Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS44324.roa
File: AS44324.roa (raw, json)
Hash identifier: NfR5j8nHl9QORV2I6ofjw7ivCtR2kYvWbazD+UeFoIY=
Subject key identifier: B0:C6:83:09:14:CC:91:C2:7E:0B:57:05:73:48:3A:6E:FB:74:58:82
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 14E00A46897C6FFBCC66DA8663005F161C2A34CD
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS44324.roa
Signing time: Tue 22 Sep 2026 17:49:35 +0000
ROA not before: Tue 22 Sep 2026 17:44:35 +0000
ROA not after: Tue 21 Sep 2027 17:49:35 +0000
asID: 44324
IP address blocks: 2a13:9500:fc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:e0:0a:46:89:7c:6f:fb:cc:66:da:86:63:00:5f:16:1c:2a:34:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 22 17:44:35 2026 GMT
Not After : Sep 21 17:49:35 2027 GMT
Subject: CN=B0C6830914CC91C27E0B570573483A6EFB745882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fb:89:68:7f:62:06:ae:e8:31:57:96:06:fa:
ef:cf:41:a2:16:b7:95:43:9d:12:f0:b1:68:78:b5:
91:09:f2:fe:20:4f:df:07:10:82:12:e4:c1:be:8e:
df:5c:ac:5d:38:71:03:9a:92:52:7b:9e:b5:87:19:
55:f2:5c:c1:a0:f3:68:dd:22:da:6d:08:08:59:cd:
a2:32:ea:62:30:62:26:13:b9:cd:f9:d3:d3:11:fd:
15:86:54:9a:85:2d:73:65:bc:0f:40:88:da:42:7a:
52:70:be:2a:82:16:da:33:ef:90:fd:d9:63:e4:20:
e7:76:bf:73:00:8d:b9:4b:f1:78:02:e8:b6:a5:e4:
c7:2f:d7:c1:39:51:ef:a4:76:d4:2e:10:2d:85:7f:
3a:56:1e:21:59:19:05:32:3f:cd:83:66:ed:95:46:
2d:7b:20:c5:f9:55:dc:d3:eb:f2:c6:fc:a5:3f:a5:
3c:a0:06:75:c7:b8:dd:6c:eb:de:29:75:59:77:fc:
38:e1:84:b5:01:78:dd:59:ce:f3:a6:0c:10:04:63:
bf:f9:69:a4:22:5d:90:a7:9e:7b:59:fd:fc:8a:33:
e6:1b:49:e0:c8:44:ab:69:ed:60:b8:9a:a4:cb:50:
1b:97:06:9e:f9:fb:40:80:ac:c5:bc:03:95:a0:5a:
d7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C6:83:09:14:CC:91:C2:7E:0B:57:05:73:48:3A:6E:FB:74:58:82
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS44324.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:fc::/48
Signature Algorithm: sha256WithRSAEncryption
0d:c0:78:66:76:07:07:84:5c:75:10:ac:6b:25:8f:b8:c0:fa:
1c:20:73:15:62:fd:80:62:34:e3:9b:cc:6c:b0:44:11:87:f1:
a8:3d:2e:78:a0:5e:e1:91:53:46:9e:88:a8:49:01:f2:10:39:
85:5e:17:74:28:a7:3c:83:8f:d4:1c:8b:47:90:54:a1:fe:d6:
51:4d:65:0c:9b:f8:be:bd:84:a6:f3:13:57:47:a9:b8:63:db:
fb:d5:3d:b4:92:e0:10:e5:55:56:4e:57:8f:b8:60:22:66:f0:
4e:6d:f3:79:5a:64:f8:cc:b9:c2:bb:ff:6b:c5:5c:74:f8:67:
fa:ef:93:a6:f9:c6:e7:2e:b5:f0:d5:2f:3b:d1:3f:a1:ff:94:
42:9d:bd:b9:1b:f6:cf:b4:70:25:f2:8e:fe:76:06:0d:8e:2c:
35:75:98:27:63:9a:05:6c:8c:34:9e:66:ce:05:19:9b:d0:d0:
92:58:f2:c4:be:d3:fc:45:8f:4c:42:78:01:a5:fe:93:77:a6:
8e:dc:c3:74:76:8d:09:5a:cb:91:33:a1:6f:0a:2e:77:38:e7:
8e:09:34:24:b6:aa:bb:b7:1b:43:65:07:9c:0e:b3:65:d0:3f:
68:b4:da:cd:62:d8:33:21:ca:9f:0e:64:e2:f9:02:57:a8:d7:
65:3d:78:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:37:14 2026 by rpki-client