Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS48529.roa
File: AS48529.roa (raw, json)
Hash identifier: 8U1c+6SuIHCqh0VVIXEvoDUTrCr5AMXdQkUkpaED9tw=
Subject key identifier: 49:9A:05:66:D5:D5:37:06:17:0A:8C:66:ED:72:11:05:9A:76:5C:AF
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 227F003E1D593D8419333052DBC06E677431102D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS48529.roa
Signing time: Mon 21 Sep 2026 11:14:52 +0000
ROA not before: Mon 21 Sep 2026 11:09:52 +0000
ROA not after: Mon 20 Sep 2027 11:14:52 +0000
asID: 48529
IP address blocks: 96.62.76.0/24 maxlen: 24
96.62.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:7f:00:3e:1d:59:3d:84:19:33:30:52:db:c0:6e:67:74:31:10:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 21 11:09:52 2026 GMT
Not After : Sep 20 11:14:52 2027 GMT
Subject: CN=499A0566D5D53706170A8C66ED7211059A765CAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:84:3e:8f:1b:1a:fc:25:da:fb:c7:66:ab:81:
d2:2c:7b:5e:05:1c:a7:d9:b0:ab:5c:c2:81:12:b0:
78:9f:6d:38:8a:8b:13:ba:bf:84:a8:ee:86:bf:8d:
9e:98:b1:d9:c8:be:54:a0:62:64:44:60:7b:ba:ed:
db:31:6a:60:c1:a7:ec:14:9f:0e:79:9b:b7:cf:53:
2b:2b:7a:62:51:f6:41:e4:b4:91:3d:52:15:e9:50:
74:6b:07:78:17:df:22:b7:02:23:fa:ea:1f:c9:84:
80:d5:16:8f:7f:2b:c2:fb:31:41:55:e2:8c:8c:ea:
42:03:17:3d:a1:4b:06:27:0e:b7:ac:47:34:98:ca:
74:7b:93:a2:60:05:a7:7e:3c:1a:a5:c4:c7:9b:77:
ee:60:cd:75:bc:5f:aa:37:18:cd:e8:fc:fd:d8:c4:
11:d7:55:52:80:53:e0:f6:15:9e:77:d1:6c:d7:5c:
a4:67:60:93:97:52:29:6f:9d:be:3d:d2:74:00:e7:
3a:5e:ad:a6:93:66:af:db:cb:85:46:d4:92:33:af:
ec:62:b4:1b:d7:b1:2d:ef:74:3d:db:5f:0b:ad:ad:
1f:3f:1b:ef:6d:4e:91:eb:ca:25:9f:18:e0:88:14:
9a:4a:52:f4:d8:d5:6e:2e:c3:6e:d5:1c:f9:80:68:
cb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9A:05:66:D5:D5:37:06:17:0A:8C:66:ED:72:11:05:9A:76:5C:AF
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS48529.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.76.0/24
96.62.89.0/24
Signature Algorithm: sha256WithRSAEncryption
92:fa:ea:94:18:f5:52:e1:77:84:bd:5f:77:f0:8d:76:5c:14:
24:5b:53:b0:40:35:32:ef:2c:bb:35:5f:52:55:b3:ed:af:e6:
d3:18:72:35:98:0f:27:06:64:fb:37:8c:bd:40:63:52:b7:6c:
11:e6:a4:eb:2c:df:18:eb:91:27:c1:96:b3:68:e7:4b:90:db:
43:ac:8b:18:56:de:10:eb:33:bd:6f:91:f8:b8:80:19:ee:df:
dc:c5:1d:a2:3c:b0:e5:6a:65:c2:44:00:ac:f3:c5:82:09:e9:
7e:93:67:49:dd:b5:81:c7:d6:f7:ee:78:7b:d0:63:75:a4:19:
cb:69:d9:3b:02:03:b0:bf:35:da:bb:9a:94:63:4b:20:9c:c2:
fa:6b:46:be:a1:cc:75:ad:4a:3f:f3:d5:71:96:5e:6a:a4:dc:
37:1e:e9:3e:4b:ee:91:eb:53:ce:2d:5c:3e:d5:01:3f:da:09:
fe:cd:53:5e:70:ed:7e:f9:a2:43:6c:8b:75:aa:03:d7:43:27:
cf:8a:65:ba:01:b7:22:d9:ff:40:c4:4c:0a:bd:ee:ed:cd:a7:
37:aa:1b:52:d8:dd:f6:34:52:01:ae:a3:1a:a2:ac:f5:e9:4b:
18:a9:ce:83:cb:c7:45:2c:4e:49:e9:8d:14:c2:85:21:a1:be:
1c:80:6f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:34:37 2026 by rpki-client