Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS264617.roa
File: AS264617.roa (raw, json)
Hash identifier: fXOZ8CRv4diAPNabn5Qxu74ezxuSVTdc3elXlXjFEKc=
Subject key identifier: 70:C9:80:A8:89:6B:66:B8:D9:A3:96:79:2D:C4:CB:7A:13:76:15:81
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6EC51B9D241F0671C37AD33899D5FF618A631A45
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS264617.roa
Signing time: Mon 10 Aug 2026 11:49:21 +0000
ROA not before: Mon 10 Aug 2026 11:44:21 +0000
ROA not after: Mon 09 Aug 2027 11:49:21 +0000
asID: 264617
IP address blocks: 191.96.170.0/24 maxlen: 24
191.101.94.0/24 maxlen: 24
191.101.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:c5:1b:9d:24:1f:06:71:c3:7a:d3:38:99:d5:ff:61:8a:63:1a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 10 11:44:21 2026 GMT
Not After : Aug 9 11:49:21 2027 GMT
Subject: CN=70C980A8896B66B8D9A396792DC4CB7A13761581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bf:50:50:5b:14:2b:9b:73:f1:7a:d6:63:7f:
c0:04:7a:8e:16:27:c4:f1:d2:5e:fb:af:ac:12:74:
77:eb:1e:3a:40:aa:a9:47:ee:c3:d2:09:f8:94:9f:
da:0f:8f:c6:51:f0:c2:e3:50:cc:88:be:54:94:f6:
17:01:be:e0:a9:37:cb:b4:74:63:61:11:01:1e:5f:
94:f1:27:16:a7:12:f8:36:e4:0e:82:19:5e:84:ec:
36:17:3a:7e:7e:86:4b:f7:c2:8c:ec:6a:48:9a:e0:
8b:2d:23:40:b8:e4:64:e1:20:e8:82:52:d2:57:f6:
e7:00:ec:08:85:cb:22:2c:ba:23:8e:76:f2:3c:fe:
71:ba:d8:20:e5:14:52:10:1f:c1:e7:28:26:df:53:
f9:0f:3f:46:64:02:e7:78:a9:c5:ea:da:f7:bd:fe:
1d:8f:14:a5:7c:fe:5d:bb:46:8b:01:b7:cf:bb:16:
17:fc:b1:90:ae:e9:a1:0a:1c:ad:f0:d1:cb:64:63:
e7:40:1b:38:a8:8e:28:a8:52:61:07:f4:54:65:0e:
ca:f6:8e:78:62:39:26:8e:50:1a:42:d0:22:de:05:
0f:a1:a0:b6:38:4a:85:50:e4:7e:51:1c:b5:d2:c5:
58:09:1d:66:43:02:d3:e3:a2:a0:82:10:9d:51:99:
10:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C9:80:A8:89:6B:66:B8:D9:A3:96:79:2D:C4:CB:7A:13:76:15:81
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS264617.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.170.0/24
191.101.94.0/24
191.101.121.0/24
Signature Algorithm: sha256WithRSAEncryption
31:d2:39:7b:71:a8:e1:bf:d1:a9:a9:14:3a:58:18:f8:4c:75:
90:8c:f2:4b:eb:08:11:a0:63:14:49:d8:22:e1:01:54:e8:21:
aa:73:bb:74:82:cc:bb:c2:a5:a6:10:37:27:dc:bc:cd:0a:de:
97:68:df:81:6c:2d:09:39:cc:1b:a4:9f:7e:94:eb:ce:ce:98:
5f:25:0d:fc:13:5a:79:dc:ae:4c:6f:a2:62:89:ad:19:4c:a4:
22:94:16:a5:db:b8:df:09:43:ae:9a:50:e3:ba:54:e4:f0:e9:
0f:70:fc:4e:bd:ad:98:4d:4c:d0:45:e1:62:66:28:a0:4a:66:
bc:c3:06:80:91:e4:b6:d0:a8:0b:5c:5e:a3:f0:17:23:a8:83:
fe:95:b2:ec:db:55:60:6e:ec:48:e2:41:a1:e0:b9:94:37:a9:
a7:27:d1:4e:9f:91:3d:d9:4f:81:00:d1:99:4f:39:1b:76:a9:
97:61:80:8f:fe:29:8a:93:a1:92:1d:8f:58:f1:c5:a6:a0:8d:
4a:09:af:8a:36:73:a7:0a:35:07:3b:05:6b:07:25:91:0f:34:
3e:6f:20:4c:ef:1f:47:b8:82:66:27:5d:3f:ba:2c:10:e8:5d:
f8:26:d8:17:4f:27:2d:10:44:a7:fc:45:06:dd:5f:99:d5:0d:
ac:c5:9e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 12:36:34 2026 by rpki-client