Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS265867.roa
File: AS265867.roa (raw, json)
Hash identifier: qgiogexECn9DrRwo6g8KuIzuDgjFUoFYigLBlhBwVtQ=
Subject key identifier: 17:BA:7B:21:F5:8C:E1:3A:13:CD:01:3A:98:17:FF:29:AD:17:49:A5
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 0E9F144AB19C195729D76D752CC3B53646919EEA
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS265867.roa
Signing time: Wed 26 Aug 2026 19:49:30 +0000
ROA not before: Wed 26 Aug 2026 19:44:30 +0000
ROA not after: Wed 25 Aug 2027 19:49:30 +0000
asID: 265867
IP address blocks: 179.61.230.0/23 maxlen: 24
179.61.234.0/23 maxlen: 24
181.214.137.0/24 maxlen: 24
181.214.158.0/23 maxlen: 24
181.214.192.0/23 maxlen: 23
181.214.192.0/23 maxlen: 24
191.96.200.0/24 maxlen: 24
191.96.216.0/23 maxlen: 24
191.96.218.0/23 maxlen: 24
191.101.40.0/24 maxlen: 24
191.101.96.0/24 maxlen: 24
191.101.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:9f:14:4a:b1:9c:19:57:29:d7:6d:75:2c:c3:b5:36:46:91:9e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 26 19:44:30 2026 GMT
Not After : Aug 25 19:49:30 2027 GMT
Subject: CN=17BA7B21F58CE13A13CD013A9817FF29AD1749A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:33:58:a8:e6:ff:cf:82:48:6e:2e:d0:0a:77:
45:be:50:39:5f:11:bf:f2:5a:ff:8a:ba:bd:ed:25:
19:6c:08:9f:de:43:07:a9:7e:3f:27:42:81:a0:e2:
bf:7f:21:2e:46:e5:d8:3b:63:b8:ee:ed:7a:d2:a0:
0a:5a:19:f8:ba:47:ab:be:69:2f:40:41:80:cb:28:
49:d6:ba:f8:4a:37:d5:dd:81:fd:80:f1:0d:15:03:
54:9d:47:7a:57:d0:9c:97:b4:b8:b7:40:1a:66:83:
90:bf:91:98:a7:a8:45:f5:0e:c4:3a:cc:00:31:52:
ec:5b:46:1a:75:51:41:dc:a6:a5:69:fc:24:2d:23:
75:e4:16:4e:e5:dd:9b:dc:95:7b:8d:97:a3:fa:6b:
af:92:93:69:54:29:c4:e3:e6:48:48:ec:65:0e:be:
18:87:0e:09:b3:ed:5d:ce:2c:24:77:3c:91:b9:7a:
f1:75:8e:30:53:93:ec:fc:84:50:52:19:94:5f:5d:
76:07:3b:e5:3a:19:50:85:a2:08:07:30:57:fb:d5:
b9:36:83:b7:34:ed:13:f2:25:f7:b9:ed:0d:45:ca:
fa:5e:ed:77:34:c7:5b:49:1f:81:89:bf:bb:56:65:
4b:17:47:05:50:6d:90:49:7d:a3:d2:04:c7:35:a1:
43:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BA:7B:21:F5:8C:E1:3A:13:CD:01:3A:98:17:FF:29:AD:17:49:A5
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS265867.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.230.0/23
179.61.234.0/23
181.214.137.0/24
181.214.158.0/23
181.214.192.0/23
191.96.200.0/24
191.96.216.0/22
191.101.40.0/24
191.101.96.0/24
191.101.153.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:84:1b:b2:fa:77:1b:57:2d:d1:f4:3d:cd:2a:3d:5d:5c:9b:
b8:f7:54:67:5e:7c:02:15:f6:79:ce:c4:71:36:ec:72:bd:c1:
dd:46:39:33:0b:dc:88:59:3f:5d:c4:a1:87:5f:43:8a:9c:48:
fc:4d:91:18:f9:82:d4:1c:48:69:7e:cb:7f:3b:f8:8f:ff:b2:
d6:ad:0b:84:e6:61:bf:9f:e8:95:58:5b:78:06:a5:a2:80:8c:
a7:5f:d4:28:a7:17:b7:62:b9:56:b1:f0:1f:f9:a2:07:0a:e7:
7c:56:8a:6f:06:66:a3:bd:5a:be:16:17:ae:39:1e:07:35:04:
10:fb:14:45:7e:8d:46:f9:eb:19:39:31:37:36:14:24:cf:d8:
bd:06:11:cd:f1:45:26:b1:22:ec:1c:c0:4b:9c:ec:e6:32:96:
92:51:0f:f4:4e:7d:77:f3:11:84:a5:b4:d0:19:ca:ad:94:6a:
97:84:39:ff:e6:4c:b9:ae:bf:83:28:96:ae:06:e2:5d:09:e9:
e3:82:df:6f:10:88:9c:3a:4a:51:a5:f8:c0:1b:a7:74:f7:17:
42:89:6d:1b:57:85:be:d9:5c:c6:1f:b4:c2:0f:a6:c2:7e:19:
f7:4a:4f:e7:83:f4:c0:d2:bb:b1:ad:77:b9:df:3c:84:dc:5d:
51:93:06:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:05:06 2026 by rpki-client