Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS64267.roa
File: AS64267.roa (raw, json)
Hash identifier: 9pszlQRN5POozwbJrWw8fNM/kgtqr4UGmdr4m11Lduk=
Subject key identifier: 20:18:B1:F1:1F:B5:EC:95:E3:2A:1F:A8:F8:3A:CB:CE:66:F4:2B:EE
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 0F4BCCAA5432C9CBF32E24D5E573332A89A3FE28
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS64267.roa
Signing time: Sat 15 Aug 2026 00:04:48 +0000
ROA not before: Fri 14 Aug 2026 23:59:48 +0000
ROA not after: Sat 14 Aug 2027 00:04:48 +0000
asID: 64267
IP address blocks: 143.20.153.0/24 maxlen: 24
143.20.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 06:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:4b:cc:aa:54:32:c9:cb:f3:2e:24:d5:e5:73:33:2a:89:a3:fe:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 14 23:59:48 2026 GMT
Not After : Aug 14 00:04:48 2027 GMT
Subject: CN=2018B1F11FB5EC95E32A1FA8F83ACBCE66F42BEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8b:e2:f1:aa:64:f7:04:21:6f:6b:49:c9:c5:
b8:14:77:45:c6:4f:cc:b9:36:1a:99:ed:43:a0:af:
ea:81:4e:21:b5:e8:c9:6b:d6:41:88:56:39:26:f4:
2e:ae:9f:e2:1e:33:33:52:1a:dc:f6:a6:6c:17:c2:
c4:2c:3e:2a:66:27:a3:b2:e2:c3:b4:64:72:69:0b:
66:6c:4a:4e:41:65:b6:fa:0a:f4:7f:7c:d4:5e:48:
fb:fb:a0:21:fc:47:9a:b2:f8:92:65:55:d4:77:7d:
f8:83:a9:62:d3:6c:0b:3a:97:2c:9c:64:08:19:4f:
4b:e0:58:0d:45:37:e2:cc:2d:a3:ac:6b:3b:60:5c:
54:d0:b7:86:3a:21:18:f7:01:ed:db:c5:e2:25:9d:
22:a3:c9:49:e7:a5:f7:e6:0a:32:d3:48:c4:ad:1c:
26:89:ce:be:90:de:f6:30:4a:32:fb:c6:63:94:dc:
8d:92:81:e0:3b:f4:25:6c:6d:74:f9:bc:0e:c6:bd:
82:59:7f:48:9c:95:b6:5e:18:0c:71:4b:14:df:f9:
73:79:cb:87:83:fc:2c:19:17:09:cf:7b:f9:aa:e9:
14:9f:a8:0c:09:22:4b:cd:63:df:a3:95:88:7a:fe:
53:a7:79:72:18:66:a9:b3:01:f0:c6:fd:6e:25:56:
5b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:18:B1:F1:1F:B5:EC:95:E3:2A:1F:A8:F8:3A:CB:CE:66:F4:2B:EE
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS64267.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.153.0/24
143.20.198.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:af:da:54:e4:87:e2:3c:32:70:50:9f:93:0e:58:a3:f5:3f:
f3:1f:68:ad:40:cd:36:a7:a0:cc:ea:8f:c9:b9:86:a9:f6:08:
12:9f:c3:5a:bb:0e:10:e2:90:e3:bb:a5:2a:f2:4f:7c:d8:6c:
c1:54:f0:68:40:a5:79:24:98:9b:05:1d:0f:41:6a:12:bc:80:
84:07:4c:26:6a:de:7d:8b:64:21:38:7c:76:61:0c:2b:91:0b:
1f:0e:7b:da:ce:43:e3:f9:c2:5b:fd:57:d7:26:a0:bf:19:99:
54:bf:81:e6:45:21:ae:72:96:cd:2d:0e:cb:04:e9:97:05:5b:
0b:04:08:8d:1e:64:3b:2c:ec:16:2d:32:8e:12:60:f7:41:23:
a0:23:c4:24:de:68:28:f2:1a:33:fc:82:78:7c:c5:f5:c8:e7:
12:c9:8f:d6:a3:fd:b9:b9:dd:03:62:94:2d:8d:6f:9c:cd:6c:
4a:35:f8:69:94:df:f3:ca:99:3e:dd:c5:ad:25:90:1c:3b:52:
d6:1e:91:9c:95:a1:72:a9:8f:0c:5b:d0:c8:f1:b8:f9:9c:a2:
f1:04:e2:18:0f:61:10:27:c1:52:10:5a:3b:e4:e6:13:71:89:
27:59:b7:f0:09:7e:b2:aa:a7:99:f0:86:83:7d:ce:53:c3:98:
c7:cf:60:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 10:34:35 2026 by rpki-client