Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS48529.roa
File: AS48529.roa (raw, json)
Hash identifier: sJ45dfFVodPhRxdb0JyOxMSCrixBQNlBAeJLRTx5cnI=
Subject key identifier: 79:38:80:C6:76:CF:31:F5:B3:36:97:C7:44:C7:77:A2:A8:3A:AB:D1
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 29971BFEB212147B7282ED2FB22D7D922F491B87
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS48529.roa
Signing time: Mon 21 Sep 2026 11:14:53 +0000
ROA not before: Mon 21 Sep 2026 11:09:53 +0000
ROA not after: Mon 20 Sep 2027 11:14:53 +0000
asID: 48529
IP address blocks: 46.236.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:97:1b:fe:b2:12:14:7b:72:82:ed:2f:b2:2d:7d:92:2f:49:1b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 21 11:09:53 2026 GMT
Not After : Sep 20 11:14:53 2027 GMT
Subject: CN=793880C676CF31F5B33697C744C777A2A83AABD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:83:ef:1c:b8:97:e2:dd:7e:2d:ea:b2:22:46:
a1:51:30:79:b6:72:d9:f7:ba:f7:aa:05:dd:81:db:
cd:2e:d4:3e:8a:83:45:52:51:6b:5f:22:52:f9:4c:
ea:2d:7e:71:86:15:15:4d:c9:37:af:31:cb:86:43:
cf:fc:5d:17:58:1b:f8:20:23:5b:71:84:45:11:97:
3f:f7:7f:a2:4a:1b:ed:17:14:9d:d2:0f:e2:8b:3d:
9b:fb:4c:9c:6b:b4:b9:c5:00:cb:ab:79:27:2b:2a:
14:36:92:f0:17:89:a3:3f:7c:e6:41:5e:d1:a0:53:
49:5c:e5:f0:02:02:ed:9d:45:ba:93:ce:36:43:1b:
06:a0:1f:92:92:56:29:21:9d:23:68:90:43:d9:14:
00:3b:15:47:11:bd:ae:21:d8:57:1b:fb:04:2f:61:
9e:09:9c:0d:94:32:ef:d7:01:70:cc:81:a0:dc:b5:
61:9c:e5:a2:ff:66:c9:4d:09:09:09:bb:5f:54:a6:
64:ec:b3:48:df:a4:ba:4f:6c:b9:df:2d:bf:6d:51:
28:27:1f:fa:33:2b:2e:06:cf:e0:e4:8e:9a:bb:d8:
cb:24:16:36:bd:64:11:62:07:e2:71:2b:27:a2:44:
6d:27:b3:49:a4:a1:20:de:7b:35:04:4e:22:ec:9f:
9a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:38:80:C6:76:CF:31:F5:B3:36:97:C7:44:C7:77:A2:A8:3A:AB:D1
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS48529.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.203.0/24
Signature Algorithm: sha256WithRSAEncryption
40:c4:bf:bd:f6:2d:83:e3:bc:95:f6:e2:da:64:a4:ae:8d:66:
f9:99:63:91:42:84:f0:6a:f6:24:38:a2:06:63:74:0e:a8:4f:
30:33:3e:e6:1a:54:70:92:84:59:e2:9e:8c:dd:c2:21:9c:90:
5d:97:53:45:f1:06:16:8c:51:ef:c3:83:f5:de:29:02:25:26:
25:36:74:82:c4:cb:96:fa:fd:8e:09:d6:f7:b5:8c:42:3c:6e:
62:80:7f:5f:26:28:c9:df:b2:2c:a9:ed:93:5e:11:52:16:be:
3a:fd:70:46:42:52:fb:e2:13:da:7d:83:0e:06:53:36:a0:f0:
54:44:a3:ca:65:d6:1f:2a:16:c5:70:a7:8c:f1:54:36:76:ce:
d1:a4:f3:8a:05:ec:76:7c:52:9d:19:54:1c:9c:9b:ad:7d:71:
51:bf:8d:fc:8b:ac:65:fe:2f:7e:c8:78:a3:a3:cd:83:f3:31:
f0:c9:f2:6a:8f:84:da:55:93:f2:34:27:94:4d:83:d4:6b:3e:
e5:93:87:4c:8b:d7:cc:6e:ad:11:35:08:a7:b1:3f:fa:99:2f:
34:b1:59:f4:af:78:cd:76:18:6e:db:b2:b3:f4:a6:0d:3a:ed:
fb:b9:78:a5:9b:48:cd:8e:b0:3d:25:c6:a0:a1:83:c0:aa:be:
48:33:01:f1
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUKZcb/rISFHtygu0vsi19ki9JG4cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNjA5MjExMTA5NTNaFw0yNzA5MjAxMTE0NTNaMDMxMTAvBgNV
BAMTKDc5Mzg4MEM2NzZDRjMxRjVCMzM2OTdDNzQ0Qzc3N0EyQTgzQUFCRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYg+8cuJfi3X4t6rIiRqFRMHm2
ctn3uveqBd2B280u1D6Kg0VSUWtfIlL5TOotfnGGFRVNyTevMcuGQ8/8XRdYG/gg
I1txhEURlz/3f6JKG+0XFJ3SD+KLPZv7TJxrtLnFAMureScrKhQ2kvAXiaM/fOZB
XtGgU0lc5fACAu2dRbqTzjZDGwagH5KSVikhnSNokEPZFAA7FUcRva4h2Fcb+wQv
YZ4JnA2UMu/XAXDMgaDctWGc5aL/ZslNCQkJu19UpmTss0jfpLpPbLnfLb9tUSgn
H/ozKy4Gz+Dkjpq72MskFja9ZBFiB+JxKyeiRG0ns0mkoSDeezUETiLsn5rDAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUeTiAxnbPMfWzNpfHRMd3oqg6q9EwHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt
NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTNDg1Mjkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAu7Msw
DQYJKoZIhvcNAQELBQADggEBAEDEv732LYPjvJX24tpkpK6NZvmZY5FChPBq9iQ4
ogZjdA6oTzAzPuYaVHCShFninozdwiGckF2XU0XxBhaMUe/Dg/XeKQIlJiU2dILE
y5b6/Y4J1ve1jEI8bmKAf18mKMnfsiyp7ZNeEVIWvjr9cEZCUvviE9p9gw4GUzag
8FREo8pl1h8qFsVwp4zxVDZ2ztGk84oF7HZ8Up0ZVBycm619cVG/jfyLrGX+L37I
eKOjzYPzMfDJ8mqPhNpVk/I0J5RNg9RrPuWTh0yL18xurRE1CKexP/qZLzSxWfSv
eM12GG7bsrP0pg067fu5eKWbSM2OsD0lxqChg8CqvkgzAfE=
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:34:27 2026 by rpki-client