Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS64457.roa
File: AS64457.roa (raw, json)
Hash identifier: xp3dX0ih3Ark4E15AHwvIh3lqzLoXYEQCTpRSYo480g=
Subject key identifier: 53:B1:3B:96:E3:E8:06:CF:F0:77:B0:18:39:F7:73:38:9E:ED:BC:4F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 324E7A26041F867E9AF7DF2301915A33753FF950
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS64457.roa
Signing time: Mon 11 May 2026 09:57:08 +0000
ROA not before: Mon 11 May 2026 09:52:08 +0000
ROA not after: Mon 10 May 2027 09:57:08 +0000
asID: 64457
IP address blocks: 82.41.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:4e:7a:26:04:1f:86:7e:9a:f7:df:23:01:91:5a:33:75:3f:f9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 11 09:52:08 2026 GMT
Not After : May 10 09:57:08 2027 GMT
Subject: CN=53B13B96E3E806CFF077B01839F773389EEDBC4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c0:16:34:f1:74:e9:ca:6f:df:3b:bc:99:5c:
a9:09:44:1b:53:10:51:90:b1:7b:19:f4:55:b9:d1:
77:f2:e1:49:d1:f0:dd:eb:7d:3d:f3:56:f4:54:b4:
37:43:67:56:7b:68:1c:dd:9f:01:17:7f:57:4d:ae:
e9:b0:04:18:73:c9:b1:68:5f:55:8e:c8:fe:46:86:
f4:f8:71:32:8b:ba:a7:03:51:72:86:30:85:25:39:
11:02:ce:86:ad:06:8e:9d:c3:02:91:47:7d:9a:aa:
41:b9:98:70:c8:e9:bc:76:92:c7:ea:02:07:4d:91:
e2:12:f1:de:99:c5:c2:7e:f2:10:d7:e1:21:5b:e7:
29:69:b2:fa:22:a4:c3:d5:9b:a1:71:30:2f:5a:7b:
44:0d:f7:49:a8:b2:04:aa:82:72:34:28:f3:66:fa:
7a:d4:95:b1:2a:cd:16:93:cb:21:00:36:0b:9a:d6:
48:3e:b2:49:0d:67:31:38:4e:b9:63:38:73:a2:6f:
bf:b5:c6:ac:96:f7:af:39:5a:ae:bd:3c:c2:60:e4:
24:d9:53:21:53:77:70:7a:83:f2:11:56:a8:c4:02:
e3:cc:9b:0d:a7:2d:3a:4b:27:7d:2a:5d:31:6b:f0:
70:16:29:61:69:4c:f1:dc:09:ee:df:9b:3d:69:fd:
62:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B1:3B:96:E3:E8:06:CF:F0:77:B0:18:39:F7:73:38:9E:ED:BC:4F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS64457.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.3.0/24
Signature Algorithm: sha256WithRSAEncryption
45:db:c1:09:e8:fa:d6:b7:c5:e0:08:9b:ae:23:89:03:8d:41:
49:e5:2d:5f:80:7d:8f:62:cc:4b:25:df:87:11:86:79:25:6b:
90:a7:e4:45:b4:cc:bd:01:8c:a9:28:54:15:0d:53:79:57:a4:
f5:8c:c7:2c:b3:dd:dd:c5:21:12:30:74:f8:7f:f0:a5:22:62:
df:61:6b:13:f6:87:c7:0f:d1:3c:fc:87:ca:60:e3:74:67:2e:
ff:4b:40:1e:ca:5e:40:1f:5f:e5:02:5a:33:93:c9:31:bb:4b:
91:6a:91:10:e5:59:7c:a9:5b:5b:55:73:aa:2a:37:65:a7:82:
66:21:2e:6f:18:97:5d:22:4b:74:52:d1:6e:75:af:1a:2d:93:
7e:f4:00:9e:ac:12:f9:2a:f1:25:aa:f8:ce:96:5e:7f:9a:7d:
03:3f:02:a5:b3:71:9d:01:90:67:e1:9e:11:e1:73:96:99:41:
ce:94:95:8c:5d:aa:e7:cf:47:83:7a:25:a9:b3:60:b5:ba:57:
6f:27:09:4f:e9:e3:37:a5:34:a9:5e:ae:f6:76:f3:27:a5:e7:
d7:94:73:62:ee:0b:11:aa:c1:64:f4:7c:5a:12:6f:86:92:75:
26:3f:cf:72:de:4e:57:e3:72:04:72:f8:99:25:74:8f:21:b1:
d1:72:55:ad
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUMk56JgQfhn6a998jAZFaM3U/+VAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA1MTEwOTUyMDhaFw0yNzA1MTAwOTU3MDhaMDMxMTAvBgNV
BAMTKDUzQjEzQjk2RTNFODA2Q0ZGMDc3QjAxODM5Rjc3MzM4OUVFREJDNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJwBY08XTpym/fO7yZXKkJRBtT
EFGQsXsZ9FW50Xfy4UnR8N3rfT3zVvRUtDdDZ1Z7aBzdnwEXf1dNrumwBBhzybFo
X1WOyP5GhvT4cTKLuqcDUXKGMIUlORECzoatBo6dwwKRR32aqkG5mHDI6bx2ksfq
AgdNkeIS8d6ZxcJ+8hDX4SFb5ylpsvoipMPVm6FxMC9ae0QN90mosgSqgnI0KPNm
+nrUlbEqzRaTyyEANgua1kg+skkNZzE4TrljOHOib7+1xqyW9685Wq69PMJg5CTZ
UyFTd3B6g/IRVqjEAuPMmw2nLTpLJ30qXTFr8HAWKWFpTPHcCe7fmz1p/WK5AgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUU7E7luPoBs/wd7AYOfdzOJ7tvE8wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNjQ0NTcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABSKQMw
DQYJKoZIhvcNAQELBQADggEBAEXbwQno+ta3xeAIm64jiQONQUnlLV+AfY9izEsl
34cRhnkla5Cn5EW0zL0BjKkoVBUNU3lXpPWMxyyz3d3FIRIwdPh/8KUiYt9haxP2
h8cP0Tz8h8pg43RnLv9LQB7KXkAfX+UCWjOTyTG7S5FqkRDlWXypW1tVc6oqN2Wn
gmYhLm8Yl10iS3RS0W51rxotk370AJ6sEvkq8SWq+M6WXn+afQM/AqWzcZ0BkGfh
nhHhc5aZQc6UlYxdqufPR4N6JamzYLW6V28nCU/p4zelNKlervZ28yel59eUc2Lu
CxGqwWT0fFoSb4aSdSY/z3LeTlfjcgRy+JkldI8hsdFyVa0=
-----END CERTIFICATE-----
Generated at Wed May 13 02:38:46 2026 by rpki-client