Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS265919.roa
File: AS265919.roa (raw, json)
Hash identifier: THZdI4/tUOy9tgfVm4YujcWjqlvlGOIKBfAp0PcU654=
Subject key identifier: 1B:14:1D:AC:39:D7:A6:50:17:0C:1D:3F:83:D4:AA:EC:E6:7B:92:22
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 0312B76D91A14EEFE144C3A630EB49CD43FC8E2E
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS265919.roa
Signing time: Sat 21 Mar 2026 03:01:27 +0000
ROA not before: Sat 21 Mar 2026 02:56:27 +0000
ROA not after: Sat 20 Mar 2027 03:01:27 +0000
asID: 265919
IP address blocks: 45.146.81.0/24 maxlen: 24
45.157.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:43:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:12:b7:6d:91:a1:4e:ef:e1:44:c3:a6:30:eb:49:cd:43:fc:8e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Mar 21 02:56:27 2026 GMT
Not After : Mar 20 03:01:27 2027 GMT
Subject: CN=1B141DAC39D7A650170C1D3F83D4AAECE67B9222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:4e:ba:38:9e:ed:b8:39:1f:f7:54:86:1d:
d5:d6:16:a0:b3:8f:44:67:9f:5d:c4:53:99:f5:9e:
b1:c3:6b:8d:98:88:04:d3:99:dd:dc:3f:3c:ef:2b:
12:f9:b1:e6:f1:f5:cb:6d:14:5a:64:0e:b1:36:2a:
76:c9:fd:1b:b5:99:f0:a3:e8:55:86:29:fe:2f:48:
82:e7:f4:d0:b2:da:db:da:58:8c:b8:39:69:35:33:
8c:d7:3d:80:5a:56:c7:28:50:53:7f:91:8d:6c:ec:
a3:27:3b:46:88:c9:89:df:d0:1d:98:ee:53:38:58:
44:72:46:b6:95:41:90:af:af:ad:93:74:e9:09:dc:
82:d6:c6:f7:ff:8b:52:5f:b3:df:05:2e:41:52:08:
88:4c:76:ba:df:3c:0d:62:ae:d9:bb:4e:04:36:5b:
00:68:50:78:89:25:95:57:ee:e1:1b:0c:98:93:c9:
81:90:f1:24:4b:24:a7:5d:2c:7e:2c:b2:a1:b1:d4:
56:fb:b7:29:93:38:ba:0d:44:1f:95:46:6f:52:af:
ad:0e:f1:d9:a1:43:be:f9:81:f1:76:c2:a7:03:27:
11:96:66:2a:5f:dd:a6:50:f1:05:2d:7f:56:e6:85:
5b:1b:f8:ab:db:dd:a4:09:18:38:18:34:f2:f1:85:
83:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:14:1D:AC:39:D7:A6:50:17:0C:1D:3F:83:D4:AA:EC:E6:7B:92:22
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS265919.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.81.0/24
45.157.16.0/24
Signature Algorithm: sha256WithRSAEncryption
83:61:74:8f:02:b7:61:c3:d3:02:89:41:03:4a:9d:2f:5e:08:
99:9e:99:ed:7a:ba:02:18:31:de:79:2b:84:f7:69:d2:41:c2:
40:16:a6:0a:61:2e:9c:e7:39:c6:3a:e0:be:3b:8c:bd:c7:78:
29:a3:a4:0e:f5:25:fd:cb:65:01:06:ac:ff:d7:38:15:dd:97:
30:e9:2b:c9:dd:84:52:cb:4d:7c:cf:14:9c:0e:9b:6c:f1:98:
87:08:db:75:4e:ae:6c:b8:75:dc:66:c5:fe:49:23:4c:8d:64:
03:c4:4a:4d:bd:10:5a:6d:5c:b8:a8:59:a8:78:c4:5e:d8:50:
4b:bd:4f:bf:d6:f5:a3:80:bd:77:ad:93:69:78:40:cc:11:62:
1c:8d:83:6f:d6:cd:39:ef:54:ff:51:84:ff:fe:2b:35:fb:33:
57:8b:56:e0:ac:85:86:09:af:0d:9a:6d:5a:62:00:6e:fd:b0:
bb:27:3d:7a:05:28:69:9c:6f:e4:4f:24:72:f4:6e:09:5e:97:
b1:6f:8e:a4:ea:8c:24:e5:6a:3f:20:32:d0:99:b2:c1:2d:d9:
02:10:15:90:56:fd:c5:b1:32:41:f6:0b:2a:27:80:bb:4c:d3:
6d:0b:fc:cd:1d:a3:6c:f2:a2:e7:7e:a1:6b:53:91:f8:7a:c9:
64:45:7e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:48:16 2026 by rpki-client