Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS44259.roa
File: AS44259.roa (raw, json)
Hash identifier: rfaBdUk6magTuDSvQIhuimmy10GVZZPJhtpbDdZbuaU=
Subject key identifier: 74:2B:1B:2C:38:4C:31:3D:AF:C8:D8:8C:D1:2E:45:5E:EE:E7:2F:4A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7F72C057BE2740C39F855E0EE0A47CDA92424A27
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS44259.roa
Signing time: Sat 31 Oct 2026 15:12:34 +0000
ROA not before: Sat 31 Oct 2026 15:07:34 +0000
ROA not after: Sat 30 Oct 2027 15:12:34 +0000
asID: 44259
IP address blocks: 168.222.17.0/24 maxlen: 24
168.222.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:72:c0:57:be:27:40:c3:9f:85:5e:0e:e0:a4:7c:da:92:42:4a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 31 15:07:34 2026 GMT
Not After : Oct 30 15:12:34 2027 GMT
Subject: CN=742B1B2C384C313DAFC8D88CD12E455EEEE72F4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9c:fc:70:39:cb:90:15:76:b2:f0:55:aa:72:
f5:8b:27:80:e5:c8:33:69:9a:08:08:a3:f0:0f:1a:
32:e7:80:0d:df:dc:d5:c4:77:4a:39:9d:f8:a0:db:
20:0d:f4:95:66:c4:73:1c:83:63:0e:43:dd:ed:80:
f6:6e:77:2b:c3:74:bb:bb:29:12:df:3e:7a:63:2b:
26:3e:07:06:21:8c:7a:77:ce:09:d5:18:6e:40:98:
5b:5c:37:83:3e:89:d8:55:0b:54:ae:46:b1:91:c2:
6e:6c:8b:81:6a:5a:0d:dc:04:ff:da:5d:d0:d1:d1:
2b:59:a3:2e:3d:a6:9f:a6:c0:8b:8e:ef:af:07:79:
2e:df:6a:04:31:fe:d2:52:d0:97:c8:2d:d2:c8:bf:
58:92:76:df:b5:07:93:cc:1b:94:3a:20:90:a6:ab:
02:6d:2c:d8:cb:13:1a:9d:fe:cb:c0:5e:4c:99:6a:
4d:70:f3:10:94:78:30:e8:ca:4f:37:8b:89:c0:26:
22:d8:b2:25:74:25:76:c1:b0:ff:8b:6b:6b:c5:06:
73:75:d6:ed:2a:00:2e:c8:42:47:73:93:cd:9f:49:
e1:6b:1c:ba:ec:82:d4:f2:f9:7b:3e:b7:64:84:93:
90:81:3a:43:57:d6:8a:fb:52:3f:d5:da:80:2c:3a:
5f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2B:1B:2C:38:4C:31:3D:AF:C8:D8:8C:D1:2E:45:5E:EE:E7:2F:4A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS44259.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.17.0/24
168.222.75.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:5a:f7:99:55:0f:61:96:6c:a4:79:52:a0:68:62:91:6c:ec:
ca:bc:aa:08:6d:ea:74:fd:48:8d:bb:78:72:9e:32:c6:e1:15:
de:d1:80:dc:12:f2:14:d6:95:90:6b:4e:1f:04:82:4b:79:c5:
43:d6:a7:ad:71:4a:ce:39:da:f6:f4:31:57:95:13:3f:0c:e1:
fc:5d:0f:74:90:23:38:a6:49:b8:a2:b9:3f:98:72:fd:ee:61:
f0:56:b3:ef:43:2f:eb:4d:c3:f2:e3:35:39:79:7e:6c:f0:7a:
2f:01:de:63:d9:0e:f6:30:0d:8d:bc:d7:74:83:6c:a3:00:fc:
32:e7:20:cb:5c:a3:a2:9b:7e:7c:b4:fa:72:0d:d0:b5:b1:0f:
a3:0e:68:9e:e9:d9:e4:fd:32:26:b2:0c:79:01:6a:61:38:4f:
bd:e5:ce:e5:c6:84:0f:13:1e:a3:5f:af:b6:2e:a6:5f:e1:ef:
01:80:a9:21:10:28:b9:67:78:7d:5b:48:a3:83:76:f0:06:2f:
c1:88:26:94:3b:e2:e8:02:0d:1d:79:e7:9b:ea:8e:17:32:1a:
1f:7c:3d:86:8e:ab:55:75:78:ee:3b:fb:c1:ac:b6:7f:f6:ca:
70:93:02:b8:7e:8d:9f:0a:35:0a:13:6a:28:bc:80:31:04:04:
5d:cb:5f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:06:30 2026 by rpki-client