Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS44803.roa
File: AS44803.roa (raw, json)
Hash identifier: fTHYLd0DoDpNjw1sGQljtx4sS7+b5yepxcJQo808LWo=
Subject key identifier: F6:76:EA:24:4B:D9:BA:F3:B4:CE:E0:FA:F0:29:C9:DF:BF:C1:D5:BB
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6D853AA048F442950FFB91A9FE8649CF7D5EBC85
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS44803.roa
Signing time: Mon 28 Sep 2026 11:35:22 +0000
ROA not before: Mon 28 Sep 2026 11:30:22 +0000
ROA not after: Mon 27 Sep 2027 11:35:22 +0000
asID: 44803
IP address blocks: 51.146.4.0/24 maxlen: 24
51.146.13.0/24 maxlen: 24
51.146.21.0/24 maxlen: 24
51.146.233.0/24 maxlen: 24
51.194.129.0/24 maxlen: 24
51.241.0.0/24 maxlen: 24
51.241.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:85:3a:a0:48:f4:42:95:0f:fb:91:a9:fe:86:49:cf:7d:5e:bc:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 28 11:30:22 2026 GMT
Not After : Sep 27 11:35:22 2027 GMT
Subject: CN=F676EA244BD9BAF3B4CEE0FAF029C9DFBFC1D5BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f9:78:a5:55:24:be:d5:69:8e:64:fb:ab:83:
62:36:df:75:4f:89:da:86:fd:52:70:05:39:f4:d0:
b2:68:e3:fa:d5:00:b6:c1:55:ea:57:d6:6b:02:9c:
63:96:5b:0a:36:a3:c5:f3:23:9f:e2:64:08:21:47:
01:b0:05:35:6f:ff:bf:ee:73:b3:7e:7f:ac:6e:26:
6e:3f:74:2f:d8:e0:b0:b3:ff:82:de:6c:a0:50:f6:
17:4a:38:ff:bb:1a:43:84:90:43:81:5d:40:dd:81:
09:4e:cb:59:b8:15:ef:c3:1d:07:8d:47:0f:56:6b:
0b:7b:3f:48:22:a1:c9:00:a7:ea:69:3d:d8:f8:36:
e2:b8:0c:f2:9a:d5:d1:bb:7f:7c:7c:37:cd:ba:7c:
26:41:60:c4:82:6f:c0:ce:9f:28:7a:09:fa:bc:de:
ce:2b:7b:d5:1c:46:27:82:61:7f:37:2b:2e:03:53:
ae:f6:6c:29:aa:4c:7d:e3:5c:65:f8:58:75:be:c6:
c3:3d:46:9b:df:bb:2d:8a:5d:8f:e6:3b:9b:16:76:
f3:e3:6a:8b:a6:e1:7b:ae:3b:ad:5f:d2:63:e7:ef:
97:1a:a8:e7:02:46:65:2f:6d:4e:8a:3e:d8:8c:2f:
30:0d:f2:61:1e:d5:36:0f:85:66:c4:f5:91:04:94:
66:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:76:EA:24:4B:D9:BA:F3:B4:CE:E0:FA:F0:29:C9:DF:BF:C1:D5:BB
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS44803.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.4.0/24
51.146.13.0/24
51.146.21.0/24
51.146.233.0/24
51.194.129.0/24
51.241.0.0/24
51.241.115.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:45:2e:6e:97:fd:05:a3:8d:3a:52:bf:ab:42:0d:09:75:b9:
a2:4b:6a:04:5b:e9:fd:34:a2:2b:76:7b:16:da:ea:6c:0d:9b:
1b:51:49:c6:00:86:9c:3c:f6:a5:60:48:be:fc:a9:87:13:11:
34:1e:67:ca:d2:02:8b:96:19:50:a1:c3:d2:42:3b:73:d8:0e:
35:f0:6f:2a:8d:e1:5b:8c:93:13:2b:68:e3:98:e2:c0:19:7f:
6c:83:6f:95:54:66:7f:0c:5d:e5:f7:22:af:db:63:bb:e8:88:
15:0f:e7:44:30:a6:a6:46:e7:3e:40:e1:2f:b0:f5:75:ea:3d:
25:91:14:bf:c5:70:db:f7:7c:2e:2b:cd:fa:65:d5:92:32:f4:
7b:82:94:e9:50:dc:ed:66:ce:8f:b8:9b:3d:9b:b7:54:61:51:
8c:e2:1a:2b:23:f4:ae:af:9b:8a:43:b8:af:d1:19:80:07:02:
b3:49:0d:a8:e2:c4:2b:8a:f1:c3:28:eb:5f:85:f5:ff:0f:a4:
46:66:92:d3:7e:03:49:8c:66:42:73:68:b6:16:08:8a:26:49:
2c:50:15:85:c3:8f:10:5c:88:ef:7f:36:38:b5:47:e7:13:ac:
d8:26:7b:28:a0:63:51:55:1d:02:09:7a:32:4b:6f:4d:63:59:
5d:b7:49:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 18:58:05 2026 by rpki-client