Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS265919.roa
File: AS265919.roa (raw, json)
Hash identifier: xHOqS7aIoT7PP1ykpCd/pogeLV8LC75GM0XNz+FPzDc=
Subject key identifier: 07:4F:0C:53:31:85:FF:D1:3C:D7:5B:0F:5D:08:2E:01:99:1D:B5:47
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 4D1A98759B3BE4B19F44C1459642045EF32AC2C1
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS265919.roa
Signing time: Wed 28 Oct 2026 19:05:17 +0000
ROA not before: Wed 28 Oct 2026 19:00:17 +0000
ROA not after: Wed 27 Oct 2027 19:05:17 +0000
asID: 265919
IP address blocks: 45.146.81.0/24 maxlen: 24
45.157.16.0/24 maxlen: 24
147.78.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:1a:98:75:9b:3b:e4:b1:9f:44:c1:45:96:42:04:5e:f3:2a:c2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 28 19:00:17 2026 GMT
Not After : Oct 27 19:05:17 2027 GMT
Subject: CN=074F0C533185FFD13CD75B0F5D082E01991DB547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e6:cf:c2:76:ac:d4:d0:29:45:9d:34:3f:81:
37:59:92:66:cb:b2:15:cf:61:e0:a2:51:fa:cf:11:
09:ee:19:77:35:94:da:72:26:b1:40:b8:9e:ce:df:
f5:46:07:4d:20:6f:9b:8e:b8:1c:34:ef:0c:d2:07:
cc:8c:6a:33:65:70:8c:d0:07:99:6d:77:56:52:72:
9a:65:8d:bb:65:c0:ac:b7:d6:10:cc:18:b8:f6:87:
44:45:13:81:d1:9a:65:81:82:91:da:cb:01:8e:d8:
24:fc:a7:1c:22:63:f6:e2:fe:36:9a:4b:e7:4a:86:
ba:eb:40:f5:ec:4b:7d:10:5c:32:f5:5f:50:59:6d:
aa:6a:b1:86:72:09:b4:99:69:64:10:e9:af:2e:9a:
ca:c0:3b:3c:b4:ce:17:47:36:16:07:ed:2c:5d:55:
9e:9b:a9:f6:ad:9c:ef:47:0b:d8:c7:b5:14:b3:f4:
5e:35:0f:58:73:28:4b:c2:8f:5f:86:4e:1c:11:67:
37:9a:12:20:58:db:a9:d0:1e:1b:a3:09:37:b9:a7:
f9:b5:4b:9a:4f:26:47:27:a3:39:ee:63:c5:6f:5b:
a1:8a:a9:5f:39:e4:a2:68:9e:1f:32:cb:f6:c0:4a:
17:06:31:b8:09:95:04:ce:75:bb:fb:c5:f7:83:a6:
ed:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4F:0C:53:31:85:FF:D1:3C:D7:5B:0F:5D:08:2E:01:99:1D:B5:47
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS265919.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.81.0/24
45.157.16.0/24
147.78.123.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:27:83:cb:72:c7:ed:88:98:ff:31:57:2c:b0:09:91:8b:39:
4b:53:18:6e:65:9b:fc:82:47:58:ea:b2:6c:ee:4d:e5:14:a3:
d9:b8:6a:9f:05:01:a1:f8:5a:e0:0d:43:53:b9:8b:4b:c2:b0:
ce:b8:58:dd:d4:73:33:b8:71:64:b8:67:eb:d8:21:bf:74:3a:
cf:8b:41:7a:ee:9e:34:2e:bf:8e:0c:6d:7e:7d:2e:44:db:15:
10:d1:2f:cb:7d:9d:a3:40:8c:ae:b7:61:e7:15:e4:41:c8:7f:
9a:18:aa:85:0f:07:c9:8b:2e:59:76:0d:f0:8a:fc:75:0a:24:
12:ff:5d:ac:1f:3c:27:4f:c1:94:aa:bc:d3:67:26:51:28:88:
37:48:4a:24:2e:6f:08:b9:84:76:b8:63:4e:83:e3:ec:9f:3f:
28:20:3a:83:ab:14:65:6a:5e:6a:a1:5f:2e:ec:66:7f:ec:f6:
63:93:8f:23:c1:99:31:2c:ec:54:c8:8e:85:35:d5:bf:f3:90:
03:34:06:48:2b:ae:e9:78:ae:d5:f6:e3:a4:03:85:69:af:f4:
71:bd:2d:c2:27:bb:70:b6:75:d9:39:f5:9f:67:ae:c0:34:12:
f2:8a:c6:a6:7d:e4:e7:76:4d:c1:f5:52:1a:eb:8c:82:66:00:
2d:77:3d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:24:40 2026 by rpki-client