Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS267507.roa
File: AS267507.roa (raw, json)
Hash identifier: mCrVb871E1lCVYTuR/WPgKHz+kCZn0QGBfPOvVR4dKU=
Subject key identifier: 28:2F:0F:6D:C1:4F:EC:51:6A:50:2C:63:3A:D5:A5:DD:AE:15:CD:BE
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7A44C41F23DCC2B7C887FD43659239C0E79A6E2B
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS267507.roa
Signing time: Fri 07 Aug 2026 14:49:21 +0000
ROA not before: Fri 07 Aug 2026 14:44:21 +0000
ROA not after: Fri 06 Aug 2027 14:49:21 +0000
asID: 267507
IP address blocks: 191.96.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:17:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:44:c4:1f:23:dc:c2:b7:c8:87:fd:43:65:92:39:c0:e7:9a:6e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 7 14:44:21 2026 GMT
Not After : Aug 6 14:49:21 2027 GMT
Subject: CN=282F0F6DC14FEC516A502C633AD5A5DDAE15CDBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fc:02:47:f5:78:02:4b:f9:8b:a6:97:bb:ed:
ff:0e:48:6a:30:58:d2:57:ed:dc:89:fb:00:ae:c7:
b3:bf:f7:13:64:4f:3f:d2:af:ef:62:e2:99:98:de:
60:30:3c:60:b9:7e:25:50:ac:fe:06:9c:e4:9c:5a:
34:f0:8e:96:70:cb:9f:7b:bc:7e:53:d6:36:3e:f0:
fd:84:36:fc:0f:a2:e8:ae:9d:f4:98:18:93:4a:e5:
06:38:5d:2f:45:a8:9a:65:02:ed:83:28:90:3c:02:
1e:7f:2f:a6:b2:9e:a2:d3:93:3a:35:db:33:26:15:
1e:13:4f:82:77:cd:11:c3:fb:d5:70:09:0a:ee:36:
3e:ca:ea:72:b0:77:32:5b:fb:20:33:be:17:56:b7:
94:64:c6:6f:39:32:8f:65:35:bf:bc:22:03:57:ad:
aa:b3:4e:38:76:5e:6b:38:6f:ac:e6:4e:ba:fa:50:
95:19:a0:c8:d7:31:0f:da:a3:0b:8d:93:e2:e6:61:
86:7f:b6:0c:86:86:c2:ae:77:1b:5c:d5:bb:61:d5:
8c:3e:a2:1a:aa:7f:16:e0:16:9c:bf:a1:d2:53:e2:
87:16:d4:6c:f6:11:17:0f:91:3b:df:c9:2e:24:3d:
ec:1c:1b:3c:57:0e:ce:02:0b:54:b5:89:fc:7b:a5:
19:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2F:0F:6D:C1:4F:EC:51:6A:50:2C:63:3A:D5:A5:DD:AE:15:CD:BE
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS267507.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.14.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ea:64:c8:2a:4e:d6:87:fc:85:23:04:dc:4f:4b:7a:d8:14:
47:ef:79:df:a7:e5:e4:e5:a1:af:9a:65:67:08:b2:3c:ad:31:
85:72:d6:f4:d9:d2:aa:c9:e9:63:11:fd:db:e9:e3:0b:ce:88:
a5:0d:ff:a4:2f:2b:20:cd:ad:f9:c9:51:1d:11:84:74:9f:7e:
35:02:f9:d8:3f:2b:d8:d9:29:5a:05:e9:e5:1f:32:22:f0:dd:
39:66:38:17:51:6f:e2:f2:0c:38:10:85:e4:ca:14:f0:7e:b7:
0a:d5:c5:97:d4:b0:54:af:6e:bd:11:d1:7e:4e:24:54:69:2c:
10:2e:b7:af:49:2c:ff:54:07:bc:0e:53:1b:30:98:a3:b7:b6:
b9:56:2d:88:be:d1:7d:82:f8:24:80:67:b3:b0:d9:fc:63:5d:
41:df:b5:bd:ed:8b:54:20:12:0c:6a:8a:c7:cd:6a:69:eb:11:
3d:46:45:a3:38:b6:d7:c2:04:09:b5:60:87:98:b2:65:df:f3:
54:8f:d1:de:89:55:d9:b3:e1:f9:64:53:01:66:da:0c:5d:55:
db:67:41:a4:e9:bc:05:18:49:d6:2a:a0:d3:52:cc:b7:1e:7d:
18:a0:02:03:b8:3f:b0:44:29:01:19:e2:94:71:7e:76:b6:5e:
77:0e:83:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:08:10 2026 by rpki-client