Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS64315.roa
File: AS64315.roa (raw, json)
Hash identifier: Ics5nPfpDEBz0P753+Ds7eUD8oGrjNIkBhEFXfaIN7I=
Subject key identifier: BE:1D:0C:CE:BC:F5:90:3B:0D:34:48:FA:61:3A:6F:D1:B0:F6:1E:0D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5F71EB3D67910928BC78F44F06B88C256099816B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS64315.roa
Signing time: Thu 07 May 2026 11:55:55 +0000
ROA not before: Thu 07 May 2026 11:50:55 +0000
ROA not after: Thu 06 May 2027 11:55:55 +0000
asID: 64315
IP address blocks: 178.83.80.0/24 maxlen: 24
2a13:9500:121::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:71:eb:3d:67:91:09:28:bc:78:f4:4f:06:b8:8c:25:60:99:81:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 7 11:50:55 2026 GMT
Not After : May 6 11:55:55 2027 GMT
Subject: CN=BE1D0CCEBCF5903B0D3448FA613A6FD1B0F61E0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a6:42:d5:3b:93:ad:a0:fd:f1:32:ef:36:dd:
4f:65:9c:f4:11:51:56:9e:fb:cb:5a:f7:e2:15:4a:
39:92:49:94:a5:fa:44:ac:5d:7f:65:3b:8b:08:48:
3b:d7:39:c4:7f:fc:02:2c:94:f4:2f:5d:75:d7:5c:
90:09:24:b2:0f:42:7f:c6:3b:56:b7:03:ad:0a:ca:
d3:dc:44:03:96:6e:ea:1a:e8:83:de:0c:83:8c:3d:
9b:df:59:45:fa:2f:b1:89:0a:5e:9d:8e:62:24:f9:
e8:93:f2:58:f4:52:69:c4:7d:75:67:74:c3:a1:6f:
27:52:8e:b4:81:c5:a1:9c:e9:3c:84:25:38:7e:72:
d9:39:56:78:0e:33:55:f2:df:88:2c:42:d2:f9:61:
20:82:68:20:f3:84:d8:ca:ca:70:84:e4:f6:49:89:
70:32:57:45:3c:bd:7a:fb:09:d7:3f:78:a3:ba:54:
ec:29:34:19:a7:de:0a:d8:c4:71:11:4f:c7:d0:93:
8b:ec:20:3e:2a:41:41:42:b8:92:27:76:ea:54:e1:
ea:97:56:e1:0c:a5:ee:1e:01:1c:0e:26:9d:a1:5c:
1e:ee:4c:f7:3d:11:b9:19:e5:14:74:57:96:9e:e6:
a1:eb:b3:ae:9c:63:6c:24:40:8e:0c:fb:3d:07:95:
c3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1D:0C:CE:BC:F5:90:3B:0D:34:48:FA:61:3A:6F:D1:B0:F6:1E:0D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS64315.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.80.0/24
IPv6:
2a13:9500:121::/48
Signature Algorithm: sha256WithRSAEncryption
68:74:ab:1d:07:e3:91:80:36:1c:e3:a2:f2:91:87:95:56:7f:
fa:38:02:99:f3:85:a0:8c:8a:b1:aa:44:a3:ae:bb:c8:ff:66:
74:42:ad:02:c0:99:f8:97:1c:ca:72:e7:c8:53:e2:aa:65:60:
a5:04:3a:d0:d9:4c:f7:db:58:3a:d4:45:02:96:73:08:53:59:
c7:68:fa:61:fa:16:f8:27:ce:bb:95:05:0c:e4:b6:5c:8b:88:
cd:3b:a6:6c:29:14:d4:32:3f:bb:3e:a7:4b:9f:fc:94:32:1c:
fc:8d:6c:58:f4:dc:2a:db:30:b8:a0:a5:88:dc:bf:37:67:ed:
07:37:d2:b6:ba:05:82:9b:52:f7:9e:60:17:e5:66:a2:77:ca:
f9:c3:7c:df:fc:48:4c:ce:be:09:a6:e0:42:2c:2c:b2:3d:d9:
f5:b4:be:49:17:73:93:1b:fe:91:e0:70:9b:1c:9d:87:3f:6c:
49:e3:ba:c1:37:1e:ec:c3:fe:3f:94:94:3e:c9:8c:ab:1f:c5:
6a:32:38:c7:6e:84:d8:31:86:27:b7:e8:eb:63:27:a8:d6:0e:
c1:db:6b:40:91:10:f4:05:47:72:cc:a1:e8:4e:3a:2b:fe:21:
cd:2e:94:c1:b3:fc:0c:16:ec:86:71:35:1f:49:9f:81:c2:2e:
fe:f6:9a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:41:57 2026 by rpki-client