Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS46450.roa
File: AS46450.roa (raw, json)
Hash identifier: QNwTR5phB4uFi26/uNn69WY0rZLEhO2NuZG2X0/GwVU=
Subject key identifier: EB:5D:5F:C8:BF:3C:97:33:4E:C8:59:2C:04:EE:79:8B:01:30:3B:74
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4C33146A7D7DA6C4B03090368D91901E27C11045
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS46450.roa
Signing time: Sun 21 Sep 2025 00:04:15 +0000
ROA not before: Sat 20 Sep 2025 23:59:15 +0000
ROA not after: Sun 20 Sep 2026 00:04:15 +0000
asID: 46450
IP address blocks: 140.150.184.0/21 maxlen: 24
140.150.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:33:14:6a:7d:7d:a6:c4:b0:30:90:36:8d:91:90:1e:27:c1:10:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 20 23:59:15 2025 GMT
Not After : Sep 20 00:04:15 2026 GMT
Subject: CN=EB5D5FC8BF3C97334EC8592C04EE798B01303B74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:01:91:3b:38:8d:40:6d:a4:59:6d:95:b0:7d:
6a:ed:91:bd:c5:0a:eb:5b:5a:af:83:dc:8d:62:65:
aa:24:7c:23:78:38:d2:fd:63:f5:88:cb:98:10:00:
95:0e:03:50:0e:2a:53:1e:42:ab:df:f3:f4:52:53:
44:fc:85:e7:39:65:3c:42:39:3f:e2:9c:1e:16:4f:
ad:3d:e5:c1:ca:cf:6f:b3:f7:27:f9:0e:6d:9e:01:
b3:ca:7b:a1:a8:da:5a:48:bc:38:53:e7:dc:6e:be:
ca:94:3f:3a:b1:78:26:e4:d1:be:a9:5d:34:aa:0b:
6c:cc:58:02:e6:e0:3a:b6:68:13:08:a7:a8:76:71:
21:d2:f8:b5:be:e5:10:18:00:5f:fb:1a:a2:89:eb:
36:91:1a:9a:c0:4c:7e:97:b9:d1:16:ae:a5:b1:71:
ff:15:8d:c7:28:a1:60:3c:65:87:ed:e0:59:9c:6e:
db:97:7d:55:a7:aa:15:80:5d:db:a1:b1:30:cf:48:
18:76:c8:39:df:36:56:4e:05:92:fd:aa:2c:d9:50:
2e:9b:96:5c:0e:8a:b0:b9:af:ff:4e:7f:10:82:99:
53:f7:57:50:4f:0b:b6:1e:e4:28:6b:ca:07:9c:6c:
49:3a:d8:e0:ae:21:51:6e:de:b7:50:41:a9:dc:e3:
73:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5D:5F:C8:BF:3C:97:33:4E:C8:59:2C:04:EE:79:8B:01:30:3B:74
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS46450.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.184.0/21
140.150.228.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:3a:ed:d6:f0:ed:23:d8:70:d9:10:84:6b:5c:a9:d1:21:9f:
2c:57:08:15:01:b2:f7:09:f7:84:c1:64:65:c3:16:39:b7:88:
20:58:83:d5:e4:26:fb:cb:6d:83:d8:0d:6d:d0:0d:fe:4c:f0:
d8:92:17:9d:34:08:c0:05:14:d0:88:4c:10:c8:13:79:53:a4:
7d:99:ae:3b:43:81:e4:ab:05:2e:c3:85:53:4e:9e:3a:dc:b2:
8f:37:a7:70:d5:cb:59:69:e7:23:38:7d:be:21:7a:38:d4:20:
9e:4d:8e:14:0d:41:56:87:1e:43:c2:a7:cd:36:9f:c4:0d:cc:
f6:db:a5:cb:05:5c:2e:8f:56:97:df:16:69:9d:6e:04:6e:e6:
4b:ce:71:61:95:7e:e4:22:0b:87:52:67:62:a2:d9:6a:37:b1:
1c:9c:38:c2:10:d4:90:af:9b:33:c5:35:be:c3:2b:94:df:e2:
f0:7e:fe:a3:b7:cc:41:e1:13:16:d0:c4:b0:4a:8d:0b:de:61:
10:89:01:a0:fa:a6:bf:31:e0:9a:94:98:ed:99:91:2b:72:de:
76:a2:c2:61:d3:84:f4:87:ea:b5:d5:f4:91:81:0b:5d:f1:6a:
3b:8e:2b:0f:07:86:66:48:64:8b:c4:5f:d9:d4:a9:e8:d6:e4:
3c:3a:39:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:50:35 2025 by rpki-client