Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS262287.roa
File: AS262287.roa (raw, json)
Hash identifier: 9dXvj4gOwnQbgiMagjxOruYCvFDzNEOGXMq+OEpBOdw=
Subject key identifier: 06:6E:37:FC:37:CF:1E:9C:59:20:F3:BF:7A:6B:7E:6A:17:70:DE:D9
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 0D0116BCB17028A586A0C5C1FE47341E82906A59
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS262287.roa
Signing time: Fri 16 May 2025 10:33:12 +0000
ROA not before: Fri 16 May 2025 10:28:12 +0000
ROA not after: Fri 15 May 2026 10:33:12 +0000
asID: 262287
IP address blocks: 85.208.74.0/24 maxlen: 24
85.208.75.0/24 maxlen: 24
181.41.220.0/24 maxlen: 24
181.214.150.0/24 maxlen: 24
181.214.151.0/24 maxlen: 24
181.214.249.0/24 maxlen: 24
181.215.11.0/24 maxlen: 24
181.215.97.0/24 maxlen: 24
181.215.99.0/24 maxlen: 24
181.215.101.0/24 maxlen: 24
181.215.102.0/24 maxlen: 24
181.215.104.0/24 maxlen: 24
181.215.128.0/24 maxlen: 24
181.215.172.0/24 maxlen: 24
181.215.195.0/24 maxlen: 24
191.96.19.0/24 maxlen: 24
191.96.73.0/24 maxlen: 24
191.96.139.0/24 maxlen: 24
191.96.247.0/24 maxlen: 24
191.101.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:01:16:bc:b1:70:28:a5:86:a0:c5:c1:fe:47:34:1e:82:90:6a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: May 16 10:28:12 2025 GMT
Not After : May 15 10:33:12 2026 GMT
Subject: CN=066E37FC37CF1E9C5920F3BF7A6B7E6A1770DED9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:48:83:f5:f6:50:97:60:01:6a:c1:b9:61:7e:
cb:e3:95:6e:f9:b1:7b:d2:0b:e2:1b:0d:b1:08:43:
06:ae:3c:4c:49:ca:c9:ca:48:85:a1:d6:d7:5d:dd:
d6:70:ee:7a:52:5d:be:b9:7b:92:c4:14:1b:65:dd:
52:17:58:fa:37:d0:d8:e9:ba:f7:e2:8b:59:5e:2c:
e3:7b:45:7f:89:49:e6:4a:37:71:fe:43:37:69:ee:
08:47:a7:a3:83:12:f8:79:ba:54:9c:44:d0:43:ab:
27:aa:65:02:97:9e:a0:9d:32:c2:a3:82:88:02:ad:
2a:21:5c:c0:45:10:14:3c:a5:bb:33:2c:32:46:a7:
0b:ff:a5:99:f5:b9:d0:53:fb:5c:50:17:03:0d:cc:
4a:a7:33:ff:16:9d:64:bb:38:7b:c0:5d:73:80:50:
8b:6e:0d:09:c2:bd:7f:36:18:d6:b0:5d:88:97:09:
d4:8b:ee:87:99:67:a4:a0:a8:c9:c6:f7:db:c6:d2:
a5:5c:cf:dd:84:ed:b5:d1:90:25:ad:4a:ab:cf:f0:
c5:8d:d6:1a:53:76:73:dc:ea:3f:ba:9b:50:52:24:
7b:54:d3:98:49:7b:56:81:07:43:75:48:86:51:ce:
34:cc:4a:cb:66:4f:9e:58:3d:31:67:9b:21:a9:90:
e0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6E:37:FC:37:CF:1E:9C:59:20:F3:BF:7A:6B:7E:6A:17:70:DE:D9
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS262287.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.74.0/23
181.41.220.0/24
181.214.150.0/23
181.214.249.0/24
181.215.11.0/24
181.215.97.0/24
181.215.99.0/24
181.215.101.0-181.215.102.255
181.215.104.0/24
181.215.128.0/24
181.215.172.0/24
181.215.195.0/24
191.96.19.0/24
191.96.73.0/24
191.96.139.0/24
191.96.247.0/24
191.101.152.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:44:5f:26:36:a5:2f:76:78:c5:06:ad:c3:78:3a:0b:81:eb:
fe:4b:e8:85:58:7d:5c:83:a1:20:90:05:36:19:0b:72:31:13:
21:2d:57:eb:f0:88:ca:dd:1f:3c:8f:91:b1:40:96:b5:50:3d:
d2:9c:d2:b7:dd:23:9b:b9:c4:e3:22:e0:9e:0d:c4:d4:3e:77:
58:a9:80:40:c6:13:e0:16:61:3c:8a:28:95:71:0c:fb:36:14:
f2:6e:af:a9:48:52:b2:b3:08:73:a8:39:70:d8:67:7b:a5:e1:
38:f7:8e:24:69:19:b1:8a:a4:0f:01:0d:fa:84:52:97:70:64:
54:9d:b8:d3:47:a2:ce:57:a5:13:4e:c8:77:78:88:b0:9e:4e:
f0:41:f2:26:f0:fa:73:ce:e7:5f:87:79:e9:98:fd:dd:87:d5:
1e:ed:8e:d1:9f:78:ed:47:0d:52:f4:5b:c4:0e:24:56:a6:7c:
55:da:79:f6:ce:bf:54:24:f3:76:41:7a:ca:d2:b7:f2:7d:8a:
cd:f0:e0:9f:7c:11:02:7a:ed:f4:e9:0f:46:9b:e4:23:08:e2:
60:01:37:79:92:0b:b8:a3:db:bd:02:c9:cd:b6:b4:09:d1:e8:
40:49:07:5a:25:ec:2c:b5:aa:b6:f3:3c:99:1f:c4:c8:b5:b7:
15:ad:b2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:22:18 2025 by rpki-client