Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS44733.roa
File: AS44733.roa (raw, json)
Hash identifier: qqz3SDBUDrQ8OOBQrAQnZAIe6mC3a2MSd/RPSgUHN7k=
Subject key identifier: DE:6C:49:DD:06:48:85:7E:C8:1C:89:61:3D:54:1D:0E:81:AF:5C:0A
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 5DEFABBB73501CDFF6D0429E2BA6A8F414421210
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS44733.roa
Signing time: Fri 03 Jul 2026 06:48:54 +0000
ROA not before: Fri 03 Jul 2026 06:43:54 +0000
ROA not after: Fri 02 Jul 2027 06:48:54 +0000
asID: 44733
IP address blocks: 143.20.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:36:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:ef:ab:bb:73:50:1c:df:f6:d0:42:9e:2b:a6:a8:f4:14:42:12:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jul 3 06:43:54 2026 GMT
Not After : Jul 2 06:48:54 2027 GMT
Subject: CN=DE6C49DD0648857EC81C89613D541D0E81AF5C0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bf:70:d0:1d:5f:ec:22:5e:4f:b6:00:7b:a4:
79:f0:a1:70:e1:1c:ff:96:30:7e:9b:74:f2:7c:0c:
45:08:f1:8f:0e:14:0c:2d:92:fb:43:f3:54:ca:88:
3e:2a:15:bc:26:56:8d:fa:af:7b:2a:95:f8:14:9a:
d2:c7:ac:1f:e5:15:b1:ee:17:6b:31:da:90:b7:cc:
2b:6f:db:f6:a7:8d:db:54:a8:ec:31:ea:1c:44:45:
1d:4c:bc:02:47:91:47:fa:33:0c:ee:2e:b8:9b:88:
c4:dd:26:d6:fb:f6:98:3d:54:f2:74:57:a4:fb:9f:
77:b9:d0:27:5e:fc:5b:54:ed:65:1b:44:23:4f:76:
fb:87:1e:59:2f:28:03:81:01:7e:d5:57:31:7f:be:
07:b0:65:fe:ed:72:b5:60:60:10:61:aa:95:8d:71:
89:0a:84:47:d1:ae:46:00:50:10:4f:af:df:a7:22:
01:58:5c:89:d6:4c:c1:52:ac:97:ce:3e:a1:50:7d:
f0:53:3d:64:97:17:11:8f:6a:52:5c:a5:22:fd:73:
72:1e:bd:5f:0e:52:50:6b:fc:01:18:d3:45:82:3f:
2c:aa:a0:2a:f4:47:48:1f:48:7b:2f:33:0c:e4:6e:
73:b2:ea:03:cc:b4:c5:8c:b2:a2:d2:92:f6:c9:9e:
ae:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6C:49:DD:06:48:85:7E:C8:1C:89:61:3D:54:1D:0E:81:AF:5C:0A
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS44733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.114.0/24
Signature Algorithm: sha256WithRSAEncryption
99:83:20:83:07:70:67:cb:9d:22:ce:25:63:07:9e:05:f7:0e:
55:18:1b:52:c4:ed:5b:ce:45:ca:97:ad:de:2a:54:1d:61:51:
37:ac:fb:ef:c7:4f:d6:9d:bf:df:42:ff:58:92:e4:40:9b:18:
4e:a0:00:d6:9f:33:36:64:4d:f9:2d:10:9a:39:0e:09:7a:60:
c7:24:3c:47:b3:79:fe:23:a9:8d:6c:04:dc:d2:6d:39:6c:f6:
d4:01:2a:29:ff:0f:77:da:f8:9d:e1:33:6d:b5:b9:63:c8:d1:
a2:9a:17:6c:be:4b:ac:10:18:cf:b6:fe:87:0e:d7:38:42:8a:
22:89:df:97:a5:9b:4a:1b:15:74:71:fa:f5:6d:08:87:e7:8c:
cf:e3:86:6b:66:a8:2e:a5:d9:38:27:b7:de:72:bb:0f:8e:3b:
97:23:55:c5:e8:1b:5e:2b:7b:09:da:bc:b3:28:55:1a:46:0d:
68:70:c3:7d:08:28:4c:f4:b3:fe:af:cb:3a:cd:e4:70:10:f4:
17:5b:76:0b:32:63:9a:00:43:ca:39:d8:1d:14:1e:5b:8e:e7:
cf:d2:6a:0d:d1:03:09:ce:55:26:22:48:85:66:be:48:2b:2a:
fa:50:5b:aa:05:b6:ed:e0:da:d1:5b:5d:10:38:39:80:2c:d1:
f2:f8:44:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:24:47 2026 by rpki-client