Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS264617.roa
File: AS264617.roa (raw, json)
Hash identifier: CFaU4anoO7KnBrRv/9iLYtAggVEBbMI6YvnOeB/VC2E=
Subject key identifier: 0F:4E:E7:7F:5E:B1:54:27:62:29:D5:D2:E1:39:E9:B9:3D:03:F3:95
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 4145F32C673ABC1BFAE60400C46D4077E56DC6C3
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS264617.roa
Signing time: Mon 08 Sep 2025 10:55:00 +0000
ROA not before: Mon 08 Sep 2025 10:50:00 +0000
ROA not after: Mon 07 Sep 2026 10:55:00 +0000
asID: 264617
IP address blocks: 191.96.170.0/24 maxlen: 24
191.101.94.0/24 maxlen: 24
191.101.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:45:f3:2c:67:3a:bc:1b:fa:e6:04:00:c4:6d:40:77:e5:6d:c6:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 8 10:50:00 2025 GMT
Not After : Sep 7 10:55:00 2026 GMT
Subject: CN=0F4EE77F5EB154276229D5D2E139E9B93D03F395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:40:d5:2f:32:e5:5e:64:03:8e:00:a0:0c:a0:
85:ab:c6:06:88:3b:ec:79:fd:b8:ce:43:ac:a9:53:
c5:0e:70:8f:b5:45:3b:56:a3:ef:6c:9d:5b:a2:a2:
1e:d7:21:de:a5:cc:0b:bf:15:c9:d7:07:38:23:05:
a3:82:5b:94:2c:db:3e:69:ac:e0:88:05:0c:73:b7:
04:2f:df:09:35:6b:91:53:26:cc:e1:2e:13:0a:ae:
d6:8a:72:50:4f:c8:58:59:bf:0d:a9:e5:d6:1a:e5:
b5:bc:9d:8e:91:0c:1c:19:37:df:e7:45:5c:91:7d:
a1:26:2e:40:04:8c:51:74:f8:40:75:d5:33:59:a1:
25:19:59:b7:60:d2:fb:60:9b:3b:54:86:cb:c0:bf:
1a:66:67:83:69:af:3a:ca:4e:92:9f:c9:a3:7c:22:
06:b6:d9:bf:99:42:02:07:22:4a:24:12:37:16:45:
87:65:d8:cf:d8:58:e6:2d:95:d7:b7:75:a6:fe:4e:
f1:e4:97:94:d8:9a:be:3a:31:8b:5a:6f:82:45:1c:
71:c3:1a:cb:45:0b:58:04:58:13:09:5c:bc:75:fc:
94:9a:b5:ba:87:66:0a:a9:ab:1d:1e:5f:76:81:2f:
99:f9:71:81:11:c7:ae:60:4d:39:f5:56:1f:65:b7:
5a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4E:E7:7F:5E:B1:54:27:62:29:D5:D2:E1:39:E9:B9:3D:03:F3:95
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS264617.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.170.0/24
191.101.94.0/24
191.101.121.0/24
Signature Algorithm: sha256WithRSAEncryption
58:14:ac:db:6f:54:4e:02:80:a3:47:75:c6:7a:87:31:77:f7:
ae:8a:c1:05:8f:84:c7:75:ee:27:e8:76:6e:6f:27:e4:a5:ef:
72:f9:2d:fe:98:90:f0:9d:38:0f:80:4a:3d:d9:fb:50:bb:21:
c4:ee:ac:5f:18:27:dd:d5:1f:83:b6:10:ed:f1:df:90:4a:69:
3d:70:52:f2:77:8d:35:f8:c3:6d:f4:f9:38:f0:b4:a7:6e:54:
c8:70:52:3b:a4:1f:12:88:de:86:7d:13:75:9d:9d:dd:85:37:
6e:67:53:80:a4:2e:10:5b:9a:a0:53:f6:e9:e9:de:10:09:f7:
8a:6a:4b:7f:38:b4:17:e0:09:3c:ab:f9:f1:05:57:94:fe:35:
7e:0e:12:42:a9:b4:80:bd:dc:6d:6a:72:72:10:ba:e4:8f:67:
c3:43:c7:03:ee:7c:ca:c4:3c:01:45:ea:fd:71:50:0c:8f:4c:
27:dd:a9:42:b7:df:4a:ef:6f:38:e1:f1:14:d7:b7:97:c1:6e:
54:e9:2f:9c:7f:a8:93:c7:9d:f4:70:1e:8a:bd:fa:43:da:6f:
84:df:57:b9:58:e4:a2:e7:25:1c:0c:7a:3d:65:65:92:8e:64:
57:53:d9:80:4f:ac:93:9a:a0:64:fd:47:78:46:8d:f1:18:d0:
4f:d5:6d:81
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUQUXzLGc6vBv65gQAxG1Ad+VtxsMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNTA5MDgxMDUwMDBaFw0yNjA5MDcxMDU1MDBaMDMxMTAvBgNV
BAMTKDBGNEVFNzdGNUVCMTU0Mjc2MjI5RDVEMkUxMzlFOUI5M0QwM0YzOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBQNUvMuVeZAOOAKAMoIWrxgaI
O+x5/bjOQ6ypU8UOcI+1RTtWo+9snVuioh7XId6lzAu/FcnXBzgjBaOCW5Qs2z5p
rOCIBQxztwQv3wk1a5FTJszhLhMKrtaKclBPyFhZvw2p5dYa5bW8nY6RDBwZN9/n
RVyRfaEmLkAEjFF0+EB11TNZoSUZWbdg0vtgmztUhsvAvxpmZ4NprzrKTpKfyaN8
Iga22b+ZQgIHIkokEjcWRYdl2M/YWOYtlde3dab+TvHkl5TYmr46MYtab4JFHHHD
GstFC1gEWBMJXLx1/JSatbqHZgqpqx0eX3aBL5n5cYERx65gTTn1Vh9lt1p7AgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUD07nf16xVCdiKdXS4TnpuT0D85UwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjY0NjE3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAv2Cq
AwQAv2VeAwQAv2V5MA0GCSqGSIb3DQEBCwUAA4IBAQBYFKzbb1ROAoCjR3XGeocx
d/euisEFj4THde4n6HZubyfkpe9y+S3+mJDwnTgPgEo92ftQuyHE7qxfGCfd1R+D
thDt8d+QSmk9cFLyd401+MNt9Pk48LSnblTIcFI7pB8SiN6GfRN1nZ3dhTduZ1OA
pC4QW5qgU/bp6d4QCfeKakt/OLQX4Ak8q/nxBVeU/jV+DhJCqbSAvdxtanJyELrk
j2fDQ8cD7nzKxDwBRer9cVAMj0wn3alCt99K72844fEU17eXwW5U6S+cf6iTx530
cB6KvfpD2m+E31e5WOSi5yUcDHo9ZWWSjmRXU9mAT6yTmqBk/Ud4Ro3xGNBP1W2B
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:11:10 2025 by rpki-client