Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS65024.roa
File: AS65024.roa (raw, json)
Hash identifier: 3dsdNli0vGKhHJRBaJd+SI6KfmyM5zQG0X9xhEdPLQw=
Subject key identifier: 51:87:21:7B:4E:24:9E:BE:A3:BE:83:86:79:6E:D6:50:7A:0F:E0:4A
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 42A0E1711B1C9FFA8F5FF2F24193988421E0F76B
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS65024.roa
Signing time: Sun 04 Oct 2026 00:52:44 +0000
ROA not before: Sun 04 Oct 2026 00:47:44 +0000
ROA not after: Sun 03 Oct 2027 00:52:44 +0000
asID: 65024
IP address blocks: 84.108.0.0/22 maxlen: 22
84.108.10.0/23 maxlen: 23
84.108.12.0/23 maxlen: 23
84.108.14.0/23 maxlen: 23
84.108.100.0/23 maxlen: 23
84.108.102.0/24 maxlen: 24
84.108.103.0/24 maxlen: 24
84.108.104.0/22 maxlen: 22
84.108.108.0/22 maxlen: 22
84.108.112.0/22 maxlen: 22
84.108.116.0/22 maxlen: 22
84.108.120.0/22 maxlen: 22
84.108.124.0/23 maxlen: 23
84.108.126.0/23 maxlen: 23
84.108.128.0/22 maxlen: 22
84.108.132.0/22 maxlen: 22
84.108.136.0/22 maxlen: 22
84.108.140.0/24 maxlen: 24
84.108.142.0/24 maxlen: 24
84.108.143.0/24 maxlen: 24
84.108.144.0/23 maxlen: 23
84.108.146.0/23 maxlen: 23
84.108.148.0/22 maxlen: 22
84.108.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:a0:e1:71:1b:1c:9f:fa:8f:5f:f2:f2:41:93:98:84:21:e0:f7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:47:44 2026 GMT
Not After : Oct 3 00:52:44 2027 GMT
Subject: CN=5187217B4E249EBEA3BE8386796ED6507A0FE04A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:19:e5:cb:c8:4a:7b:2f:61:6b:d0:24:ae:92:
4b:ba:78:cf:c8:bb:85:e1:ce:f0:a0:bf:a3:e6:c4:
89:ff:5f:f7:c9:dc:8f:39:20:15:98:bf:3d:85:45:
85:89:17:df:ec:e7:28:0c:21:21:5e:ff:19:f6:b4:
45:96:75:2b:df:58:f3:8c:8a:c9:9b:1a:11:d8:3e:
5b:7f:79:a4:05:3e:2e:c1:ab:68:69:1a:74:01:77:
23:b1:20:08:60:05:54:3b:52:07:e0:79:7d:30:02:
0e:cb:68:83:a7:6b:84:54:73:d5:f7:66:25:99:4a:
51:21:f9:f7:b3:83:28:a4:89:0e:4b:e5:57:7f:21:
6f:3c:d6:4f:33:7c:93:29:60:4e:6f:9c:48:25:b7:
24:1b:3e:df:4a:1c:66:a9:f0:bb:ef:27:fa:03:56:
1f:dc:46:a5:64:ba:d2:74:13:76:82:a2:7a:ef:39:
8a:2d:5a:9f:b8:d4:27:82:b1:6b:83:8d:47:83:87:
fc:8f:7d:f2:f0:c2:f6:80:32:90:21:f2:75:60:63:
71:f5:c8:46:21:5e:67:0a:7d:b0:6c:26:10:4a:da:
c0:38:57:5c:ed:d2:c4:3d:a0:67:dc:50:46:5c:83:
95:15:5d:ce:7c:26:76:df:1d:37:57:6e:83:3f:04:
1b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:87:21:7B:4E:24:9E:BE:A3:BE:83:86:79:6E:D6:50:7A:0F:E0:4A
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS65024.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.108.0.0/22
84.108.10.0-84.108.15.255
84.108.100.0-84.108.140.255
84.108.142.0-84.108.155.255
Signature Algorithm: sha256WithRSAEncryption
14:db:5e:fd:0c:5f:8e:ad:da:13:13:b7:cd:0b:a8:3c:bd:09:
bc:69:99:7a:84:57:90:98:ea:12:9f:97:3f:32:fe:20:c9:f3:
ff:a8:56:d2:30:82:59:d7:06:30:45:86:6a:6f:21:89:4b:8d:
79:36:41:3f:b8:9e:ab:7e:17:be:d6:0f:fd:6c:f8:d6:d9:d4:
b1:9d:34:38:d4:7e:07:8e:e7:04:2d:17:5b:b8:97:6b:3a:7d:
08:2d:9a:46:23:0d:60:3d:98:13:15:71:25:8d:b2:24:ce:8c:
b4:ec:7c:8a:af:86:23:b5:fc:ff:ad:84:c8:91:ca:84:4e:ba:
ae:80:fa:fc:02:98:e6:3c:6e:be:51:4e:05:94:0c:a6:83:a9:
b4:ca:e8:72:d9:4f:af:47:b2:cc:75:8c:11:70:1f:46:58:00:
4a:4f:b1:d3:2a:14:2f:fc:6c:90:b4:06:4c:6f:8d:ad:8c:41:
64:83:87:8b:33:c4:32:47:a4:e8:ff:8b:84:6e:e4:2b:0a:81:
09:11:b9:34:6d:f7:f6:37:03:06:42:ab:f1:68:09:b1:60:96:
00:c9:6a:75:7e:e8:f6:c4:8d:fa:19:c8:09:73:ba:c7:56:30:
6f:d1:58:18:09:18:d4:1c:f1:7e:6a:d5:40:d7:69:26:82:7d:
0c:6d:4e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:20 2026 by rpki-client