Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS48678.roa
File: AS48678.roa (raw, json)
Hash identifier: WH5g57nTzBTtVlQIX4DPMi9VRo6IGVOty8BffrTM9vQ=
Subject key identifier: D9:6E:3F:F3:0D:46:8D:35:D3:0E:33:AB:9D:12:28:F0:9F:0E:73:0C
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 4993F3B244394289DCB3606BFC74C88878B0CB2C
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS48678.roa
Signing time: Tue 09 Sep 2025 06:55:00 +0000
ROA not before: Tue 09 Sep 2025 06:50:00 +0000
ROA not after: Tue 08 Sep 2026 06:55:00 +0000
asID: 48678
IP address blocks: 141.11.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:93:f3:b2:44:39:42:89:dc:b3:60:6b:fc:74:c8:88:78:b0:cb:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 9 06:50:00 2025 GMT
Not After : Sep 8 06:55:00 2026 GMT
Subject: CN=D96E3FF30D468D35D30E33AB9D1228F09F0E730C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8c:0d:72:74:5c:ba:9a:62:ea:9a:50:5b:14:
92:3d:72:84:cf:20:19:50:2c:09:73:bf:10:da:62:
1c:e6:39:a3:0d:0d:61:0b:a5:0f:10:2d:4d:e3:55:
08:6f:45:30:fa:94:bc:e0:71:8a:ad:a2:6d:2a:f1:
cc:fb:f9:36:f1:6a:d4:a5:70:9a:37:30:dc:58:21:
5f:f9:4f:90:30:d4:9f:ae:79:06:59:34:eb:0c:8f:
7d:50:fa:21:14:cb:c6:53:da:d2:2e:35:04:47:04:
f6:a5:77:23:8a:e8:16:0d:fe:01:e2:f3:47:2f:9b:
23:40:2f:e0:56:ff:5c:38:ab:94:d2:96:3c:e8:57:
88:42:75:72:6d:dc:d7:4e:95:93:03:27:22:2c:a9:
ba:7d:50:e1:ff:c4:7c:8c:4b:57:27:bf:65:fd:69:
9d:a7:9f:0e:8d:66:4d:d7:75:55:bf:e9:7a:6d:58:
5e:e0:5a:98:62:58:4e:80:82:c3:5d:10:1d:a7:c3:
87:94:d9:f0:e3:f5:3d:85:5d:ab:b5:33:92:e6:4b:
8e:d7:41:4c:95:0f:be:5f:2e:ae:c1:80:0c:b4:58:
6f:22:66:a0:69:e0:88:63:03:67:de:db:9e:1e:21:
80:ba:e3:33:40:f3:3f:3e:e6:b5:c5:e5:35:89:f9:
3b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6E:3F:F3:0D:46:8D:35:D3:0E:33:AB:9D:12:28:F0:9F:0E:73:0C
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS48678.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.65.0/24
Signature Algorithm: sha256WithRSAEncryption
42:11:94:04:3e:dc:3a:79:1d:14:9a:80:6d:8f:ab:2b:ee:af:
84:96:99:48:80:17:dc:30:91:0a:4f:bb:47:c0:55:7a:c5:48:
96:0f:39:4e:d8:5d:79:ed:8c:aa:7b:ed:3d:24:0a:92:77:fb:
9e:50:e6:bb:c8:eb:9a:7c:3f:4d:a7:a3:43:df:e9:99:65:a0:
50:17:fb:07:96:55:e0:6e:bc:f2:5d:00:12:38:23:1b:8b:85:
6b:83:72:47:42:78:3c:be:28:99:9b:f0:fb:ff:02:f5:a2:7e:
60:d0:bc:a5:7e:f2:de:ad:f9:7f:62:7f:fc:87:20:8b:b4:31:
e7:77:f6:94:52:78:da:cc:cc:8a:c3:bb:d5:f1:46:e5:af:9a:
2e:81:8d:d5:85:81:2d:77:6c:bf:83:88:5a:b3:92:21:34:4b:
95:31:63:66:46:ae:a4:bb:d4:7e:de:63:e5:56:97:0b:a1:42:
ad:a1:d5:e3:9b:4c:a6:07:da:ed:01:15:69:46:ff:cb:23:4f:
dc:77:86:7b:c4:b8:e6:26:88:4d:e0:6c:2e:4e:44:ac:3c:cc:
0a:7c:7e:b7:ae:01:b6:76:9b:ff:c5:75:a1:d3:87:cd:35:f4:
27:dd:d0:b7:ce:ec:ea:61:9c:96:ed:22:d9:fd:69:c5:33:68:
fa:e2:e3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:19 2025 by rpki-client