Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS44620.roa
File: AS44620.roa (raw, json)
Hash identifier: NChPvaK3JdNu6qT57qsUqmmcrQBEqu1GKtvtEpXmouo=
Subject key identifier: 44:03:D9:70:27:17:4A:21:2C:C3:24:F3:30:38:E6:83:85:AC:74:9D
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 749A87499C439867BAFB4FC2C5DF0AC0DA7C3A36
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS44620.roa
Signing time: Sat 04 Jul 2026 08:02:02 +0000
ROA not before: Sat 04 Jul 2026 07:57:02 +0000
ROA not after: Sat 03 Jul 2027 08:02:02 +0000
asID: 44620
IP address blocks: 37.221.79.0/24 maxlen: 24
212.87.198.0/24 maxlen: 24
212.87.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:9a:87:49:9c:43:98:67:ba:fb:4f:c2:c5:df:0a:c0:da:7c:3a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Jul 4 07:57:02 2026 GMT
Not After : Jul 3 08:02:02 2027 GMT
Subject: CN=4403D97027174A212CC324F33038E68385AC749D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cb:d8:69:ba:df:14:50:95:42:7c:6c:fb:00:
bb:96:da:a8:f8:f9:70:be:2d:a3:f8:4d:41:8f:d1:
d4:0d:d6:0e:08:57:47:2d:4e:9d:3f:dd:e2:12:05:
de:a8:3e:1a:7c:7f:bf:6f:37:6c:8b:a8:78:68:4c:
db:48:03:60:7d:d3:84:f9:dc:25:33:31:7d:b3:11:
27:72:a5:aa:b0:4c:86:46:99:ef:54:b9:fa:17:8a:
3c:f8:bb:05:e7:06:cb:8a:3e:86:5a:05:81:cc:db:
3b:d0:72:ef:f5:4f:b2:f6:c9:29:ea:7d:eb:e7:ff:
57:86:88:7d:84:50:11:63:31:ad:aa:ae:3f:a6:8c:
8b:2b:88:01:a7:b5:25:a7:b1:78:12:70:67:59:fe:
66:f9:90:91:8f:19:d4:6e:51:25:04:e0:99:30:b5:
4e:c1:55:b6:73:f7:5e:f1:09:78:41:b1:b3:bc:3d:
72:ea:39:83:6a:9d:a2:20:9d:69:44:bf:a7:90:e8:
c7:03:42:fe:5b:0e:5b:e6:d3:94:e3:ca:86:ab:c6:
7f:ed:74:e6:f1:4a:e9:bf:0d:5e:65:fb:22:30:90:
b4:7e:b1:e3:56:d6:14:7c:8c:7a:0b:b6:0a:72:a6:
50:fa:22:7f:fb:fa:2c:56:b2:7a:c8:b8:27:fa:36:
bd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:03:D9:70:27:17:4A:21:2C:C3:24:F3:30:38:E6:83:85:AC:74:9D
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS44620.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.79.0/24
212.87.198.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:f9:77:a5:fe:c3:ab:3b:74:fd:7d:7b:c7:ca:3e:42:d5:07:
b9:39:ff:5c:35:61:85:f7:b3:76:93:bd:ef:0c:a6:05:fd:c1:
db:44:31:68:23:84:97:91:de:01:1f:99:09:ff:c3:3a:57:47:
f4:49:77:5e:b8:58:d1:6e:d2:6e:1f:75:78:a2:70:04:85:12:
36:24:65:ea:b1:bb:ee:f4:f3:97:27:d2:04:c7:85:22:fe:57:
70:4c:3d:dd:ac:b4:5b:9e:1c:b5:bd:1e:23:22:53:be:3c:12:
1f:1c:9e:28:92:15:3c:0c:10:c9:67:ea:67:98:0b:10:e1:98:
c6:17:05:ca:60:55:b4:60:4e:d8:38:8e:83:c0:a3:73:14:cb:
bf:23:be:80:1f:0f:a9:5d:87:47:4f:42:54:23:5e:e2:05:47:
d3:1b:e3:6a:8c:db:dc:97:a3:90:49:d7:54:38:7f:44:7f:5d:
aa:c2:47:3c:2e:3a:a6:e5:0c:d8:52:54:69:41:9c:76:e7:6c:
d0:83:91:e6:3c:b5:c5:d8:2d:78:d1:92:3e:3b:17:78:e9:8a:
cd:3e:2d:0a:7f:4a:0e:47:dd:68:c4:56:de:c6:12:72:c7:b8:
25:e2:81:8a:02:87:af:b5:e9:b5:1f:39:03:ac:1c:3d:54:7a:
e8:8a:e8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:59:10 2026 by rpki-client