Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS64457.roa
File: AS64457.roa (raw, json)
Hash identifier: mzoEc9SebspE1WJZKs6E/U+bR5IZUCbXwU6d/xDO5yQ=
Subject key identifier: FE:98:9F:BC:A2:AE:B0:2B:B0:92:C8:F4:1F:C1:FB:6B:5E:F4:53:DD
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 64BB2F2636227DFA0A2E5E5F7C6C09EC7F1E33C1
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS64457.roa
Signing time: Wed 30 Sep 2026 12:11:37 +0000
ROA not before: Wed 30 Sep 2026 12:06:37 +0000
ROA not after: Wed 29 Sep 2027 12:11:37 +0000
asID: 64457
IP address blocks: 141.11.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 11:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:bb:2f:26:36:22:7d:fa:0a:2e:5e:5f:7c:6c:09:ec:7f:1e:33:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 30 12:06:37 2026 GMT
Not After : Sep 29 12:11:37 2027 GMT
Subject: CN=FE989FBCA2AEB02BB092C8F41FC1FB6B5EF453DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b9:b6:64:ab:9f:97:8a:78:eb:e2:f7:b5:e2:
ec:0a:d9:35:82:a1:44:a3:4c:75:51:2e:36:0a:24:
01:f6:92:ca:aa:b4:bd:05:e7:08:55:b8:a5:29:1f:
fd:6c:fc:a0:7c:7f:35:a0:c8:04:32:56:14:f1:2c:
0c:bb:84:17:28:73:2e:ed:b5:7d:49:9e:0f:96:6d:
44:c3:cb:ac:e9:fb:7a:4d:46:f9:ec:78:f9:2f:3b:
88:45:65:a6:06:85:e3:cd:02:b0:49:a8:3e:dd:f1:
af:9b:9e:1e:33:76:93:b8:5b:d4:cf:ee:9c:6e:47:
4c:48:72:e2:6f:5e:c1:85:61:2e:75:24:c3:db:6f:
db:c6:ef:67:5d:31:38:c2:a0:c1:7a:5f:30:8c:9f:
e3:8c:d6:36:56:2f:70:8e:54:60:77:a2:b8:7b:ae:
50:76:fb:bb:94:05:ca:74:41:97:e6:93:f7:d2:e6:
94:9d:24:24:9e:7d:92:36:90:67:3b:72:07:86:01:
d0:a4:25:56:6e:39:cf:97:31:2b:24:65:c1:c1:6e:
cf:fd:31:cd:cf:65:ec:f0:a9:7a:12:62:b6:87:40:
1b:59:a0:be:55:e0:15:c8:d5:ed:51:53:5e:a2:cd:
5d:d4:ee:93:3e:ee:1d:a8:07:b0:6d:24:f0:18:9b:
c5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:98:9F:BC:A2:AE:B0:2B:B0:92:C8:F4:1F:C1:FB:6B:5E:F4:53:DD
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS64457.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.192.0/24
Signature Algorithm: sha256WithRSAEncryption
47:12:8d:cd:8c:3d:21:1a:fa:b7:96:65:04:db:b0:62:d1:83:
bb:20:48:85:1f:8b:07:cd:30:7a:7a:81:f8:11:0d:7d:a5:7a:
eb:a5:8c:b8:78:78:af:04:da:c7:d6:b8:5e:59:73:7d:17:19:
7f:48:95:bc:3a:a5:a0:5a:2c:1e:f0:dd:14:c4:66:98:87:bb:
87:e1:f0:2f:b5:03:ec:09:37:1e:d7:61:24:9e:ba:28:8b:11:
74:4c:ad:c2:00:6c:f7:4d:cc:63:23:b8:b1:42:aa:ef:3e:ea:
3f:2e:c3:01:84:fa:34:ee:5b:20:93:a1:7f:16:d3:fb:1b:75:
06:6e:77:62:4e:9e:ce:27:d6:bc:c8:95:b1:f5:a2:be:3e:8c:
7a:7d:bb:4b:93:c2:3c:73:4c:52:09:b8:e2:1c:a0:b5:70:3a:
90:d7:63:64:a0:ab:c4:2a:9e:e6:4c:7f:2f:62:1a:39:b0:74:
d5:0a:a9:57:ab:ed:7d:c8:27:93:20:5e:a6:6f:ad:0e:a8:c8:
4d:58:70:8b:d7:a3:31:1a:c2:e9:7e:27:3a:98:4c:30:56:e5:
1a:2a:ef:ec:5a:7c:7f:9a:4c:53:98:d5:c1:68:fc:e6:f2:ab:
58:69:bf:a5:18:f2:77:89:d2:8d:e6:04:b4:a3:ee:0b:04:00:
4e:78:94:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 21:57:39 2026 by rpki-client