Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS5065.roa
File: AS5065.roa (raw, json)
Hash identifier: /KksMFGDGBeSu1fV5+mkts+VqBGNsoNJboM/uSzYvEo=
Subject key identifier: 78:85:F7:94:A2:7C:8C:09:B5:C7:24:9D:4E:26:79:DB:69:E0:3B:86
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1DD868303325D14F13909A8F3A9D7A50295986C4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS5065.roa
Signing time: Mon 28 Sep 2026 04:19:55 +0000
ROA not before: Mon 28 Sep 2026 04:14:55 +0000
ROA not after: Mon 27 Sep 2027 04:19:55 +0000
asID: 5065
IP address blocks: 82.21.64.0/24 maxlen: 24
82.21.154.0/24 maxlen: 24
82.21.162.0/24 maxlen: 24
82.21.170.0/24 maxlen: 24
82.21.180.0/24 maxlen: 24
82.21.192.0/24 maxlen: 24
82.21.194.0/24 maxlen: 24
82.21.198.0/24 maxlen: 24
82.21.207.0/24 maxlen: 24
82.22.199.0/24 maxlen: 24
82.29.7.0/24 maxlen: 24
82.29.20.0/24 maxlen: 24
82.29.37.0/24 maxlen: 24
82.29.46.0/24 maxlen: 24
82.29.55.0/24 maxlen: 24
82.29.68.0/24 maxlen: 24
82.29.77.0/24 maxlen: 24
82.29.90.0/24 maxlen: 24
82.29.91.0/24 maxlen: 24
82.29.99.0/24 maxlen: 24
82.29.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:d8:68:30:33:25:d1:4f:13:90:9a:8f:3a:9d:7a:50:29:59:86:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 28 04:14:55 2026 GMT
Not After : Sep 27 04:19:55 2027 GMT
Subject: CN=7885F794A27C8C09B5C7249D4E2679DB69E03B86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4d:ee:47:b9:19:fe:ec:25:39:9d:35:42:7e:
ed:1c:96:8a:c3:0e:6f:e0:32:03:c3:6e:63:97:00:
ca:cd:05:5b:6c:b1:1b:57:a3:cf:3e:9f:43:71:ee:
4f:aa:b1:44:01:57:ab:ed:5b:46:32:54:68:2f:73:
d9:f1:63:dc:1d:a4:3b:4e:36:5a:b6:e5:a7:56:c4:
4e:c7:3f:8c:7e:88:7d:b4:ed:4f:25:94:c8:81:76:
38:d5:12:e8:2e:3e:ff:ce:80:7d:bf:72:2d:93:61:
04:f8:e9:05:42:15:c7:23:78:a9:a0:9b:1a:75:79:
01:8a:4a:3e:16:e1:c3:5c:46:55:8a:66:01:d7:0f:
d2:bc:d0:5a:fd:cd:f2:95:3f:fc:8b:54:2a:05:8f:
8f:11:88:c6:d6:39:c0:1f:27:14:92:a2:8f:5b:b8:
74:91:e1:f6:1c:3e:11:eb:4a:ac:98:6a:fc:c3:11:
db:f1:8f:96:cf:cb:2a:12:1d:39:68:1c:a1:ec:91:
82:7a:00:04:0f:1d:cc:c4:01:77:2f:9a:dc:5b:36:
25:26:5f:75:77:49:ab:e4:70:72:d0:e0:25:5c:18:
d0:09:3a:b3:97:91:b4:dc:b2:f2:17:c9:d2:8c:05:
a9:7c:15:98:81:6d:c5:6d:96:da:e8:9a:ce:be:d1:
da:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:85:F7:94:A2:7C:8C:09:B5:C7:24:9D:4E:26:79:DB:69:E0:3B:86
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS5065.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.64.0/24
82.21.154.0/24
82.21.162.0/24
82.21.170.0/24
82.21.180.0/24
82.21.192.0/24
82.21.194.0/24
82.21.198.0/24
82.21.207.0/24
82.22.199.0/24
82.29.7.0/24
82.29.20.0/24
82.29.37.0/24
82.29.46.0/24
82.29.55.0/24
82.29.68.0/24
82.29.77.0/24
82.29.90.0/23
82.29.99.0/24
82.29.150.0/24
Signature Algorithm: sha256WithRSAEncryption
65:e5:2f:06:aa:db:f2:48:51:ef:34:0d:85:b6:10:03:07:09:
ee:1b:9a:8b:a6:a0:9f:4c:4d:e4:98:aa:ef:4f:9c:50:a5:1f:
19:08:3e:1e:29:bf:ad:a7:d4:09:25:54:97:ba:13:9d:bc:7d:
94:aa:1c:65:9b:8c:b8:ac:bb:4b:5b:81:ef:f3:15:cf:f7:24:
ef:9d:db:65:91:b6:02:c0:37:25:97:b1:57:3e:4f:66:7c:f4:
6f:ea:1a:1f:5e:0b:01:52:73:42:c5:99:c2:63:df:52:69:4b:
02:a5:36:cc:27:e5:a5:d9:73:b8:15:30:4b:68:83:07:bf:da:
20:4c:01:db:3a:79:10:6f:08:26:af:59:ef:71:d2:62:01:9f:
b3:56:34:c0:22:9a:b6:8e:bb:f2:2e:1b:72:fe:e2:fe:dc:55:
bf:c3:3f:80:7e:cb:e4:3d:7a:1a:43:66:ca:9b:71:de:b9:54:
b4:6a:50:b5:81:c2:c4:4f:9a:d8:12:b9:64:f1:3d:e5:31:31:
56:66:21:bd:a7:4b:4f:14:1c:76:2a:64:e2:af:f4:35:84:fa:
b7:56:e2:34:c4:ff:f8:16:38:0e:7d:9c:bf:86:be:f2:d1:db:
4d:a8:bb:fc:cd:b5:84:4e:8b:8d:5f:e1:31:d7:fe:a8:e7:87:
54:e6:a0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 06:53:41 2026 by rpki-client