Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS64267.roa
File: AS64267.roa (raw, json)
Hash identifier: OvQRrM16hY6sJbumXmgL64wBjaISXUm40huPHNQhGjU=
Subject key identifier: 99:8B:88:7A:5B:07:E8:E0:E3:6E:D2:CC:41:FC:8B:F1:CB:9C:DD:A9
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 42B830F76DC0410CE3674F40551D980930084CC8
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS64267.roa
Signing time: Wed 07 Oct 2026 04:46:17 +0000
ROA not before: Wed 07 Oct 2026 04:41:17 +0000
ROA not after: Wed 06 Oct 2027 04:46:17 +0000
asID: 64267
IP address blocks: 92.112.141.0/24 maxlen: 24
92.113.106.0/24 maxlen: 24
92.113.215.0/24 maxlen: 24
95.135.12.0/24 maxlen: 24
95.135.19.0/24 maxlen: 24
95.135.25.0/24 maxlen: 24
95.135.183.0/24 maxlen: 24
178.92.29.0/24 maxlen: 24
178.92.158.0/24 maxlen: 24
178.92.195.0/24 maxlen: 24
178.92.219.0/24 maxlen: 24
178.92.246.0/24 maxlen: 24
178.93.30.0/24 maxlen: 24
178.93.230.0/24 maxlen: 24
178.93.232.0/24 maxlen: 24
178.95.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:b8:30:f7:6d:c0:41:0c:e3:67:4f:40:55:1d:98:09:30:08:4c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 7 04:41:17 2026 GMT
Not After : Oct 6 04:46:17 2027 GMT
Subject: CN=998B887A5B07E8E0E36ED2CC41FC8BF1CB9CDDA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:be:e9:d1:4b:26:d1:1a:cd:74:bc:99:39:
4b:cc:1a:fa:43:3e:e9:a2:92:6b:3e:8d:32:7f:ce:
97:a7:51:6b:52:fd:43:f8:9b:ec:b3:f5:c1:62:b2:
34:4b:b4:af:6c:9f:3f:66:5a:3c:01:ce:39:78:a5:
56:ee:52:ce:24:55:33:fd:da:92:88:9d:ed:cc:28:
8b:a4:02:49:66:d3:0d:af:5b:51:db:d9:d9:f0:81:
fb:dc:57:eb:a0:b4:9a:a3:bb:12:d0:54:fb:a5:d5:
55:6e:4f:61:bc:fc:3f:2a:54:99:c2:57:79:30:4e:
5c:12:37:b7:7c:26:03:fb:80:15:12:f2:26:34:b4:
0c:9a:95:be:66:49:d4:fc:cd:92:e0:fc:e1:da:30:
04:a2:86:6c:2a:c6:e2:99:06:02:26:63:7b:8e:2c:
0f:33:39:ba:04:e6:f2:f4:55:94:0a:ae:7c:cf:70:
98:aa:c1:ae:cd:82:c9:8d:b2:1f:ad:09:0f:15:56:
74:d6:fb:cb:eb:7e:3e:90:d2:c0:e8:d5:65:18:a6:
39:9c:c1:32:30:b1:1d:87:07:0b:ef:2d:35:a1:1d:
b2:5a:47:26:d1:2d:9d:68:22:14:f1:39:7d:c3:77:
b5:a7:67:df:7f:20:33:e8:47:a5:84:2f:c2:e8:4f:
e5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8B:88:7A:5B:07:E8:E0:E3:6E:D2:CC:41:FC:8B:F1:CB:9C:DD:A9
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS64267.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.141.0/24
92.113.106.0/24
92.113.215.0/24
95.135.12.0/24
95.135.19.0/24
95.135.25.0/24
95.135.183.0/24
178.92.29.0/24
178.92.158.0/24
178.92.195.0/24
178.92.219.0/24
178.92.246.0/24
178.93.30.0/24
178.93.230.0/24
178.93.232.0/24
178.95.225.0/24
Signature Algorithm: sha256WithRSAEncryption
00:f3:b1:34:1e:c5:46:ea:e5:1f:08:c8:27:f7:53:9f:63:0e:
d7:2f:78:fe:ea:38:36:07:64:55:50:b7:2e:50:4d:6b:d9:b5:
f9:72:74:bb:44:4b:63:e3:03:9f:bf:52:37:78:f4:21:fa:21:
05:c0:b9:7e:6a:52:50:bb:72:a4:65:cb:66:4c:24:72:70:65:
8b:f4:27:d1:22:25:bf:90:80:6b:2b:e9:6f:21:9b:fd:e5:f0:
4a:0b:2d:b0:4e:22:4e:79:37:df:01:df:4d:66:5a:75:30:34:
e3:1d:5f:7d:4b:75:e7:76:79:29:56:50:e4:88:8a:32:72:1b:
69:a4:7a:82:e6:34:51:73:01:7d:fb:9d:05:62:9e:3f:e7:0f:
78:ea:6d:e4:6d:ca:ad:e3:b2:96:57:c5:b1:db:43:7f:65:a7:
ff:72:cf:8e:6e:30:f6:df:40:63:e2:a2:e1:47:8e:e2:18:66:
36:b7:ac:6d:f9:e2:2a:34:78:16:ce:2a:80:bd:30:8d:78:a5:
1a:fa:ef:f7:53:be:44:3c:00:54:6a:bf:a9:51:55:e4:a1:55:
85:77:8a:3c:75:a6:77:f7:7a:2a:f2:29:bf:03:b8:35:05:55:
6a:c3:bf:fa:4d:79:76:16:44:26:cf:0e:54:f5:a1:77:22:85:
3a:44:ff:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 06:35:27 2026 by rpki-client