Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS64457.roa
File: AS64457.roa (raw, json)
Hash identifier: LaSJymWtJquufQT+LiGmTPRNF8Pgpp5D7bIQoJI9Pe0=
Subject key identifier: 5F:13:1D:90:A1:0B:0F:4A:EF:ED:EE:62:70:EE:43:6D:BD:CE:12:2E
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 42ABC5CA71B8B8970B17D2EFD080D51C8D2C9B57
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS64457.roa
Signing time: Fri 28 Aug 2026 09:22:47 +0000
ROA not before: Fri 28 Aug 2026 09:17:47 +0000
ROA not after: Fri 27 Aug 2027 09:22:47 +0000
asID: 64457
IP address blocks: 94.194.144.0/22 maxlen: 24
94.194.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:ab:c5:ca:71:b8:b8:97:0b:17:d2:ef:d0:80:d5:1c:8d:2c:9b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 28 09:17:47 2026 GMT
Not After : Aug 27 09:22:47 2027 GMT
Subject: CN=5F131D90A10B0F4AEFEDEE6270EE436DBDCE122E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8d:9e:67:2b:40:e9:7b:83:33:5c:5e:54:f0:
cd:9b:ec:fb:ef:1c:51:f5:76:ba:1f:a4:a0:61:d7:
1b:ba:17:41:8b:73:9c:94:8d:57:5a:0e:b5:ae:41:
ae:a2:47:92:16:27:52:89:61:28:af:1d:c8:09:4b:
f2:58:f0:fd:be:fa:43:89:be:0a:ed:73:3c:70:58:
59:b8:bd:ab:de:e4:9e:84:7a:6b:4b:43:e6:5b:15:
80:e8:86:5a:4d:4a:c1:00:9e:dc:46:29:7e:ef:76:
26:ae:2e:a3:10:bd:8c:75:ab:14:96:5c:11:3f:f7:
b2:f8:47:6a:b4:49:f9:46:a5:86:f2:62:16:b7:3f:
3c:7c:b6:62:39:50:ef:d8:7f:ae:13:6e:ca:bd:a1:
90:d6:06:b0:6f:4d:06:6f:f2:01:4d:b6:0f:f5:9c:
de:71:5b:a0:b9:bd:31:d5:13:53:48:b5:44:15:43:
ff:0a:1e:db:14:8d:c8:13:90:e5:31:b1:4b:29:fa:
70:8e:15:f0:31:90:42:54:7d:90:a7:12:f4:c9:c4:
3e:60:49:49:c2:52:79:b3:f7:76:0b:4a:a5:bb:2b:
f4:d6:85:88:7f:34:51:18:cd:04:a4:fb:1d:75:dc:
1d:cb:0a:4a:fa:ee:1b:a0:d4:96:bc:b0:da:47:5f:
e8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:13:1D:90:A1:0B:0F:4A:EF:ED:EE:62:70:EE:43:6D:BD:CE:12:2E
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS64457.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.194.144.0/22
94.194.248.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:80:c8:61:d4:72:32:01:c4:f8:28:75:b1:79:34:2c:31:36:
b7:13:e2:6c:c3:c1:aa:09:03:c2:95:9b:9c:59:81:52:94:b4:
65:62:bf:95:15:93:c6:f5:ac:13:56:2e:93:4c:c5:c9:8c:a5:
2f:3a:db:43:04:31:fe:0f:31:8c:5c:63:b5:0f:bd:bb:eb:dd:
e6:97:8d:26:a3:3f:01:aa:69:91:59:48:0c:83:c8:0f:b1:94:
84:41:f2:60:ce:41:18:6d:f7:82:75:0a:e1:61:ae:52:69:7e:
32:9f:d7:43:43:00:e7:54:d6:2a:7d:75:7c:93:1a:67:ff:26:
e3:7f:48:f9:f7:6f:65:cd:6a:8d:bc:6e:d9:01:cb:f2:4b:12:
f2:22:17:22:f9:3e:1d:1b:a5:51:ca:75:75:69:53:61:c9:bb:
cf:ff:59:f2:b0:b2:d9:17:45:fe:94:01:ca:12:c6:c5:50:4e:
20:97:85:bb:47:5a:a1:c5:01:6d:d5:70:52:e1:4e:f1:68:dc:
39:24:09:f2:d1:f8:27:2d:8f:4f:f5:31:09:1c:34:f6:ec:f6:
d1:6d:46:da:06:e1:70:69:b8:b3:cd:ed:3f:7d:52:62:85:24:
aa:ce:b8:36:5f:92:e9:68:2a:f8:55:0c:ee:62:fb:eb:1b:fe:
b3:bf:ac:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:23:26 2026 by rpki-client