Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS64267.roa
File: AS64267.roa (raw, json)
Hash identifier: CEYiN7AbReRgJpAx5kJZ1Jl76PhlG93LdenvfCmJJ/g=
Subject key identifier: A6:A8:FD:1B:BC:AC:30:0C:2F:E7:A7:9A:5D:B2:BF:41:D4:23:0D:3C
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4F6FB41FEB63676EAB91BDCFBD54AB7A5B58C99D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS64267.roa
Signing time: Mon 15 Jun 2026 00:05:43 +0000
ROA not before: Mon 15 Jun 2026 00:00:43 +0000
ROA not after: Mon 14 Jun 2027 00:05:43 +0000
asID: 64267
IP address blocks: 82.23.160.0/24 maxlen: 24
82.23.161.0/24 maxlen: 24
82.24.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:6f:b4:1f:eb:63:67:6e:ab:91:bd:cf:bd:54:ab:7a:5b:58:c9:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 15 00:00:43 2026 GMT
Not After : Jun 14 00:05:43 2027 GMT
Subject: CN=A6A8FD1BBCAC300C2FE7A79A5DB2BF41D4230D3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:de:ef:72:3c:1a:2c:aa:4c:1f:19:ef:b0:32:
29:eb:b1:37:48:2c:33:a3:b7:d3:b2:35:21:55:01:
3b:f0:b8:41:ec:3d:ed:a1:5d:7f:53:00:53:2b:b8:
02:66:cf:5f:c4:70:29:07:1f:0a:a0:d9:17:d9:81:
be:be:6a:e3:4d:9b:1e:fa:b4:1d:ae:48:de:8f:63:
f4:3b:f0:b4:22:c0:63:64:24:82:85:8e:dd:71:e4:
16:19:65:c2:eb:22:72:73:1e:ec:8b:38:cf:cf:9e:
34:24:82:aa:9f:2d:0e:95:98:dd:a0:91:11:35:58:
05:10:1b:d2:35:ce:16:e5:0f:c1:45:e4:e0:43:0c:
d1:81:85:ce:b9:d2:8d:46:4c:3d:02:04:7f:00:ea:
44:8d:4f:3c:b4:11:89:b7:52:06:44:01:3e:ff:4c:
b0:54:66:36:50:ce:c0:5c:17:00:37:d8:52:e3:26:
b8:2d:be:26:0d:f6:57:63:4d:4a:91:18:db:82:02:
7a:d3:12:d3:c9:53:df:09:ad:f5:3a:8a:a2:78:99:
4f:36:6e:3a:cb:5f:d6:1b:32:c8:ea:66:6c:90:2c:
ca:b3:2c:0d:fb:c5:9e:ad:5e:58:97:fd:3a:89:95:
cb:d3:4f:d3:fc:87:f0:c8:8a:c0:b8:f7:6c:d8:cd:
d8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A8:FD:1B:BC:AC:30:0C:2F:E7:A7:9A:5D:B2:BF:41:D4:23:0D:3C
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS64267.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.23.160.0/23
82.24.58.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:44:58:e2:07:2e:98:24:5f:43:e2:5a:29:04:33:5d:a5:cb:
4e:80:9c:72:c7:39:45:b0:a0:86:a2:b9:50:2b:22:43:3c:5f:
80:a4:50:55:44:ae:ed:f0:4b:ce:a7:76:20:dd:78:34:40:22:
89:11:7a:e8:45:5a:c2:eb:5b:87:7d:82:d1:93:90:02:ff:64:
35:2a:e0:2f:b0:c2:a6:8d:b0:bc:8d:d1:f1:34:09:d9:f5:2f:
ac:14:9c:7b:9a:e4:c7:cc:5c:6b:47:01:d4:01:73:d5:05:1e:
2c:d0:ba:a6:07:63:4f:02:19:c7:b0:66:16:21:45:e1:e1:c9:
d7:8e:47:d2:6d:f7:06:ff:77:47:cc:4e:f8:e0:39:62:2f:9d:
98:b0:0e:39:ad:60:b9:1f:c0:e6:91:c1:95:a2:8f:a7:d4:61:
7d:3e:6a:71:4c:db:13:bc:2a:de:30:1e:ee:f1:18:59:f2:d2:
93:e0:68:f3:48:7a:3b:e2:c6:ff:00:7b:c7:1a:1a:0b:c5:22:
35:45:87:a9:13:47:26:ea:a9:2a:f7:a1:40:c0:ef:f5:ea:76:
43:98:ca:99:6f:5e:15:86:9a:a8:d2:33:c6:10:47:a1:a4:e9:
fc:17:23:41:13:57:50:0f:7f:70:bf:7d:2f:0a:a2:da:ad:08:
0a:f0:99:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 16:09:51 2026 by rpki-client