Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS44259.roa
File: AS44259.roa (raw, json)
Hash identifier: hlg3luCsurfgjytpLZGWbY15yIoE0+w0HKiULz77JZw=
Subject key identifier: B6:03:E9:DC:CD:E3:56:79:F0:61:55:D2:DA:F5:AD:71:C2:DB:24:0B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 60B4DE84C0D101126311934CD58497A93C649C06
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS44259.roa
Signing time: Wed 23 Sep 2026 12:21:28 +0000
ROA not before: Wed 23 Sep 2026 12:16:28 +0000
ROA not after: Wed 22 Sep 2027 12:21:28 +0000
asID: 44259
IP address blocks: 82.47.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b4:de:84:c0:d1:01:12:63:11:93:4c:d5:84:97:a9:3c:64:9c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 23 12:16:28 2026 GMT
Not After : Sep 22 12:21:28 2027 GMT
Subject: CN=B603E9DCCDE35679F06155D2DAF5AD71C2DB240B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8a:9e:cd:a8:ec:92:17:c0:2e:2e:29:10:8b:
1a:6e:fa:55:97:79:46:eb:5f:ad:f7:a5:6b:3d:fe:
e1:10:7f:1a:d5:78:9a:3b:7c:9d:f4:1c:07:29:d1:
6f:6b:8b:e6:7b:3c:45:25:6e:28:21:ea:34:7c:96:
b5:9a:5d:55:e9:07:d4:22:16:8e:1a:20:f6:77:e3:
63:a5:f7:a4:c9:3f:03:c9:7b:2b:19:13:00:f4:70:
44:73:ae:c9:19:26:36:02:54:a1:6d:49:28:21:35:
ce:ad:1c:6a:f6:c8:4a:26:19:4d:cd:a1:ce:ce:5e:
86:2d:54:fb:b0:86:e1:fb:82:2e:03:2a:00:57:1d:
9e:87:06:a3:51:36:aa:71:11:7b:b7:b5:65:6e:21:
0e:53:17:b2:f1:e5:d5:ba:09:db:fd:ab:76:a3:f2:
1b:4c:aa:94:59:5e:51:94:6b:05:4b:ee:e5:d1:4b:
2a:be:c6:1a:29:0c:5a:e8:26:a9:fb:b6:83:93:a4:
51:f4:d9:82:82:e2:36:f1:5d:99:3c:61:68:07:df:
fb:0d:17:6b:f7:38:9b:6b:a5:96:bc:65:8c:7d:df:
10:71:3b:98:25:99:87:4d:dc:bf:ff:24:ee:d0:1c:
aa:da:c5:a5:52:bc:68:68:7e:fd:8e:9b:1f:ca:05:
19:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:03:E9:DC:CD:E3:56:79:F0:61:55:D2:DA:F5:AD:71:C2:DB:24:0B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS44259.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.165.0/24
Signature Algorithm: sha256WithRSAEncryption
08:f7:65:08:bc:5a:4b:96:c5:b1:ff:cf:56:86:02:fe:c7:91:
98:11:6d:1d:be:d2:c2:5f:6f:b3:f9:c7:c2:80:9a:c6:e2:67:
73:71:70:25:8b:f7:e4:1d:9b:59:33:78:69:a8:ee:cf:b9:35:
b5:a8:89:c1:3b:56:79:2f:b8:03:09:da:f5:b1:cc:44:94:64:
90:8a:5f:70:6d:8b:c2:eb:6b:d3:e7:c9:42:2b:18:11:f9:24:
63:c1:a3:0b:85:8c:5a:3d:3c:f3:b0:56:1f:dd:97:cd:6d:21:
ff:55:ac:8f:da:c1:a5:d2:26:a4:3d:31:a4:bb:51:73:73:ac:
1b:10:80:fc:c8:1c:e8:7b:35:47:24:84:fe:d8:02:35:48:d2:
ef:fd:4f:68:30:a3:6e:1b:e3:c8:59:06:d4:01:f9:59:cf:79:
50:a3:9a:c4:57:fe:31:4e:61:5a:5f:7f:45:bd:d5:d0:03:98:
81:e1:1e:65:89:a3:d0:f1:0e:c2:3a:10:66:3a:20:56:6d:c5:
89:2c:e6:9d:f6:c5:6d:aa:3a:b8:e4:58:2b:e3:08:80:e9:bd:
b9:82:69:37:22:10:13:46:d7:58:39:51:de:8c:4d:1d:45:20:
5d:7b:d7:ba:90:cb:a6:40:08:47:dd:a1:7a:f6:72:5d:0e:86:
b1:f2:65:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:39:37 2026 by rpki-client