Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS64267.roa
File: AS64267.roa (raw, json)
Hash identifier: pD7v/SWZ4v2WB22IYNs+++0hFNFa4grvgrZyfpueDQQ=
Subject key identifier: 3E:14:AA:74:0C:3D:2B:21:5A:F5:BD:DE:34:AA:D8:3D:C8:CC:41:46
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 493A89B5E862DF1E40072D214EB22D8D45751A56
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS64267.roa
Signing time: Mon 15 Jun 2026 00:02:53 +0000
ROA not before: Sun 14 Jun 2026 23:57:53 +0000
ROA not after: Mon 14 Jun 2027 00:02:53 +0000
asID: 64267
IP address blocks: 143.14.188.0/24 maxlen: 24
150.241.174.0/24 maxlen: 24
150.241.234.0/24 maxlen: 24
155.117.81.0/24 maxlen: 24
162.141.48.0/24 maxlen: 24
162.141.116.0/24 maxlen: 24
162.141.138.0/24 maxlen: 24
167.148.136.0/24 maxlen: 24
167.148.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:3a:89:b5:e8:62:df:1e:40:07:2d:21:4e:b2:2d:8d:45:75:1a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 14 23:57:53 2026 GMT
Not After : Jun 14 00:02:53 2027 GMT
Subject: CN=3E14AA740C3D2B215AF5BDDE34AAD83DC8CC4146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:01:47:af:9f:6c:d2:57:f6:a5:dd:1b:c2:d0:
b2:b0:48:b9:90:d0:3e:62:6b:c0:a2:73:2b:51:01:
11:1e:79:53:d3:2f:1a:f5:e6:a8:44:80:b9:58:63:
42:4b:d8:84:c9:4c:26:a1:e5:8b:d4:6f:83:1e:cd:
5d:d7:25:03:bd:9f:e4:e5:f8:32:42:ce:10:d8:6f:
b4:e7:4d:11:c8:ba:6d:24:f1:af:e2:0e:68:4a:1c:
57:19:49:fe:39:09:d1:47:11:5d:35:1b:49:e6:97:
e3:b3:6f:73:4f:f5:11:d2:ed:20:0b:90:cb:55:0b:
46:6e:2f:ef:c8:a1:30:63:0d:2c:c4:db:db:0c:0e:
9a:8e:36:72:66:d9:22:b5:3f:32:c0:8d:1b:89:73:
0f:35:2a:59:76:8e:13:e5:cb:06:b6:29:27:41:21:
d1:af:e0:10:f4:86:b5:7f:67:8d:a0:e3:bd:8d:b6:
d6:56:fe:79:59:0a:b8:dc:a6:bd:0a:02:f6:17:4d:
dc:7c:11:fc:52:17:49:35:a6:8c:8a:d3:4f:30:c6:
55:71:6c:4e:71:bf:8a:75:f3:96:b3:37:14:97:66:
aa:b1:4d:7f:d2:64:78:5a:af:5e:1b:1f:1b:4c:2f:
e0:2b:59:86:f8:28:6f:ac:17:89:26:4a:be:20:d9:
e9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:14:AA:74:0C:3D:2B:21:5A:F5:BD:DE:34:AA:D8:3D:C8:CC:41:46
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS64267.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.188.0/24
150.241.174.0/24
150.241.234.0/24
155.117.81.0/24
162.141.48.0/24
162.141.116.0/24
162.141.138.0/24
167.148.136.0/24
167.148.162.0/24
Signature Algorithm: sha256WithRSAEncryption
89:6e:a1:31:59:5c:db:97:8a:a4:ba:d8:f7:53:8a:eb:24:15:
60:c4:c3:10:81:fe:fd:ef:f0:94:a0:37:e3:42:77:17:89:95:
5e:6e:bc:29:76:ae:d9:f3:86:a7:ac:f3:73:59:8d:f5:b2:e0:
ba:45:58:3c:ff:6c:2e:c9:f3:7d:2d:80:71:b0:9f:e7:10:a1:
dc:0f:a2:e3:34:a2:77:dc:31:40:f0:a6:fe:34:24:55:e6:eb:
64:ea:43:53:0d:4b:d5:d7:55:65:86:d0:06:31:1f:e6:55:24:
94:12:bc:78:fd:a6:83:ae:43:7c:32:13:b6:c1:5c:60:b6:67:
0d:b9:8a:dd:db:cd:bb:28:71:96:64:a8:f6:c8:6c:e8:6e:90:
8c:33:23:a4:17:06:af:e7:0d:6c:ee:7f:87:3d:cf:da:86:cc:
e6:1d:ec:49:3b:6c:a3:89:9b:cb:a9:5f:c1:2a:7f:17:01:44:
1d:d9:e4:af:5c:4d:9b:45:c6:de:17:5e:43:39:4b:d6:09:22:
e3:93:dc:34:00:77:bd:e9:ee:05:65:7f:fb:f7:8e:27:2f:b2:
eb:d3:cc:87:30:fe:3e:c0:f2:94:1f:ea:06:26:de:cd:de:df:
6c:ee:5a:0f:ee:e1:63:e0:4f:97:6f:f9:91:a2:b5:a3:05:bb:
f4:11:ec:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 16:09:52 2026 by rpki-client