Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS5065.roa
File: AS5065.roa (raw, json)
Hash identifier: NBo0Dv2JSRMzeDUzySaEXVhK9ZB35BABw7l5rau9L90=
Subject key identifier: 26:AB:F5:3A:3B:E1:F5:E8:00:5D:43:D5:8D:A1:E2:AF:CC:DE:FA:A0
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 65BA419A64746CFC22217B2158116311D646609A
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS5065.roa
Signing time: Sat 28 Jun 2025 00:02:18 +0000
ROA not before: Fri 27 Jun 2025 23:57:18 +0000
ROA not after: Sat 27 Jun 2026 00:02:18 +0000
asID: 5065
IP address blocks: 179.61.157.0/24 maxlen: 24
179.61.203.0/24 maxlen: 24
181.215.212.0/23 maxlen: 24
185.139.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 01:56:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:ba:41:9a:64:74:6c:fc:22:21:7b:21:58:11:63:11:d6:46:60:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 27 23:57:18 2025 GMT
Not After : Jun 27 00:02:18 2026 GMT
Subject: CN=26ABF53A3BE1F5E8005D43D58DA1E2AFCCDEFAA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9d:ef:03:8c:79:cd:0e:cd:58:31:b3:7c:c5:
a3:bd:8c:60:91:e0:b8:a3:50:99:48:dd:1b:93:3a:
4d:b4:b1:ce:35:f5:4f:50:d4:1b:73:40:4e:69:a1:
4c:8f:2d:bb:66:07:11:d8:92:43:42:ba:00:99:dd:
d1:fb:cd:94:7f:0d:83:45:fb:77:52:1c:ce:d0:50:
b5:b5:be:1c:2a:3e:04:ed:50:a5:a0:1d:80:a6:69:
5c:b7:52:ed:92:13:c9:2f:25:c1:fd:21:ee:a5:ab:
4d:aa:d6:fb:01:04:a1:41:66:8a:ff:53:dd:65:1e:
76:5f:9a:01:4c:bb:49:7d:b6:77:bc:4e:47:0a:27:
a7:7a:f2:e3:a7:2a:5f:d2:71:99:28:7d:ea:15:05:
99:f4:b7:8e:c1:7b:84:9e:0a:42:87:af:5f:e3:ab:
e8:40:59:6d:ab:6c:c0:ea:52:41:cf:20:c3:c4:27:
62:c4:91:7c:35:26:f5:3b:b0:8c:ee:37:42:4b:0a:
68:bd:5d:09:ad:ff:e5:73:c6:61:ef:ba:36:b9:6b:
41:e2:41:ce:84:98:a4:7f:0b:4b:fe:cd:0b:cd:b3:
a9:91:06:36:b3:12:4a:df:0b:79:98:38:0e:f1:c0:
ff:c4:d1:a5:6f:92:95:96:85:82:89:75:95:bf:33:
cd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AB:F5:3A:3B:E1:F5:E8:00:5D:43:D5:8D:A1:E2:AF:CC:DE:FA:A0
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS5065.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.157.0/24
179.61.203.0/24
181.215.212.0/23
185.139.238.0/24
Signature Algorithm: sha256WithRSAEncryption
91:07:9c:95:a5:17:5e:5d:b9:04:9e:bb:c8:42:0e:3f:07:f0:
1c:9e:1a:20:c4:19:1e:00:9c:5d:e3:6a:61:13:c7:3d:ce:f6:
27:71:ea:f4:cf:f7:a0:58:42:fd:7a:b0:6e:bf:47:07:63:9f:
84:9c:5f:48:42:e6:9e:ca:b3:62:bb:2f:62:8b:e1:9c:a1:27:
e8:76:2d:fd:e9:1c:3c:ea:93:1f:a1:c6:20:b3:f1:42:40:ac:
a0:72:2f:e7:54:03:fa:a7:74:2d:bd:06:d7:36:9b:90:0f:f9:
85:55:66:4c:ac:14:7b:dc:2b:ec:db:26:3e:bd:73:e1:c3:c7:
0b:75:9b:11:3b:e0:b0:73:00:0a:c0:8b:9d:f2:81:6c:8b:91:
5e:fd:1e:cb:f3:09:cd:bd:58:02:48:d7:f1:e5:11:e5:d3:aa:
37:e9:47:59:68:eb:a4:05:0c:f4:75:d7:e1:5f:43:83:90:0a:
50:c2:29:bb:76:6f:6e:0a:1a:17:4e:a1:d6:62:de:c8:93:53:
bb:31:60:5a:4a:1c:df:d7:d8:c3:a6:56:d9:fa:72:b1:74:6b:
2e:ae:8e:b5:19:39:88:33:78:61:20:47:70:ed:53:f3:26:6a:
1b:20:38:ab:bc:e3:42:2b:0f:22:8e:cf:7c:cb:b5:1a:97:29:
78:ca:fe:f1
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUZbpBmmR0bPwiIXshWBFjEdZGYJowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNTA2MjcyMzU3MThaFw0yNjA2MjcwMDAyMThaMDMxMTAvBgNV
BAMTKDI2QUJGNTNBM0JFMUY1RTgwMDVENDNENThEQTFFMkFGQ0NERUZBQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ne8DjHnNDs1YMbN8xaO9jGCR
4LijUJlI3RuTOk20sc419U9Q1BtzQE5poUyPLbtmBxHYkkNCugCZ3dH7zZR/DYNF
+3dSHM7QULW1vhwqPgTtUKWgHYCmaVy3Uu2SE8kvJcH9Ie6lq02q1vsBBKFBZor/
U91lHnZfmgFMu0l9tne8TkcKJ6d68uOnKl/ScZkofeoVBZn0t47Be4SeCkKHr1/j
q+hAWW2rbMDqUkHPIMPEJ2LEkXw1JvU7sIzuN0JLCmi9XQmt/+VzxmHvuja5a0Hi
Qc6EmKR/C0v+zQvNs6mRBjazEkrfC3mYOA7xwP/E0aVvkpWWhYKJdZW/M81JAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUJqv1Ojvh9egAXUPVjaHir8ze+qAwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNTA2NS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEALM9nQME
ALM9ywMEAbXX1AMEALmL7jANBgkqhkiG9w0BAQsFAAOCAQEAkQeclaUXXl25BJ67
yEIOPwfwHJ4aIMQZHgCcXeNqYRPHPc72J3Hq9M/3oFhC/Xqwbr9HB2OfhJxfSELm
nsqzYrsvYovhnKEn6HYt/ekcPOqTH6HGILPxQkCsoHIv51QD+qd0Lb0G1zabkA/5
hVVmTKwUe9wr7NsmPr1z4cPHC3WbETvgsHMACsCLnfKBbIuRXv0ey/MJzb1YAkjX
8eUR5dOqN+lHWWjrpAUM9HXX4V9Dg5AKUMIpu3ZvbgoaF06h1mLeyJNTuzFgWkoc
39fYw6ZW2fpysXRrLq6OtRk5iDN4YSBHcO1T8yZqGyA4q7zjQisPIo7PfMu1Gpcp
eMr+8Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 14:05:32 2025 by rpki-client