Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS64457.roa
File: AS64457.roa (raw, json)
Hash identifier: 37NYoToYFLOCJx4yxGv/ykeLE1aMD/Qd3lbQbRAjDW4=
Subject key identifier: CC:4E:12:29:ED:93:55:3E:26:26:0D:02:6E:83:97:D6:9B:9C:57:67
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5BD98FD02A82B3BC75D24419FA2C7792B6A53ED0
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS64457.roa
Signing time: Mon 12 Oct 2026 17:44:18 +0000
ROA not before: Mon 12 Oct 2026 17:39:18 +0000
ROA not after: Mon 11 Oct 2027 17:44:18 +0000
asID: 64457
IP address blocks: 148.135.183.0/24 maxlen: 24
167.148.190.0/24 maxlen: 24
167.148.222.0/24 maxlen: 24
168.222.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:d9:8f:d0:2a:82:b3:bc:75:d2:44:19:fa:2c:77:92:b6:a5:3e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 12 17:39:18 2026 GMT
Not After : Oct 11 17:44:18 2027 GMT
Subject: CN=CC4E1229ED93553E26260D026E8397D69B9C5767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:95:f3:56:2d:5e:d8:94:58:8b:e4:b8:f5:0f:
e8:a8:5f:58:7d:ff:50:a2:13:32:98:02:06:7d:53:
0c:b5:11:a1:1f:66:d7:29:5f:2c:e1:07:ad:a7:30:
74:d6:9f:fa:e6:93:9e:17:f7:22:5e:14:33:b3:fd:
2f:11:9c:40:cc:2a:af:f4:59:bb:57:5a:d3:a0:00:
a6:ba:15:2b:23:ed:20:ec:e3:94:cd:55:b8:0f:bf:
a8:de:a6:d2:7d:6a:cc:80:4b:33:c9:ee:2e:df:71:
06:f4:b8:f0:7c:f0:77:88:89:65:5f:6a:d6:1f:9c:
83:c4:94:2d:18:e4:6f:70:10:01:45:1f:fb:77:50:
1e:58:a5:b1:f1:e3:fc:62:25:73:c5:ed:57:ae:be:
0e:33:86:bc:4a:80:c8:36:09:57:38:88:75:73:98:
b6:9b:2e:b8:01:42:75:04:7a:d2:f5:1a:ac:16:0a:
46:46:b6:30:15:17:3a:97:d7:10:68:0b:8f:eb:75:
12:df:05:4d:e3:c7:d3:6b:a4:36:16:9c:c3:07:90:
37:8b:ac:56:77:a0:c5:d0:06:39:c8:f3:11:2f:35:
b6:07:a8:28:77:64:18:c3:4f:e3:25:b6:f6:99:1e:
1c:1b:63:5f:5f:b7:ad:cf:0a:e8:c7:7c:2e:43:0c:
b5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4E:12:29:ED:93:55:3E:26:26:0D:02:6E:83:97:D6:9B:9C:57:67
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS64457.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.183.0/24
167.148.190.0/24
167.148.222.0/24
168.222.74.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:1f:67:9b:ab:a4:a1:c9:05:46:42:22:9c:aa:82:fd:3e:3e:
9d:32:4d:95:d5:d0:9f:10:1b:b8:94:0f:d2:fd:ef:2f:e6:a9:
7e:f4:2d:74:ea:2e:29:61:46:1e:38:42:03:7a:a0:65:56:94:
d8:59:e8:81:7b:91:8e:12:bb:21:b5:2d:ea:4d:2b:4a:60:45:
8c:da:45:fb:80:ed:b2:12:10:2c:b0:2f:03:3b:59:5b:7e:18:
3e:8d:cb:b6:f5:a9:7c:ec:bb:85:b6:b0:5e:bb:6b:bb:3e:14:
c5:32:37:f0:6b:1c:d4:cb:75:85:37:bb:ba:4c:78:d2:ff:8a:
0b:34:78:45:f8:ce:2b:64:2c:8c:d3:1a:94:99:5f:94:d1:7b:
55:11:82:38:aa:38:d8:6f:ce:b7:b0:43:16:ac:bc:1d:7d:75:
ca:c8:e1:00:b0:0b:eb:7b:11:a9:c1:38:b9:1c:82:9b:ce:9a:
1e:2e:d6:1d:46:92:08:08:69:f4:d1:f1:1e:9f:5d:42:18:d8:
a1:39:c0:f1:1a:50:58:79:d9:43:6c:e8:d8:7d:05:17:d6:13:
41:d2:70:44:e2:16:e5:e0:a8:fd:28:ee:f8:e5:99:74:f5:81:
96:fe:28:d1:94:4a:a5:5b:d3:6e:84:86:7d:2d:ab:06:75:ea:
ab:79:cc:fd
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUW9mP0CqCs7x10kQZ+ix3kralPtAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjEwMTIxNzM5MThaFw0yNzEwMTExNzQ0MThaMDMxMTAvBgNV
BAMTKENDNEUxMjI5RUQ5MzU1M0UyNjI2MEQwMjZFODM5N0Q2OUI5QzU3NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPlfNWLV7YlFiL5Lj1D+ioX1h9
/1CiEzKYAgZ9Uwy1EaEfZtcpXyzhB62nMHTWn/rmk54X9yJeFDOz/S8RnEDMKq/0
WbtXWtOgAKa6FSsj7SDs45TNVbgPv6jeptJ9asyASzPJ7i7fcQb0uPB88HeIiWVf
atYfnIPElC0Y5G9wEAFFH/t3UB5YpbHx4/xiJXPF7Veuvg4zhrxKgMg2CVc4iHVz
mLabLrgBQnUEetL1GqwWCkZGtjAVFzqX1xBoC4/rdRLfBU3jx9NrpDYWnMMHkDeL
rFZ3oMXQBjnI8xEvNbYHqCh3ZBjDT+MltvaZHhwbY19ft63PCujHfC5DDLVLAgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQUzE4SKe2TVT4mJg0CboOX1pucV2cwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNjQ0NTcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBACUh7cD
BACnlL4DBACnlN4DBACo3kowDQYJKoZIhvcNAQELBQADggEBALUfZ5urpKHJBUZC
Ipyqgv0+Pp0yTZXV0J8QG7iUD9L97y/mqX70LXTqLilhRh44QgN6oGVWlNhZ6IF7
kY4SuyG1LepNK0pgRYzaRfuA7bISECywLwM7WVt+GD6Ny7b1qXzsu4W2sF67a7s+
FMUyN/BrHNTLdYU3u7pMeNL/igs0eEX4zitkLIzTGpSZX5TRe1URgjiqONhvzrew
QxasvB19dcrI4QCwC+t7EanBOLkcgpvOmh4u1h1GkggIafTR8R6fXUIY2KE5wPEa
UFh52UNs6Nh9BRfWE0HScETiFuXgqP0o7vjlmXT1gZb+KNGUSqVb026Ehn0tqwZ1
6qt5zP0=
-----END CERTIFICATE-----
Generated at Wed Oct 21 10:28:55 2026 by rpki-client