Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS265867.roa
File: AS265867.roa (raw, json)
Hash identifier: oCpMZNdA7AremyUHwWgi98uRWV5lktC74T50i4g3bmA=
Subject key identifier: 7F:63:8A:C9:6C:2A:5D:71:29:58:06:E1:63:38:4B:C8:CB:3C:EA:39
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 5579F58FC28EF0B92FC8CBAC67002ACD3EE9806A
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS265867.roa
Signing time: Wed 24 Sep 2025 18:55:07 +0000
ROA not before: Wed 24 Sep 2025 18:50:07 +0000
ROA not after: Wed 23 Sep 2026 18:55:07 +0000
asID: 265867
IP address blocks: 179.61.230.0/23 maxlen: 24
179.61.234.0/23 maxlen: 24
181.214.137.0/24 maxlen: 24
181.214.158.0/23 maxlen: 24
181.214.192.0/23 maxlen: 23
181.214.192.0/23 maxlen: 24
191.96.200.0/24 maxlen: 24
191.96.216.0/23 maxlen: 24
191.96.218.0/23 maxlen: 24
191.101.40.0/24 maxlen: 24
191.101.96.0/24 maxlen: 24
191.101.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:79:f5:8f:c2:8e:f0:b9:2f:c8:cb:ac:67:00:2a:cd:3e:e9:80:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 24 18:50:07 2025 GMT
Not After : Sep 23 18:55:07 2026 GMT
Subject: CN=7F638AC96C2A5D71295806E163384BC8CB3CEA39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cb:8f:67:fb:ae:04:b4:fc:46:61:a1:df:37:
24:e8:30:3c:84:0b:fc:90:99:e0:44:bb:06:a5:77:
73:94:b1:37:20:4f:f8:d8:74:4f:1e:0e:7d:31:f9:
94:cb:27:ad:bd:44:3a:1a:66:c4:6f:f3:3f:99:81:
86:55:4b:a6:e6:77:95:e9:2f:94:0f:49:c2:10:9b:
16:38:9a:d7:3b:c3:90:d7:9b:b7:e3:31:4f:eb:8c:
b8:ca:7f:85:d8:bf:81:b8:84:e8:5d:ac:1f:68:50:
12:37:21:59:02:9b:65:4a:d9:25:75:23:f1:21:da:
51:81:4f:53:77:f1:90:0e:ac:f1:da:77:90:18:24:
3c:f1:82:5c:47:ae:ef:cd:12:06:76:85:1c:88:0b:
de:f6:b5:b6:c9:19:24:a1:55:0e:23:f6:06:fe:71:
92:b8:7f:a2:53:92:4a:1a:ac:25:85:75:83:64:b5:
d8:24:54:89:85:b7:e9:49:e2:e6:b1:a3:3d:10:33:
14:df:01:25:c0:89:61:47:13:27:60:5f:aa:ff:65:
2c:c2:f9:5e:78:54:48:e7:7d:77:c2:c7:52:31:67:
34:52:35:89:8b:5e:a1:e3:ac:d3:ca:33:3c:63:ad:
ea:86:da:13:a3:a8:c9:10:46:9d:11:9d:f4:f6:93:
4a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:63:8A:C9:6C:2A:5D:71:29:58:06:E1:63:38:4B:C8:CB:3C:EA:39
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS265867.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.230.0/23
179.61.234.0/23
181.214.137.0/24
181.214.158.0/23
181.214.192.0/23
191.96.200.0/24
191.96.216.0/22
191.101.40.0/24
191.101.96.0/24
191.101.153.0/24
Signature Algorithm: sha256WithRSAEncryption
26:04:20:8f:57:62:77:f0:4d:84:c4:dd:1c:5a:1c:7e:ec:fb:
b0:94:3e:9c:f2:77:63:9b:b5:7a:59:ad:4a:99:8c:56:de:a2:
40:29:96:15:fa:46:c3:b6:cd:9b:af:88:c4:e8:a0:82:52:67:
51:4c:f4:06:a8:84:f3:93:60:79:74:81:2a:b5:6b:ff:9b:ff:
19:f4:48:54:e4:98:dc:79:6c:e1:46:56:2f:6b:db:12:19:51:
9c:25:a7:39:13:38:4e:e3:a5:58:88:de:ef:77:e3:e9:1b:85:
d0:2f:67:db:90:3f:8b:c1:af:0e:f9:1c:99:1f:86:01:4e:4b:
66:3a:4d:05:a2:fe:3f:54:43:67:b3:56:73:26:f8:4b:d6:32:
87:44:e6:f0:6e:30:fd:85:6d:9c:c3:df:6a:8a:fd:90:25:8a:
e4:7e:9d:4f:09:3c:af:c2:d0:ee:3a:a9:97:60:41:ab:0e:ff:
16:a1:03:c0:55:8e:00:09:12:6b:03:5b:ac:21:48:94:91:49:
69:8a:a6:23:a2:44:30:f5:be:07:f7:b7:84:01:e0:c3:59:df:
11:4a:9e:9b:7a:a4:67:49:c5:65:c4:55:0c:27:78:fa:f5:71:
cf:3b:8a:00:aa:36:b6:34:a4:20:72:43:d6:a7:f6:a5:22:30:
3f:6d:f1:f9
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUVXn1j8KO8LkvyMusZwAqzT7pgGowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNTA5MjQxODUwMDdaFw0yNjA5MjMxODU1MDdaMDMxMTAvBgNV
BAMTKDdGNjM4QUM5NkMyQTVENzEyOTU4MDZFMTYzMzg0QkM4Q0IzQ0VBMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQy49n+64EtPxGYaHfNyToMDyE
C/yQmeBEuwald3OUsTcgT/jYdE8eDn0x+ZTLJ629RDoaZsRv8z+ZgYZVS6bmd5Xp
L5QPScIQmxY4mtc7w5DXm7fjMU/rjLjKf4XYv4G4hOhdrB9oUBI3IVkCm2VK2SV1
I/Eh2lGBT1N38ZAOrPHad5AYJDzxglxHru/NEgZ2hRyIC972tbbJGSShVQ4j9gb+
cZK4f6JTkkoarCWFdYNktdgkVImFt+lJ4uaxoz0QMxTfASXAiWFHEydgX6r/ZSzC
+V54VEjnfXfCx1IxZzRSNYmLXqHjrNPKMzxjreqG2hOjqMkQRp0RnfT2k0oDAgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQUf2OKyWwqXXEpWAbhYzhLyMs86jkwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjY1ODY3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQBsz3m
AwQBsz3qAwQAtdaJAwQBtdaeAwQBtdbAAwQAv2DIAwQCv2DYAwQAv2UoAwQAv2Vg
AwQAv2WZMA0GCSqGSIb3DQEBCwUAA4IBAQAmBCCPV2J38E2ExN0cWhx+7PuwlD6c
8ndjm7V6Wa1KmYxW3qJAKZYV+kbDts2br4jE6KCCUmdRTPQGqITzk2B5dIEqtWv/
m/8Z9EhU5JjceWzhRlYva9sSGVGcJac5EzhO46VYiN7vd+PpG4XQL2fbkD+Lwa8O
+RyZH4YBTktmOk0Fov4/VENns1ZzJvhL1jKHRObwbjD9hW2cw99qiv2QJYrkfp1P
CTyvwtDuOqmXYEGrDv8WoQPAVY4ACRJrA1usIUiUkUlpiqYjokQw9b4H97eEAeDD
Wd8RSp6beqRnScVlxFUMJ3j69XHPO4oAqja2NKQgckPWp/alIjA/bfH5
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:07:06 2025 by rpki-client