Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS44803.roa
File: AS44803.roa (raw, json)
Hash identifier: Gw+IBdkDN09QBpyu/5nPNHDn/HxC0SLDSc3bgGBhG2o=
Subject key identifier: D7:27:6F:9A:02:A7:C2:40:BE:2F:C9:97:8E:48:D8:AD:AC:26:E4:48
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 326A92D7119DE3C7137771E20D00280DEA8BBC7B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS44803.roa
Signing time: Wed 10 Sep 2025 09:55:00 +0000
ROA not before: Wed 10 Sep 2025 09:50:00 +0000
ROA not after: Wed 09 Sep 2026 09:55:00 +0000
asID: 44803
IP address blocks: 92.113.144.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:6a:92:d7:11:9d:e3:c7:13:77:71:e2:0d:00:28:0d:ea:8b:bc:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 10 09:50:00 2025 GMT
Not After : Sep 9 09:55:00 2026 GMT
Subject: CN=D7276F9A02A7C240BE2FC9978E48D8ADAC26E448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e4:47:e5:ca:60:bf:c7:6c:6f:2a:13:9a:3e:
a5:f2:2c:14:cd:e0:c6:0b:f3:94:22:7b:e4:99:f0:
87:04:3a:ce:cb:77:2f:8e:8f:80:10:c1:a4:d0:1b:
29:07:19:55:32:96:60:08:00:89:98:2f:c6:81:79:
e4:0b:08:a9:91:ee:bc:f3:b3:02:99:51:65:72:64:
f4:79:7c:e5:d1:ef:d2:e3:dd:f5:ba:5c:2d:1b:4b:
da:65:db:cb:c5:3a:51:ab:45:43:07:21:a8:1d:be:
cd:bd:17:56:6d:57:95:a4:50:ba:0a:60:d0:17:0c:
ff:92:e7:d4:b9:f4:52:fc:78:07:06:45:23:e8:52:
3f:d1:72:a5:4b:44:01:b8:bd:df:88:ce:0d:ed:ff:
af:f9:79:89:79:a4:d4:5d:33:a4:e6:66:63:4c:93:
6f:54:bb:1f:b0:de:a2:d4:9e:76:05:34:01:4c:94:
92:93:8e:7a:f9:97:08:8f:bd:eb:4a:e0:d7:33:4c:
50:da:c8:b6:b6:cd:20:a5:5e:3e:22:2a:9a:84:79:
9c:8c:25:16:66:56:7f:70:8f:30:b8:76:99:10:ef:
d1:4d:4e:50:51:69:1e:6d:3b:d9:09:ab:62:48:65:
4c:0a:88:83:fe:eb:81:68:9a:11:88:12:a7:fb:f8:
84:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:27:6F:9A:02:A7:C2:40:BE:2F:C9:97:8E:48:D8:AD:AC:26:E4:48
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS44803.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.144.0/21
Signature Algorithm: sha256WithRSAEncryption
a2:fa:fb:13:b8:20:bc:c6:77:61:b9:b6:53:ba:1a:6c:7d:77:
a4:63:0b:a7:b1:9e:de:f1:c4:71:c1:61:d1:fd:43:7a:d3:6c:
62:56:17:dc:d0:5a:64:e9:bf:f9:88:49:2c:64:99:41:a6:46:
0d:57:d8:b5:66:e7:38:48:77:fa:39:83:00:33:43:10:34:0c:
df:c5:ad:9b:7c:b4:96:72:ab:22:11:f6:c9:5c:67:52:b2:be:
e5:49:72:45:19:a9:14:79:ce:30:13:ec:ca:c5:68:02:49:9b:
5d:ab:64:cb:35:49:31:de:d1:13:89:93:3d:25:d5:83:4a:20:
54:7f:69:f4:68:8b:86:b2:58:30:bb:ff:e3:58:cd:08:94:97:
2f:f5:70:ce:09:5a:27:d9:c6:24:d8:50:4f:b4:52:18:b7:8f:
fd:72:c7:18:e2:01:d1:dc:05:db:ad:6f:0d:f4:5c:f6:04:39:
64:64:2f:d3:01:bd:1c:88:51:62:e7:6d:c6:84:58:ed:d3:fb:
cd:3f:da:7b:81:4f:76:5e:45:d8:a5:be:79:9a:5e:7e:20:6c:
66:eb:12:16:42:13:38:f6:17:65:89:fe:1d:c3:ac:0c:5f:eb:
ec:8e:98:99:ad:ad:2a:72:84:d7:a0:a7:47:f0:86:7e:f3:68:
ae:7a:58:cc
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUMmqS1xGd48cTd3HiDQAoDeqLvHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTA5MTAwOTUwMDBaFw0yNjA5MDkwOTU1MDBaMDMxMTAvBgNV
BAMTKEQ3Mjc2RjlBMDJBN0MyNDBCRTJGQzk5NzhFNDhEOEFEQUMyNkU0NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG5EflymC/x2xvKhOaPqXyLBTN
4MYL85Qie+SZ8IcEOs7Ldy+Oj4AQwaTQGykHGVUylmAIAImYL8aBeeQLCKmR7rzz
swKZUWVyZPR5fOXR79Lj3fW6XC0bS9pl28vFOlGrRUMHIagdvs29F1ZtV5WkULoK
YNAXDP+S59S59FL8eAcGRSPoUj/RcqVLRAG4vd+Izg3t/6/5eYl5pNRdM6TmZmNM
k29Uux+w3qLUnnYFNAFMlJKTjnr5lwiPvetK4NczTFDayLa2zSClXj4iKpqEeZyM
JRZmVn9wjzC4dpkQ79FNTlBRaR5tO9kJq2JIZUwKiIP+64FomhGIEqf7+IRlAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQU1ydvmgKnwkC+L8mXjkjYrawm5EgwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNDQ4MDMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANccZAw
DQYJKoZIhvcNAQELBQADggEBAKL6+xO4ILzGd2G5tlO6Gmx9d6RjC6exnt7xxHHB
YdH9Q3rTbGJWF9zQWmTpv/mISSxkmUGmRg1X2LVm5zhId/o5gwAzQxA0DN/FrZt8
tJZyqyIR9slcZ1KyvuVJckUZqRR5zjAT7MrFaAJJm12rZMs1STHe0ROJkz0l1YNK
IFR/afRoi4ayWDC7/+NYzQiUly/1cM4JWifZxiTYUE+0Uhi3j/1yxxjiAdHcBdut
bw30XPYEOWRkL9MBvRyIUWLnbcaEWO3T+80/2nuBT3ZeRdilvnmaXn4gbGbrEhZC
Ezj2F2WJ/h3DrAxf6+yOmJmtrSpyhNegp0fwhn7zaK56WMw=
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:36:27 2025 by rpki-client