Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS48925.roa
File: AS48925.roa (raw, json)
Hash identifier: tnCVg84tUchgksg8FuKkwOu11kk+0kCJUbu4sS2YEWY=
Subject key identifier: C3:92:F8:A4:39:16:0D:1C:78:84:33:11:48:44:8D:F3:E3:D2:7F:AD
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 54E128197332C12718C3AD8C31C470211F2FCCEB
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS48925.roa
Signing time: Fri 06 Mar 2026 15:16:19 +0000
ROA not before: Fri 06 Mar 2026 15:11:19 +0000
ROA not after: Fri 05 Mar 2027 15:16:19 +0000
asID: 48925
IP address blocks: 178.83.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:e1:28:19:73:32:c1:27:18:c3:ad:8c:31:c4:70:21:1f:2f:cc:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 6 15:11:19 2026 GMT
Not After : Mar 5 15:16:19 2027 GMT
Subject: CN=C392F8A439160D1C7884331148448DF3E3D27FAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2c:f2:13:c0:5a:31:35:bb:5f:4d:56:2a:b5:
de:e9:1a:e7:1a:04:f0:67:7c:1c:ec:27:24:84:2f:
6b:9b:aa:39:9d:1c:e6:25:8c:5a:84:0e:73:72:62:
de:9d:c3:80:07:4a:77:ad:ed:68:85:90:38:43:88:
70:4d:cc:57:ef:d3:70:8a:49:b7:52:57:b5:d9:f5:
a8:51:75:0a:54:ce:f7:02:0a:b6:85:39:39:93:42:
7d:57:e6:35:32:29:73:e7:bc:bb:dc:0d:b2:d5:d2:
92:b5:42:ef:24:52:52:37:be:59:39:39:00:ed:89:
2e:d6:a5:51:26:3a:5b:95:e9:b4:35:44:a5:96:c6:
c0:23:9a:00:7c:4b:ac:dc:e0:66:7f:34:51:f4:06:
c2:f1:02:ed:d8:1e:26:07:74:80:ac:25:10:90:29:
3f:b3:2a:a7:f7:a8:38:8b:f7:ea:3b:61:c5:7b:10:
64:1f:14:27:1a:96:a7:53:aa:be:09:89:88:90:0f:
a3:70:5b:7b:ce:81:a1:27:b0:36:43:33:e0:6a:e8:
58:5f:44:a8:23:4b:d7:c5:6c:a1:bf:de:79:29:31:
6a:aa:5d:4d:1b:f0:32:e4:5f:b9:30:3a:21:19:f2:
a6:c1:52:dd:3b:88:ad:5c:22:9e:c6:8c:44:83:93:
81:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:92:F8:A4:39:16:0D:1C:78:84:33:11:48:44:8D:F3:E3:D2:7F:AD
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS48925.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.136.0/24
Signature Algorithm: sha256WithRSAEncryption
95:9e:ed:22:82:9c:73:d3:16:1e:3a:c6:46:ec:60:e6:f9:e6:
9d:ba:3c:19:49:51:71:cf:7b:49:4b:84:ff:ef:81:42:e0:53:
77:cd:e2:86:48:dc:61:76:e1:4f:b5:ae:17:36:b5:74:d3:d2:
d3:24:fa:46:bb:3f:07:79:14:1b:92:f7:71:c1:61:57:8d:20:
b3:2f:07:40:c6:bf:d1:b7:ad:12:ad:39:ec:2d:18:c3:9c:da:
5d:c1:58:4c:81:68:54:83:40:8e:64:0d:ab:8a:bf:7b:6d:ba:
f9:e1:78:6a:19:d8:19:9f:39:a0:ff:e3:83:c9:43:df:fe:b0:
af:08:01:3b:4a:0d:42:be:c3:e2:6a:d7:be:7a:6c:b4:69:72:
ee:55:1b:04:3d:8e:00:53:85:9e:94:d0:15:1b:5c:92:38:e5:
1b:ff:9e:a6:e8:3a:ef:5a:b4:11:d5:34:23:f9:db:f3:7e:f9:
5b:a0:c1:48:97:d9:3f:5f:49:05:de:e0:3a:eb:97:d7:65:f0:
db:f3:0d:b4:1d:ec:ac:75:de:96:6a:4d:6f:67:ea:83:02:8c:
b7:58:86:c6:bf:aa:3e:13:f9:a8:50:1f:ab:a6:66:99:e9:b9:
51:6c:d3:16:3b:87:4f:3d:e4:f5:42:a2:62:91:c5:30:ef:c3:
67:93:21:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:34:45 2026 by rpki-client