Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS64267.roa
File: AS64267.roa (raw, json)
Hash identifier: BFHMGt514TePmsXRu1dyLlqumDzGyoq92Z90fQb5Bts=
Subject key identifier: 8B:56:9D:5F:A4:DD:1B:07:67:41:9A:9C:8B:28:EA:6E:AF:21:93:4E
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 4843874D6359C40F0B9E3EEE2155FE2AC8276F86
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS64267.roa
Signing time: Mon 15 Jun 2026 00:05:43 +0000
ROA not before: Mon 15 Jun 2026 00:00:43 +0000
ROA not after: Mon 14 Jun 2027 00:05:43 +0000
asID: 64267
IP address blocks: 141.11.3.0/24 maxlen: 24
141.11.27.0/24 maxlen: 24
141.11.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 07:54:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:43:87:4d:63:59:c4:0f:0b:9e:3e:ee:21:55:fe:2a:c8:27:6f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 15 00:00:43 2026 GMT
Not After : Jun 14 00:05:43 2027 GMT
Subject: CN=8B569D5FA4DD1B0767419A9C8B28EA6EAF21934E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:73:49:7f:b4:92:8e:47:f9:72:13:d9:69:a8:
5c:5f:6c:ee:bb:d0:ea:0c:7c:9f:d5:b3:f6:eb:0c:
3a:64:ac:65:57:46:b6:52:06:89:65:8a:01:a1:e5:
69:e4:37:91:22:ae:9a:7e:ba:72:b8:58:3f:e0:d7:
d6:ab:1d:c9:bb:5b:d0:f5:aa:01:10:da:52:c0:ad:
4b:2d:25:86:82:4c:46:18:31:66:64:d8:0e:7c:31:
0a:96:63:a8:56:72:64:46:b3:87:2e:3b:54:b5:70:
44:4d:54:3d:7c:6a:7f:c2:a5:0b:60:27:d2:21:3e:
8f:98:07:01:43:9e:dd:58:14:60:f7:91:e6:65:53:
25:28:86:18:21:13:01:9a:d5:a3:60:8b:97:03:df:
f4:34:71:db:2a:fb:98:89:7e:8c:cc:ae:fc:79:b0:
e7:7e:b0:1c:24:0b:81:4d:f2:45:4b:10:33:47:9d:
38:c9:6c:84:11:3f:fd:12:bc:94:41:7c:ec:fc:62:
2e:1f:34:4b:17:54:ac:e4:89:b2:4c:1d:63:40:79:
59:92:d4:18:b3:ac:bd:04:a2:7c:6b:64:99:7d:36:
40:f4:ea:5d:19:72:a1:91:d0:a2:7c:97:80:cd:49:
d5:30:96:bd:c0:19:11:fa:26:dd:4f:12:b6:fd:ec:
cf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:56:9D:5F:A4:DD:1B:07:67:41:9A:9C:8B:28:EA:6E:AF:21:93:4E
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS64267.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.3.0/24
141.11.27.0/24
141.11.230.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:61:71:78:50:5d:50:bf:67:88:35:e5:57:62:8a:ac:c0:ab:
29:0c:4b:b4:51:07:01:ae:9e:4a:06:45:0d:6a:69:64:b9:1b:
31:2f:c6:0f:e4:a6:b7:dc:a9:59:38:00:e7:b9:da:85:18:d5:
f5:84:cf:95:79:58:83:d2:64:7e:9e:95:0c:48:69:2d:40:5a:
17:c5:a1:96:4a:37:d5:0b:b3:f2:49:cb:84:27:57:9a:fb:5c:
12:78:a2:c2:6c:67:c5:93:7a:57:6a:d9:6a:db:5d:53:92:88:
dc:01:42:3d:c5:08:a5:1f:ef:a2:90:5e:dc:29:54:9e:23:8e:
20:9b:58:38:d8:43:be:20:06:67:57:3c:42:af:72:99:55:dd:
11:b3:3b:39:4e:a5:08:21:a6:0e:00:a8:90:9e:d2:2e:a6:e4:
73:b1:e6:3a:71:92:4c:fb:b2:31:b6:59:b4:81:dc:0a:b3:01:
47:ee:5a:95:78:62:f8:0d:9b:13:c2:98:04:f0:79:7e:7c:8c:
eb:ed:c8:c9:1b:c4:67:4d:69:6e:2c:93:87:ed:6d:4b:c9:6f:
11:bc:ae:b1:f4:5a:a4:b0:fa:ca:56:41:d1:08:b3:22:14:e8:
76:b9:4d:75:b8:17:d0:c7:ab:35:e4:12:db:13:be:5d:d9:9c:
90:3c:ed:16
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jul 20 16:09:52 2026 by rpki-client