Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS48529.roa
File: AS48529.roa (raw, json)
Hash identifier: Y6lkioYYf65fw7FKNTVYFVvI1UxQ1YgONKSLCbW0Was=
Subject key identifier: 67:AB:4B:E7:30:D8:54:AB:F3:E5:47:46:5B:DC:A9:E4:77:1A:EE:A7
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 7712D4FE15768676D4ECD03E3E740350C38CBB59
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS48529.roa
Signing time: Tue 07 Oct 2025 12:59:22 +0000
ROA not before: Tue 07 Oct 2025 12:54:22 +0000
ROA not after: Tue 06 Oct 2026 12:59:22 +0000
asID: 48529
IP address blocks: 45.135.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:14:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:12:d4:fe:15:76:86:76:d4:ec:d0:3e:3e:74:03:50:c3:8c:bb:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 7 12:54:22 2025 GMT
Not After : Oct 6 12:59:22 2026 GMT
Subject: CN=67AB4BE730D854ABF3E547465BDCA9E4771AEEA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c7:19:36:34:ea:e6:8e:da:7e:82:ae:84:93:
bd:b1:ba:f1:98:a7:e6:ef:dd:ba:62:7a:4e:c3:31:
93:9d:d0:91:15:b1:ec:c3:7d:ce:db:49:99:c6:e9:
6a:78:18:ba:17:71:5c:fa:ac:0a:fc:46:a9:ab:32:
10:ac:ce:5b:e2:30:44:ea:63:da:11:b6:b7:f8:d1:
68:e8:d9:42:d0:91:d5:68:18:65:fc:62:bc:82:14:
07:03:f1:c8:ff:38:d8:1a:78:59:a1:cd:63:44:e0:
77:34:7e:54:7e:37:02:0a:f3:7b:a2:5b:d5:1c:f0:
5a:e1:08:e9:fb:a4:05:a3:a4:9b:64:11:1d:3c:ab:
4c:ab:4a:2e:98:2b:a2:08:33:15:80:10:9f:58:1a:
7d:3c:01:2a:39:03:ac:cb:2d:da:11:06:71:e8:f2:
82:c7:0a:f6:7f:41:f0:aa:85:7a:2e:18:2f:cb:59:
69:89:02:54:06:4b:b7:90:8b:85:10:cf:72:1d:28:
ab:82:7a:b8:fc:bb:22:13:9d:e6:9e:2f:75:86:2e:
33:6d:e5:d2:66:94:27:6a:bf:63:66:18:f1:de:d0:
8a:72:bf:76:f9:02:06:21:b9:a4:47:8b:40:95:3a:
d3:86:3d:eb:e1:51:eb:76:49:4a:94:b1:57:43:0b:
45:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AB:4B:E7:30:D8:54:AB:F3:E5:47:46:5B:DC:A9:E4:77:1A:EE:A7
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS48529.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.248.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:fa:12:17:62:f5:ff:cc:e9:b0:79:d7:91:3c:7e:f3:dd:3f:
1e:2d:3c:5b:2b:91:21:a8:b9:9d:09:b2:50:19:01:2e:03:20:
40:6f:41:6c:16:cc:42:29:b6:09:65:bf:66:68:f4:61:8e:f6:
45:4a:90:5d:d6:4b:32:64:72:d7:46:be:d5:f9:8f:74:35:d5:
e8:46:e6:29:ee:35:d5:12:bd:ce:66:7b:2e:e2:83:1b:6b:56:
98:e7:5b:5a:c4:c4:27:49:ff:9d:23:d9:9b:72:44:1a:c2:7c:
63:2f:b8:09:6f:c2:ad:81:21:51:8e:2a:0f:52:3a:e8:c9:fe:
80:b7:13:77:0f:1c:18:e7:14:fe:be:15:32:df:72:21:31:69:
ab:b0:83:ff:78:bf:83:90:b0:d3:94:38:47:3b:94:86:2d:97:
e9:8d:73:da:69:4b:7c:55:48:76:5a:c8:36:00:85:11:d5:e9:
55:13:b6:4b:05:33:6c:a2:40:94:f3:97:52:07:63:77:75:b7:
40:d6:1b:65:1d:d4:b6:6e:ac:59:19:42:d1:45:75:07:ad:ca:
32:1b:f3:06:b9:00:36:99:43:8a:a3:b1:ba:0a:f8:25:00:5c:
6f:87:03:b4:1f:d7:69:98:34:09:ae:48:86:f8:4f:19:57:54:
9b:5c:17:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:52:57 2025 by rpki-client