:cc:da:cf:37:29:8c:1d:ce:6c:
f4:b7:b5:b9:32:b3:85:9a:0b:b5:20:37:bc:41:ca:
30:70:00:dd:29:4f:4f:32:57:72:76:35:8a:32:e0:
6b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0A:F5:A0:64:23:BF:51:0A:AB:9A:64:15:01:C4:CF:3C:6E:6D:1A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS262287.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.74.0/23
181.41.220.0/24
181.214.65.0/24
181.214.67.0/24
181.214.150.0/23
181.214.249.0/24
181.215.11.0/24
181.215.19.0/24
181.215.80.0/24
181.215.85.0/24
181.215.97.0/24
181.215.99.0/24
181.215.101.0-181.215.106.255
181.215.128.0/24
181.215.150.0/24
181.215.156.0/24
181.215.172.0/24
181.215.195.0/24
191.96.19.0/24
191.96.47.0/24
191.96.73.0/24
191.96.139.0/24
191.96.247.0/24
191.101.152.0/24
191.101.154.0/24
191.101.225.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:6b:7e:43:19:20:2c:1f:ea:38:73:e6:5a:56:81:82:6c:33:
84:0e:cc:64:57:f0:04:5a:bf:2b:e5:e2:75:2f:0e:fe:f6:d6:
cb:a2:0e:a2:75:ba:34:44:a9:a0:9e:a9:11:09:3d:61:ab:9a:
f9:56:d9:6c:69:b2:8b:42:32:72:e9:9e:3b:45:a0:98:14:61:
7a:18:2f:2a:80:b7:5a:77:d6:79:bf:c0:8a:80:e7:ed:7b:3c:
1b:57:3d:ac:18:da:4b:b3:88:b6:c5:b4:e8:c6:8b:33:62:fe:
73:58:80:68:5d:87:24:55:e5:ce:65:f4:34:a0:0f:d9:17:99:
12:37:83:df:c9:bc:03:13:67:cc:e6:67:11:3a:1a:4f:7d:e9:
b3:62:4c:1a:06:78:e7:6a:3e:fb:2a:ff:be:6f:79:a3:82:d0:
b2:2c:e5:96:be:37:d2:bf:bc:4a:a9:eb:ce:4c:06:fa:9d:95:
fe:9d:84:50:eb:4f:38:e2:e7:94:b9:f8:1e:cc:99:66:39:0d:
cb:cf:fd:af:48:c8:67:b3:7f:ce:91:e7:5b:15:14:e2:fa:71:
25:c4:f1:2e:18:df:bc:dc:ef:24:8b:e5:22:c6:00:7a:2f:bd:
1a:ee:91:cd:e3:0c:2e:88:ff:64:62:d9:20:7c:0f:8e:37:e8:
1a:b8:b9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:03:44 2025 by rpki-client