Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS5065.roa
File: AS5065.roa (raw, json)
Hash identifier: g6cMbprCRPAjCHG4J20eB4WSCIBENCZvciexaiNx4ao=
Subject key identifier: 69:DF:E7:88:5E:C5:75:A1:F5:68:B9:AE:99:E1:43:58:ED:2C:71:65
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2300AA18E8955BBDFCFCB08490D7E628B2D2922E
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS5065.roa
Signing time: Fri 13 Nov 2026 08:49:41 +0000
ROA not before: Fri 13 Nov 2026 08:44:41 +0000
ROA not after: Fri 12 Nov 2027 08:49:41 +0000
asID: 5065
IP address blocks: 179.61.157.0/24 maxlen: 24
181.215.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:00:aa:18:e8:95:5b:bd:fc:fc:b0:84:90:d7:e6:28:b2:d2:92:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 13 08:44:41 2026 GMT
Not After : Nov 12 08:49:41 2027 GMT
Subject: CN=69DFE7885EC575A1F568B9AE99E14358ED2C7165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bf:43:67:59:bb:5d:cd:8f:b2:5a:82:5d:9b:
50:6a:6f:37:16:50:1e:af:f8:30:d4:4a:14:f4:9d:
fc:14:09:47:a0:ab:bb:fb:41:4b:98:51:71:71:18:
e0:1b:02:d8:a4:05:7a:9a:5f:bf:18:18:b4:1c:76:
38:02:61:9b:f7:cb:f2:d5:c6:ac:c4:df:a9:b6:20:
7c:31:05:3f:07:23:01:74:4d:d6:c6:bf:68:4a:24:
53:30:4f:9c:72:16:fd:81:3e:32:3a:d5:05:19:56:
a4:75:76:e8:73:77:76:f8:5e:9f:f5:61:8e:c7:cd:
ad:72:cc:f6:bb:a7:e1:06:99:00:32:0c:23:4d:ab:
a0:44:75:1f:76:2b:38:ed:7b:c8:b0:d1:5f:e5:b6:
f7:80:a0:72:76:13:55:a6:44:2f:f3:03:24:4f:8b:
c5:d8:4c:ea:c2:ec:2d:be:55:6d:4d:4c:15:12:4c:
76:24:a8:5e:4c:52:0a:c2:c6:48:0b:e3:f4:64:4f:
5f:ff:33:2b:37:b1:94:d0:2a:00:2f:f1:13:6a:f1:
4b:75:13:71:89:d8:91:19:cd:1a:db:cd:cb:dc:a7:
e7:fc:9c:cd:4e:87:4c:db:c3:5e:e6:27:27:a3:4a:
c3:5c:2b:b6:e5:f6:08:cb:b7:0c:e2:98:58:c2:0d:
f6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DF:E7:88:5E:C5:75:A1:F5:68:B9:AE:99:E1:43:58:ED:2C:71:65
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS5065.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.157.0/24
181.215.212.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:5f:de:8d:6e:60:33:da:96:04:94:23:e3:c1:9d:bd:04:0a:
fd:15:1b:9f:d9:f9:be:4e:4c:dc:e2:cb:e2:81:7b:41:18:06:
64:99:73:96:01:8c:a4:32:a0:3d:e1:8d:4a:69:84:9b:f2:43:
3f:a4:83:88:ad:16:10:7d:67:ef:e7:d5:40:89:a5:d1:05:bb:
9d:62:52:a9:ef:38:51:86:46:fb:58:f2:2c:8f:87:0b:23:7f:
84:79:59:00:6d:62:7c:e0:4a:8e:8a:e5:ea:c5:d6:fc:e9:85:
de:ca:99:59:a6:21:14:d4:4b:79:02:a8:a4:87:98:cb:89:b5:
85:c2:ee:17:d4:ef:13:bc:a9:ee:bf:e3:6c:64:8f:16:0d:7a:
50:23:d7:dc:49:07:4e:a6:c9:4d:7b:fc:71:6d:e9:e7:6a:02:
e5:30:74:17:5a:d9:35:62:37:45:80:76:24:06:1d:c3:5e:da:
32:db:76:cd:d7:a2:2e:96:ed:26:2a:f5:d8:22:95:7c:1a:dc:
5b:5c:f3:15:13:92:c3:89:b6:c6:09:43:cd:a8:e9:1a:24:2c:
a1:b1:e9:90:3e:9f:c8:06:dc:43:d2:d3:37:ab:ca:62:e4:e7:
6f:0a:5d:12:8d:a9:4c:67:36:71:ec:1d:fb:02:cb:53:dc:35:
d0:26:97:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:44:01 2026 by rpki-client