Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS64267.roa
File: AS64267.roa (raw, json)
Hash identifier: 9NR5KgAXq7OBNV4qYToFoteMTZc+d/n3KSlEv7KRAOE=
Subject key identifier: D0:43:7E:99:BA:45:54:FA:0C:C2:7A:B0:F9:D8:E8:A9:F4:1C:31:80
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 3B6D67F2A4C1DE3815DA85772E4C750101CEB8A8
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS64267.roa
Signing time: Thu 12 Feb 2026 14:39:25 +0000
ROA not before: Thu 12 Feb 2026 14:34:25 +0000
ROA not after: Thu 11 Feb 2027 14:39:25 +0000
asID: 64267
IP address blocks: 78.41.48.0/24 maxlen: 24
78.41.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 05:29:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:6d:67:f2:a4:c1:de:38:15:da:85:77:2e:4c:75:01:01:ce:b8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Feb 12 14:34:25 2026 GMT
Not After : Feb 11 14:39:25 2027 GMT
Subject: CN=D0437E99BA4554FA0CC27AB0F9D8E8A9F41C3180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:19:5e:5a:26:3b:af:24:b2:0b:9d:f6:35:03:
ec:19:af:91:4f:c2:e2:61:83:a4:05:01:15:61:05:
9d:ee:b7:e5:0f:80:91:bb:60:45:cb:f4:4d:f1:6e:
e9:b5:5b:63:bb:2c:f0:30:93:d1:bd:12:de:df:a2:
e7:3e:55:af:a0:cf:cf:e1:e7:ba:15:93:30:8a:e3:
1e:95:e6:b2:da:0c:f1:6d:27:bf:26:b3:fe:96:63:
6c:f0:58:67:3d:e6:96:89:b7:74:55:8e:22:55:3b:
75:93:83:a6:9c:ff:57:11:f5:d3:ca:1d:d6:d1:d7:
db:54:43:9b:1b:09:0d:1e:39:0f:8e:bb:11:64:95:
b7:b8:28:fd:68:15:6d:5a:2b:7b:1a:8b:91:8a:f1:
c6:19:6d:74:28:9e:05:1d:b3:39:41:d6:d3:eb:66:
c4:75:16:11:ec:6a:16:a7:02:3a:5c:15:2c:0a:12:
ee:d9:4a:4a:f2:da:81:75:98:8e:5f:b8:07:ec:44:
6c:02:5e:1b:ea:8d:0a:f4:97:f9:6b:d7:d5:04:be:
0c:9c:3d:b4:31:2c:94:f4:f2:e9:7d:9c:22:bf:16:
41:8e:83:da:a9:2e:f2:a1:89:ef:9a:30:d6:f1:f2:
0d:6b:84:52:8e:c5:de:27:4f:87:83:75:6a:ca:c1:
40:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:43:7E:99:BA:45:54:FA:0C:C2:7A:B0:F9:D8:E8:A9:F4:1C:31:80
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS64267.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.48.0/23
Signature Algorithm: sha256WithRSAEncryption
63:c6:da:ba:a6:b8:e7:70:55:d2:d7:d3:73:4d:7f:15:7e:f0:
02:ea:06:fc:1c:ea:8b:76:1c:32:86:23:f3:27:3c:cd:e2:02:
38:49:c1:da:da:97:e4:1b:8a:e6:71:9a:cd:67:8c:b2:6f:01:
b5:ba:a6:e8:38:8c:a9:5f:07:c8:fb:f7:bd:5f:10:63:14:f0:
5f:b7:86:a5:e6:95:d1:1c:a8:cb:80:ff:f2:bc:67:6b:69:3c:
b1:5f:f0:7c:b9:07:ca:3a:ab:a2:d2:3d:35:e7:85:db:71:8c:
27:fe:dc:65:7b:c3:40:e0:99:de:cf:54:3f:60:eb:0b:ea:88:
4d:2f:d8:d9:fd:40:92:30:2b:13:9d:75:a7:b1:f8:8e:b1:19:
bc:23:2a:fd:4d:cd:72:15:27:ff:60:fb:28:a5:1f:75:2a:ea:
de:38:c1:d8:bf:61:2f:22:c6:96:b6:f2:c2:02:40:b6:92:50:
4c:f8:27:17:96:b1:f1:13:d5:a2:54:78:c3:87:e9:e5:f3:81:
c6:95:62:38:7a:c7:c4:31:54:3d:ef:47:ae:c1:6f:5c:6c:e8:
1b:c4:c5:b4:17:88:2e:57:91:67:5d:ad:08:a4:04:65:b8:04:
2c:bb:99:ea:74:bc:31:32:8f:7a:d4:63:ea:d5:db:93:0d:f7:
31:7a:5f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:37:55 2026 by rpki-client