Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS64267.roa
File: AS64267.roa (raw, json)
Hash identifier: 1U1b1QPgrn+4Ow/EofwfJC9GsGp4UH36V5wxUxRWuLY=
Subject key identifier: BC:26:AD:D0:D5:00:9B:46:39:93:21:39:05:DE:16:E1:FF:1E:4E:7B
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3C25B57377B2C94E5C8C3A7EFC51F28E5956092B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS64267.roa
Signing time: Wed 02 Sep 2026 13:53:57 +0000
ROA not before: Wed 02 Sep 2026 13:48:57 +0000
ROA not after: Wed 01 Sep 2027 13:53:57 +0000
asID: 64267
IP address blocks: 51.146.49.0/24 maxlen: 24
51.146.50.0/24 maxlen: 24
51.146.51.0/24 maxlen: 24
188.220.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 07:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:25:b5:73:77:b2:c9:4e:5c:8c:3a:7e:fc:51:f2:8e:59:56:09:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 2 13:48:57 2026 GMT
Not After : Sep 1 13:53:57 2027 GMT
Subject: CN=BC26ADD0D5009B463993213905DE16E1FF1E4E7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:1c:da:81:fd:6b:29:dc:5c:b2:38:97:71:
36:88:30:2c:a7:e7:3b:f6:66:0b:0d:e9:4b:f8:d6:
28:36:ef:6e:46:3c:e6:86:cb:60:be:0f:b6:4f:af:
af:53:86:15:cf:11:a1:d1:e5:8a:62:94:62:3f:80:
c3:e1:39:f9:8f:b9:cf:84:24:76:df:c4:4c:39:fc:
2f:02:c1:46:c7:44:d4:65:73:8c:c2:1c:b2:f9:9e:
f3:76:db:4d:72:7f:fa:63:8d:2e:fb:ed:ea:15:4d:
58:fe:62:3d:cb:d9:5b:ae:14:17:31:33:16:e0:1b:
05:77:48:7d:6a:59:3f:f9:cb:3d:f4:13:a3:0f:8b:
06:27:17:1e:ea:c5:ff:0e:7a:3f:3a:6d:f8:9d:40:
9f:a3:80:a3:24:d2:49:c2:3c:a8:94:70:b9:0b:ec:
5d:1b:eb:01:ae:03:04:0c:f3:52:2c:8f:7d:1c:23:
69:85:70:d6:df:f1:8b:53:cb:f4:a1:a9:94:70:8c:
b5:9f:be:f4:6c:b0:77:39:d8:dc:6c:44:c9:78:2c:
2a:b0:27:99:cc:f5:53:27:90:76:ff:62:ef:2e:c7:
cc:ba:84:d6:27:7c:d0:30:40:8d:b2:23:7a:ce:0a:
85:a1:c3:00:01:ea:9f:08:26:fe:22:0a:f7:ac:5e:
3b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:26:AD:D0:D5:00:9B:46:39:93:21:39:05:DE:16:E1:FF:1E:4E:7B
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS64267.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.49.0-51.146.51.255
188.220.142.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:ef:49:32:d4:70:ea:05:4d:ef:81:56:ef:36:cc:7e:8f:7f:
2e:14:07:7e:07:a0:9b:fc:e9:0e:7c:4b:2a:b6:1e:6b:39:f0:
2d:a6:14:41:6d:36:40:0e:0a:18:43:09:cf:b7:3c:84:d7:6c:
6e:cb:31:35:fa:c1:60:d3:31:dd:36:36:d3:14:18:38:84:2c:
f8:df:60:52:2a:51:9c:63:ee:2d:38:0e:65:5f:a4:91:8d:8d:
f4:9e:21:79:a4:b2:2c:2c:92:55:48:5c:50:2e:df:ef:2f:fb:
ac:cc:e9:cb:c6:39:c8:f3:ae:e2:a7:52:90:2c:46:10:9a:04:
72:c7:75:f8:75:95:f5:d0:f3:5b:1a:fc:c9:46:dd:16:45:69:
d3:7c:6e:35:dc:d0:89:db:98:ea:e7:94:94:e0:5c:e1:8d:8d:
06:64:d5:db:4b:de:2a:e4:42:2a:58:0d:74:b6:21:c5:48:d5:
4e:5c:35:68:83:b9:3c:11:1a:47:7e:0a:a1:f9:6c:57:0a:92:
a6:73:7d:50:0e:39:65:a8:75:7e:a7:c0:09:03:3c:bd:6d:0a:
94:5d:4f:51:6b:a6:19:be:77:aa:97:49:c8:36:ce:fa:b5:4c:
38:e9:07:50:78:19:c7:ad:4b:71:cd:e5:1a:e6:c2:51:e7:b6:
55:9f:e4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:23:21 2026 by rpki-client