Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS64289.roa
File: AS64289.roa (raw, json)
Hash identifier: Y7MHeSER8hI4Z4wbvGMa7LrEZc24U3dgYPc9gjBPOHk=
Subject key identifier: E9:75:DA:16:0D:2B:EC:20:E2:B9:A9:D8:33:11:D8:E5:87:BC:73:F8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 07CE64204A0560B8D38491AD921B4CE3C2D38F37
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS64289.roa
Signing time: Fri 06 Feb 2026 00:00:40 +0000
ROA not before: Thu 05 Feb 2026 23:55:40 +0000
ROA not after: Fri 05 Feb 2027 00:00:40 +0000
asID: 64289
IP address blocks: 82.21.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:ce:64:20:4a:05:60:b8:d3:84:91:ad:92:1b:4c:e3:c2:d3:8f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 5 23:55:40 2026 GMT
Not After : Feb 5 00:00:40 2027 GMT
Subject: CN=E975DA160D2BEC20E2B9A9D83311D8E587BC73F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d0:27:95:5f:f8:5d:b5:9a:3d:d0:e6:01:5a:
31:1f:89:b5:78:e3:0b:a6:ea:a2:7c:6f:a8:85:d9:
5e:6a:61:83:98:bf:b6:bf:23:08:d5:bb:6c:31:c1:
ee:08:ea:fb:7f:11:48:69:62:ca:54:4a:29:cc:24:
61:68:34:a8:af:b1:ab:e5:68:a3:13:59:d5:f4:0c:
18:53:c1:65:ce:49:34:82:51:ef:37:5a:b4:f5:f2:
3b:a5:86:2e:52:06:a2:f3:14:36:3e:f4:e8:45:99:
64:11:f2:92:5f:9c:8c:23:fa:bb:70:81:47:8f:df:
79:9e:5d:01:da:5b:54:89:3a:eb:04:bb:d3:37:84:
ee:50:90:95:f3:a2:79:39:11:d9:80:f0:dd:32:36:
9c:66:cf:c6:7b:1d:c9:27:0d:7d:bd:a1:b8:7a:0a:
a7:2a:7b:ec:79:00:68:de:df:45:64:7f:7d:cf:7a:
41:bc:41:7f:d7:5f:3b:92:4c:21:c2:93:d5:04:de:
a2:a3:50:7e:75:a5:60:d1:43:ed:90:09:be:86:9f:
71:6a:23:da:4e:ad:5e:31:fe:3f:ed:d0:82:16:8b:
24:a5:99:aa:92:12:73:28:44:22:43:3f:62:25:99:
53:6e:f6:62:da:b6:cf:fe:5d:73:b1:41:a6:da:f3:
cf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:75:DA:16:0D:2B:EC:20:E2:B9:A9:D8:33:11:D8:E5:87:BC:73:F8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS64289.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.43.0/24
Signature Algorithm: sha256WithRSAEncryption
65:c9:be:f2:a6:d3:e9:d7:e2:fa:9d:24:a7:8b:b6:08:27:4a:
15:c6:42:49:ab:2d:1b:be:9a:95:ef:0e:65:b3:de:15:cd:56:
88:8d:9d:18:02:48:5d:83:51:69:ed:e3:6a:f0:3e:15:af:26:
48:9e:ae:f2:ca:35:5d:ff:cd:24:50:d2:18:23:06:4a:f4:bb:
4b:30:40:55:59:bd:b2:4c:75:77:a6:e0:52:bc:3d:b0:93:9c:
c4:f4:68:d5:12:d1:3e:f9:1a:4e:50:49:37:e9:9d:f3:62:e4:
48:12:65:d7:b4:38:b3:55:94:f8:cb:d3:c4:58:97:ef:c7:0f:
c8:49:59:f4:e7:56:ce:96:8a:46:04:2c:3c:57:39:49:ad:22:
92:85:d9:18:11:4b:73:d3:88:01:8c:04:51:96:40:74:ff:ef:
d5:45:b6:fb:6a:0c:36:1c:c2:7a:dc:9a:31:bc:59:a5:15:c1:
8f:50:0a:d5:70:5e:d2:c5:a1:f1:24:de:e8:c0:8a:fc:45:b1:
4e:de:ec:40:6c:f9:dd:79:62:9d:1b:f1:7f:53:1e:6f:1a:e8:
e9:7e:53:75:18:ba:18:87:56:39:cb:77:ff:3c:e5:4a:1a:c8:
96:5b:ed:f8:0a:83:95:24:01:0f:57:07:7b:f1:cb:de:b8:31:
dc:cb:4b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:13:15 2026 by rpki-client