Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS64267.roa
File: AS64267.roa (raw, json)
Hash identifier: 9ZYBQUqss5ciNC7gyqEtunsdSYKhFCMFwKdSEi00z9o=
Subject key identifier: DB:F0:76:E1:1B:19:1B:DA:49:C5:C4:D5:BE:87:08:26:6E:16:05:71
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0B7F3FF1DBF47940F1F1FF1EC54C3A14DF417A3F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS64267.roa
Signing time: Wed 16 Sep 2026 06:38:17 +0000
ROA not before: Wed 16 Sep 2026 06:33:17 +0000
ROA not after: Wed 15 Sep 2027 06:38:17 +0000
asID: 64267
IP address blocks: 92.112.141.0/24 maxlen: 24
92.113.106.0/24 maxlen: 24
92.113.215.0/24 maxlen: 24
95.135.12.0/24 maxlen: 24
95.135.19.0/24 maxlen: 24
95.135.25.0/24 maxlen: 24
95.135.183.0/24 maxlen: 24
178.92.158.0/24 maxlen: 24
178.92.195.0/24 maxlen: 24
178.92.219.0/24 maxlen: 24
178.92.246.0/24 maxlen: 24
178.93.30.0/24 maxlen: 24
178.93.230.0/24 maxlen: 24
178.93.232.0/24 maxlen: 24
178.95.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:7f:3f:f1:db:f4:79:40:f1:f1:ff:1e:c5:4c:3a:14:df:41:7a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 16 06:33:17 2026 GMT
Not After : Sep 15 06:38:17 2027 GMT
Subject: CN=DBF076E11B191BDA49C5C4D5BE8708266E160571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8d:57:4b:e3:4c:b6:bf:11:9e:2b:75:30:5e:
c0:10:f5:5e:d3:6c:d8:d5:ad:3d:1d:20:33:2a:fe:
9c:ca:82:e9:e7:55:63:58:9e:1c:0d:6a:b1:89:30:
84:04:71:cb:c0:4b:75:23:9d:09:06:22:2a:d1:8f:
d6:89:9f:74:f8:1f:d4:b4:db:aa:9e:18:52:2b:1b:
18:3b:5a:a9:78:4d:67:a1:ee:50:36:05:a6:0a:aa:
9c:7c:80:3b:7f:b4:d2:64:6d:43:a0:60:62:5f:c2:
ab:9f:fc:db:33:c7:30:ae:f9:7b:58:07:bd:ea:78:
89:7a:9a:44:05:8b:81:82:43:66:55:ef:3f:25:12:
e0:e3:e0:4d:46:3a:07:a6:49:94:cb:db:58:7f:81:
e1:ac:fd:d5:8e:98:a6:aa:4b:e0:1b:15:37:2c:4b:
09:ab:16:cb:e9:7a:80:24:9b:c0:2c:bd:46:a3:38:
13:76:e0:6a:a8:72:65:03:26:e5:41:2d:d0:07:a0:
ae:ce:50:82:1f:1c:95:4b:94:3e:a1:87:66:7d:0b:
53:eb:46:55:2d:b8:64:f4:eb:00:68:48:3a:8b:56:
ac:1c:fd:0c:de:fa:c3:31:29:26:e2:eb:66:df:11:
2a:b9:e8:bb:7e:6b:48:2e:1e:50:1c:34:a1:d5:63:
b0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F0:76:E1:1B:19:1B:DA:49:C5:C4:D5:BE:87:08:26:6E:16:05:71
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS64267.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.141.0/24
92.113.106.0/24
92.113.215.0/24
95.135.12.0/24
95.135.19.0/24
95.135.25.0/24
95.135.183.0/24
178.92.158.0/24
178.92.195.0/24
178.92.219.0/24
178.92.246.0/24
178.93.30.0/24
178.93.230.0/24
178.93.232.0/24
178.95.225.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:0a:9d:8e:c6:68:34:1a:9c:90:ea:2f:53:0a:f0:64:19:6a:
34:57:ce:55:66:d4:1e:20:0b:7e:95:0b:77:8e:0d:b5:58:dc:
af:c8:f5:aa:a1:89:9d:74:bb:af:05:58:3e:0c:2b:c8:31:d8:
03:47:aa:87:5c:39:ee:cb:11:20:f6:98:18:3c:06:3f:1d:61:
a5:7c:3c:22:6f:ef:6d:52:88:47:d0:89:d7:06:c2:60:be:4a:
07:20:f2:e3:c9:33:fe:e1:9e:09:19:0f:77:cd:cd:1e:f6:e3:
a7:62:89:98:c9:2c:4f:e9:be:d4:0d:14:89:80:09:f6:46:43:
7f:01:15:96:c4:3f:43:b2:9d:c5:c8:83:54:b0:8a:33:7b:80:
40:81:3e:a4:6d:e1:a3:a1:99:fa:6f:55:db:44:e9:5d:f5:b1:
ef:4f:33:86:16:b8:7a:a7:87:98:eb:dc:32:73:e9:81:26:05:
6a:e0:ee:fe:76:dc:f8:6d:2b:ac:73:20:e5:03:b9:e1:af:69:
05:96:46:34:b2:98:b7:e2:ec:75:7d:49:88:e6:b8:ab:40:77:
99:54:6f:18:16:95:df:8c:ae:6d:d3:07:e0:48:53:46:1f:53:
32:a5:e7:e8:ce:4c:89:99:bd:c6:29:0f:a4:ec:5e:2d:e1:a6:
40:02:34:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:31:58 2026 by rpki-client