Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS64457.roa
File: AS64457.roa (raw, json)
Hash identifier: 7nya/imnmnZ3Kr3barCVOD7057w6SZgCA8JYtEyNxu4=
Subject key identifier: 45:6F:01:39:8C:4A:FD:3A:73:8D:39:EA:A7:94:47:05:14:70:0F:62
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 18BAB199CC42BD5090F4F8C71522015A78667824
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS64457.roa
Signing time: Fri 25 Sep 2026 12:27:33 +0000
ROA not before: Fri 25 Sep 2026 12:22:33 +0000
ROA not after: Fri 24 Sep 2027 12:27:33 +0000
asID: 64457
IP address blocks: 94.194.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:ba:b1:99:cc:42:bd:50:90:f4:f8:c7:15:22:01:5a:78:66:78:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 25 12:22:33 2026 GMT
Not After : Sep 24 12:27:33 2027 GMT
Subject: CN=456F01398C4AFD3A738D39EAA794470514700F62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:64:11:07:2c:92:99:d0:35:23:1e:ad:57:ca:
54:a9:6c:19:2b:96:3d:b6:f9:20:21:46:9a:86:4b:
46:92:ac:e9:8a:19:81:f3:bf:b3:5d:0f:f4:81:8d:
8e:21:40:db:ce:9e:8e:a6:d0:17:22:8e:97:9f:28:
35:77:03:bb:3a:88:f5:40:9c:96:38:14:ed:5c:5f:
16:76:b2:b2:13:4e:cf:ae:19:a2:0f:6f:d4:49:91:
03:e2:ae:6d:3f:18:90:4f:5e:86:8e:25:8c:21:bc:
eb:1f:2f:4e:85:fa:c6:61:a0:11:33:b4:7c:48:cb:
12:2a:19:d5:57:a5:d5:ab:85:57:b5:33:62:2a:78:
ed:a6:25:eb:86:27:bb:d1:97:15:41:43:22:61:85:
ab:44:a5:e1:db:b1:61:14:c5:da:37:89:12:2f:a8:
0f:b3:fc:90:86:e3:7b:3f:87:3d:8a:ac:55:f9:c2:
e1:aa:62:55:41:63:67:ba:e6:5e:98:5b:52:09:9d:
b2:49:a5:90:00:f6:16:50:cc:40:67:72:d0:2a:0b:
77:65:95:30:9b:22:08:1e:8f:e9:80:12:26:f1:b6:
81:fa:82:5c:3a:33:57:10:48:9f:e7:24:ba:c8:d0:
bf:62:8a:11:dd:d2:17:a7:bb:f4:72:6f:75:68:37:
ad:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6F:01:39:8C:4A:FD:3A:73:8D:39:EA:A7:94:47:05:14:70:0F:62
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS64457.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.194.144.0/22
Signature Algorithm: sha256WithRSAEncryption
91:da:46:19:e3:58:6b:14:b3:49:2d:b5:20:1c:b6:72:9e:68:
0e:f1:ad:d8:d1:54:9d:66:ad:3d:35:54:ec:4b:be:ec:d6:3d:
71:a9:05:4c:32:21:83:da:eb:08:63:88:f0:4e:2a:08:15:1d:
f0:85:8c:03:18:cd:1c:96:ca:ae:49:c5:e2:23:53:03:1f:40:
92:08:fc:3b:ee:0f:48:ef:16:14:46:c1:5e:b0:33:48:9f:20:
2f:4d:1d:cf:1d:98:d0:dd:b5:cb:f0:4f:a4:b9:60:a8:5e:67:
b7:55:23:1e:c0:24:7b:9b:69:40:f7:2d:61:21:02:f8:aa:e5:
61:96:6b:ba:00:03:b2:57:96:8d:b4:87:c4:41:d6:19:8f:ba:
56:c1:11:5d:17:eb:cf:ce:ab:15:7d:0e:56:dd:de:5b:fe:40:
11:e0:c0:67:ab:3a:e0:75:77:24:54:a4:9d:db:e7:5c:52:b3:
22:bc:55:5c:cc:c0:b4:96:57:f8:ae:2a:49:d9:35:82:61:ab:
cd:e1:25:d8:28:cf:24:91:32:63:73:5b:c6:21:ef:f9:4a:2a:
99:6b:e5:65:7c:72:a1:4b:3b:00:53:44:3e:4c:f6:a6:96:7d:
29:a8:e5:6c:48:78:b2:2a:a7:d0:5a:bb:2d:c1:3d:d4:6c:1a:
55:df:b0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:33:29 2026 by rpki-client