Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS64267.roa
File: AS64267.roa (raw, json)
Hash identifier: cO5dtJsPEY9r2Y5ign5bqPcs//TG51jDBupd1SWHfXY=
Subject key identifier: BC:4B:D7:17:E2:99:A2:46:A3:EB:A5:94:D2:71:09:5C:86:3A:6E:09
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 013E09BDEBDEB80244785A0A9C7C47230604AA41
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS64267.roa
Signing time: Fri 10 Oct 2025 12:27:00 +0000
ROA not before: Fri 10 Oct 2025 12:22:00 +0000
ROA not after: Fri 09 Oct 2026 12:27:00 +0000
asID: 64267
IP address blocks: 91.124.36.0/24 maxlen: 24
92.112.5.0/24 maxlen: 24
92.112.141.0/24 maxlen: 24
92.113.11.0/24 maxlen: 24
92.113.198.0/24 maxlen: 24
92.113.215.0/24 maxlen: 24
95.135.183.0/24 maxlen: 24
178.92.246.0/24 maxlen: 24
178.93.30.0/24 maxlen: 24
178.94.149.0/24 maxlen: 24
178.95.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:3e:09:bd:eb:de:b8:02:44:78:5a:0a:9c:7c:47:23:06:04:aa:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 10 12:22:00 2025 GMT
Not After : Oct 9 12:27:00 2026 GMT
Subject: CN=BC4BD717E299A246A3EBA594D271095C863A6E09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:de:57:11:ce:ea:a3:8d:d1:a7:c9:00:ab:24:
04:f9:1d:b4:6c:d5:f3:2a:2b:dc:b4:d1:04:d6:c6:
96:a0:a5:d9:49:85:80:9e:54:e2:44:a1:f9:19:2e:
29:9a:27:f2:31:35:2e:79:40:7b:bf:c9:90:0c:90:
4d:8f:2a:7a:df:da:23:5c:b5:3b:a8:17:b9:1c:4f:
60:c6:8a:c3:b0:3e:6b:58:e2:f2:86:73:ee:76:2a:
94:45:52:66:bb:58:59:01:70:99:af:fc:42:d2:21:
7b:e3:5a:2f:2e:d4:5a:a0:2d:34:bf:50:7a:f9:cb:
ae:8f:56:2c:3e:7c:de:13:29:da:f3:52:e6:4e:cb:
37:a4:99:86:4e:d2:8a:80:f4:af:ff:32:4c:b4:66:
6a:69:a9:0a:d5:85:5d:d7:8d:05:64:4c:37:66:fb:
8c:24:de:6a:3e:9b:bb:20:83:e3:38:65:f4:2a:7e:
a9:95:aa:52:76:6c:5e:33:0a:a4:a9:0a:d4:20:44:
a1:af:62:d7:60:6e:f9:6f:df:ed:15:0a:59:97:e6:
99:94:1c:9d:13:09:6e:1a:19:f1:7f:5a:8c:70:39:
86:42:42:6a:fb:8e:53:26:fe:07:46:c5:12:be:0e:
e0:cd:2f:44:52:5c:6a:8c:3f:3a:eb:53:60:2f:85:
82:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4B:D7:17:E2:99:A2:46:A3:EB:A5:94:D2:71:09:5C:86:3A:6E:09
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS64267.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.36.0/24
92.112.5.0/24
92.112.141.0/24
92.113.11.0/24
92.113.198.0/24
92.113.215.0/24
95.135.183.0/24
178.92.246.0/24
178.93.30.0/24
178.94.149.0/24
178.95.225.0/24
Signature Algorithm: sha256WithRSAEncryption
61:43:38:16:a3:a6:e5:61:cc:46:c6:6e:ce:68:56:d9:e3:7d:
c7:d5:0a:fa:8d:f3:30:b1:08:61:02:a8:28:7c:47:8a:da:5a:
27:21:df:17:e6:6c:62:0a:b6:68:dc:9c:21:e4:ba:72:9e:0c:
2d:5f:e5:d6:66:b4:d9:d5:6a:7b:41:80:c6:62:95:7b:e5:2f:
e8:43:7c:46:1c:02:99:50:b1:9c:81:e4:50:07:81:e7:a4:1b:
d6:3b:1e:e5:3d:20:ce:a6:df:76:a1:67:24:c1:eb:34:ea:9e:
66:92:6c:7c:bf:b4:b3:46:4e:8b:3d:83:d6:1a:8f:fd:56:9c:
9b:4a:af:5f:9c:07:24:45:38:b7:3f:c0:44:89:0f:fa:c2:21:
7d:e3:4f:69:72:20:26:9a:e4:4b:10:b8:ed:7c:3d:fc:52:6e:
28:d2:3f:86:5e:eb:8f:77:ee:8e:a8:b3:2e:59:50:74:f4:b0:
a1:56:3e:0c:d3:6b:96:91:b1:95:6e:13:ad:52:45:7c:c8:99:
85:b6:45:9f:27:48:64:c2:e7:36:94:e1:c7:af:af:90:65:e8:
37:39:18:ae:18:1d:f5:73:d3:a9:39:0e:1c:34:de:d9:13:cd:
98:78:64:c7:84:b4:1e:d4:38:e6:6d:62:c9:1b:e5:3d:4c:37:
99:63:bf:ed
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:31:12 2025 by rpki-client