Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS48729.roa
File: AS48729.roa (raw, json)
Hash identifier: GCZlX3rQgQvHhjjD87wjitR6H75kUBhzLFBDJQcIZi8=
Subject key identifier: 84:EC:DE:B4:9A:2A:61:FE:4B:4C:23:06:85:60:62:B9:9D:BB:EF:62
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 07F7D1D9EF15694F2DD3C33B70E331C0CA72FC2F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS48729.roa
Signing time: Sun 25 Oct 2026 11:22:59 +0000
ROA not before: Sun 25 Oct 2026 11:17:59 +0000
ROA not after: Sun 24 Oct 2027 11:22:59 +0000
asID: 48729
IP address blocks: 178.83.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:f7:d1:d9:ef:15:69:4f:2d:d3:c3:3b:70:e3:31:c0:ca:72:fc:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 25 11:17:59 2026 GMT
Not After : Oct 24 11:22:59 2027 GMT
Subject: CN=84ECDEB49A2A61FE4B4C2306856062B99DBBEF62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:28:1c:ec:bb:7f:6b:b9:af:e4:0f:9e:ed:c7:
59:45:63:b9:5b:77:3b:ce:43:99:28:12:69:18:0a:
21:ad:6c:ac:e8:10:68:b7:82:3e:a2:ef:68:5c:f0:
cc:3e:35:7d:ce:d0:6a:40:0b:f1:c9:d4:ba:70:69:
b4:2a:42:82:30:ac:d0:ee:57:e5:94:42:ca:58:3d:
1f:99:2e:24:f4:09:dd:bc:20:02:9b:cb:40:2b:fd:
44:a2:3a:1c:b3:a8:af:48:36:2d:e3:5d:38:91:9f:
ed:16:49:04:71:2b:e7:51:fd:b0:16:92:f8:14:f4:
5c:31:29:21:b2:b2:96:5f:98:6b:3f:2c:b0:99:5d:
2a:ab:c7:68:ac:3e:ba:1f:cd:30:c9:f4:42:e5:c9:
8b:5f:65:93:da:13:ac:29:c7:f5:c3:3f:8f:65:d4:
3b:23:e9:4b:bb:03:1b:77:b0:dd:06:35:41:83:21:
a6:f4:b2:cf:f3:dd:d5:2e:53:19:b4:cd:ea:4c:65:
ab:1f:22:79:62:29:bd:8e:d9:0c:ac:d3:86:ec:d3:
a8:d7:a3:70:e7:26:30:69:30:71:4f:60:f7:b2:2d:
15:6f:53:d9:2d:79:23:fb:d2:a6:bd:33:b4:df:00:
2c:85:bd:a2:d2:b0:7e:08:b6:07:6e:68:87:52:1a:
24:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EC:DE:B4:9A:2A:61:FE:4B:4C:23:06:85:60:62:B9:9D:BB:EF:62
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS48729.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.149.0/24
Signature Algorithm: sha256WithRSAEncryption
78:80:77:35:e7:ff:8a:00:23:77:94:d2:48:36:7e:9e:af:94:
a4:a7:14:d7:0d:bc:59:4b:b7:f3:2a:06:c8:28:6a:47:df:9a:
ee:9e:d7:2f:70:2c:1d:ce:69:f1:4f:01:a5:11:ec:ad:5e:11:
f5:5d:ba:82:bc:40:5e:39:34:5c:db:7c:96:a7:21:14:40:67:
41:d6:12:38:68:36:41:62:e5:be:49:ea:79:ad:11:fa:be:57:
9f:78:5a:6e:81:b1:95:42:ad:f1:9d:2a:c6:e1:fe:9c:c0:ac:
b9:a7:f2:7e:0c:50:02:2f:a3:80:bc:5f:c8:ba:fb:cd:41:10:
c1:03:91:3f:12:4e:ac:ac:78:93:f2:1f:18:01:d2:3b:c1:46:
2e:e6:e0:a5:89:08:62:9e:b2:4c:12:95:b9:65:16:8b:50:e2:
57:7c:1c:94:a7:2c:5b:8c:68:09:98:0e:c1:67:4c:c4:23:6c:
c2:d8:6d:75:f5:00:5a:d3:cb:a6:64:5e:f5:59:50:33:41:89:
c1:03:82:e7:57:63:df:5b:c2:bc:0b:55:bb:6e:05:53:a2:f0:
93:21:1b:3a:47:ad:0b:aa:76:0e:de:60:20:dd:a4:30:67:17:
fa:b6:c9:79:44:e7:4a:1e:f2:45:46:dd:50:8c:b7:8d:2d:75:
d6:88:b4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:03:19 2026 by rpki-client