Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS49453.roa
File: AS49453.roa (raw, json)
Hash identifier: S+kp1IDJLeXgRkTE3bBTRw2MmclX73NsM07Pdtxr3EQ=
Subject key identifier: 55:CB:2C:C0:71:A8:0F:61:82:16:47:3F:2D:23:5B:AB:58:C2:52:40
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 12DA9D833728C17D11314709F8D212AC756EC399
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS49453.roa
Signing time: Fri 25 Sep 2026 00:02:14 +0000
ROA not before: Thu 24 Sep 2026 23:57:14 +0000
ROA not after: Fri 24 Sep 2027 00:02:14 +0000
asID: 49453
IP address blocks: 178.83.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:da:9d:83:37:28:c1:7d:11:31:47:09:f8:d2:12:ac:75:6e:c3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 24 23:57:14 2026 GMT
Not After : Sep 24 00:02:14 2027 GMT
Subject: CN=55CB2CC071A80F618216473F2D235BAB58C25240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4b:ed:45:6d:4a:80:93:56:d4:3a:ce:a1:39:
cd:58:53:89:dc:6c:58:96:32:ed:06:92:96:40:dd:
a3:c7:b9:a3:30:5c:15:5c:f9:26:1f:4f:a4:2e:e3:
ff:2e:1c:4f:2b:f2:17:9b:c3:0b:82:6d:07:b0:be:
d7:f0:37:ce:11:e9:6d:80:db:b6:9e:35:66:e8:1d:
c6:ce:2e:dc:79:70:be:6b:a8:f2:c7:53:5d:14:c2:
9d:59:7d:96:e7:e3:bd:f0:6b:48:0e:59:a7:68:9e:
34:64:a4:cc:31:c5:e3:d7:b1:3b:f5:7d:42:e4:41:
cb:5d:69:c8:85:69:a9:ca:63:59:c9:f3:b3:bc:78:
8a:f2:55:b8:fc:7b:4b:51:6c:27:b0:54:70:20:f6:
2c:68:b1:eb:e4:e2:fa:62:eb:11:26:9c:dc:ac:84:
90:0a:86:35:0e:99:6a:f5:65:e1:e2:9c:56:0d:84:
6b:2d:72:3f:a3:24:f4:2b:ca:23:7d:44:48:c7:12:
76:77:f3:fb:30:53:25:30:ae:38:5f:20:88:90:f3:
c9:8c:bf:48:30:83:39:52:93:d9:88:83:cf:52:17:
b6:2a:f8:c1:59:94:06:8e:52:cc:f2:7c:fa:0f:ad:
8d:1b:dd:6e:b2:49:6c:88:7b:79:62:b4:59:ba:bf:
42:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CB:2C:C0:71:A8:0F:61:82:16:47:3F:2D:23:5B:AB:58:C2:52:40
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS49453.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.28.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:e6:df:cd:ce:81:10:73:11:b3:90:29:e2:23:e7:08:69:f5:
e1:2e:ed:73:e6:6d:df:13:26:0a:af:1d:f6:36:7e:61:de:5b:
4c:ed:b3:da:4f:18:95:25:e0:1b:23:8f:3c:53:aa:3b:b6:b2:
1b:0b:53:67:9d:d2:9f:00:fa:1b:7d:8f:5b:7b:cd:b4:d7:21:
51:26:6f:a5:58:4c:39:05:13:9a:00:cd:c1:97:f5:44:b9:e3:
dd:8f:a5:7e:a0:23:f2:d5:e6:e7:15:80:c3:05:ee:1b:31:1c:
79:d5:df:35:4b:84:62:30:11:3a:df:d9:58:e6:e4:4d:47:dd:
47:a5:3a:b9:fc:c5:06:0e:57:ed:be:b9:5b:82:8e:d1:81:ce:
fd:5a:1a:fa:5d:fb:93:f7:54:d5:c5:ed:7e:59:e2:45:ca:66:
1b:4a:fb:4d:6b:82:cd:2b:0c:ae:94:76:78:69:ba:10:37:63:
17:50:db:81:f3:10:69:5b:12:a4:e2:60:b3:c3:9a:18:9b:f2:
9a:8a:41:98:be:41:6c:f7:61:ca:0b:03:7f:50:a7:0f:e8:5b:
71:e3:0a:d9:61:3c:1a:f6:df:64:70:3d:4c:29:dc:7a:19:26:
8c:cd:4b:90:5e:ee:3c:3a:81:d9:24:16:da:b2:4d:64:c5:52:
83:0e:39:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:59:19 2026 by rpki-client