Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS48011.roa
File: AS48011.roa (raw, json)
Hash identifier: AI4fh8BjJuwqFcbQw+IecAPiYbs254h1lqG73NHotWg=
Subject key identifier: F2:29:A6:57:8C:75:5A:E7:DE:32:D8:76:28:7A:41:F2:A7:F5:F6:1C
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 54C234B9AB0D4D5DE5CF8C17573ACB6C1C3B2580
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS48011.roa
Signing time: Mon 19 Oct 2026 09:21:32 +0000
ROA not before: Mon 19 Oct 2026 09:16:32 +0000
ROA not after: Mon 18 Oct 2027 09:21:32 +0000
asID: 48011
IP address blocks: 94.118.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 01:04:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:c2:34:b9:ab:0d:4d:5d:e5:cf:8c:17:57:3a:cb:6c:1c:3b:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 19 09:16:32 2026 GMT
Not After : Oct 18 09:21:32 2027 GMT
Subject: CN=F229A6578C755AE7DE32D876287A41F2A7F5F61C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b4:a9:f8:74:a1:b4:73:85:a9:97:c4:f3:71:
85:d8:fd:4c:02:47:56:b3:5a:89:3b:98:d1:b3:74:
10:f6:17:b4:40:b9:16:c4:6e:2f:66:f4:a9:a8:a3:
32:b4:85:6b:58:2c:ba:95:96:66:ee:20:b5:9c:e4:
fd:92:73:15:8c:d2:5d:ee:96:74:5b:e7:ee:59:e6:
2f:e0:cd:d2:44:fa:a4:b7:2e:9b:b2:62:b6:b5:98:
d7:50:a1:5c:b1:e4:bb:28:58:f0:5b:5a:48:21:ee:
74:5e:db:42:07:53:e1:b5:86:40:23:a6:ee:a1:78:
f9:72:8b:a1:80:13:38:94:4d:2e:22:eb:99:b5:30:
23:98:94:4a:52:8f:ce:64:f8:ce:79:0d:55:99:3b:
7b:9f:ae:0f:8d:32:ac:ad:3f:ea:87:dc:52:3a:0b:
8e:e5:3c:49:db:62:a7:50:0c:11:05:d1:b0:86:8b:
a0:3e:e5:16:8f:24:77:ee:07:15:0e:67:3e:a6:6b:
22:87:33:30:3a:b2:12:21:bb:ab:b6:a2:d7:f9:b0:
e1:02:29:e2:35:c5:a8:dd:82:c3:57:b9:08:77:41:
c6:91:1c:6e:fb:85:28:75:8c:7d:1c:16:5a:a3:5b:
16:03:0a:85:3a:31:4e:0e:cb:eb:23:5f:d5:65:bc:
cb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:29:A6:57:8C:75:5A:E7:DE:32:D8:76:28:7A:41:F2:A7:F5:F6:1C
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS48011.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.84.0/24
Signature Algorithm: sha256WithRSAEncryption
77:93:68:71:8c:ac:7c:0a:66:fd:c8:99:41:84:96:6b:2e:39:
9b:c2:03:8f:b8:2e:93:a3:90:ba:b8:fc:83:c3:db:fb:63:87:
79:fe:c9:5d:d0:e9:24:7d:c2:c6:d3:08:ce:c1:54:02:37:f1:
c2:1a:8c:ad:04:63:91:ff:fc:57:06:59:20:3c:bd:49:65:bd:
17:6f:69:2d:1e:b7:a6:34:1b:a1:ba:c1:aa:1a:08:1d:33:92:
ab:25:6e:dc:c7:d5:ac:e2:2f:30:17:2a:f9:16:ed:f8:9f:d2:
a6:46:e8:6c:6d:4f:70:df:46:ff:97:98:84:53:3e:03:f0:5d:
45:25:79:a5:ad:33:a8:c2:da:09:b1:12:80:8a:3a:a4:8e:10:
b6:ce:f3:1f:42:74:c0:be:5f:08:38:b4:1c:e6:1a:9f:f6:0b:
3c:bf:77:64:e9:de:c7:8b:bf:27:8a:cb:51:7a:28:76:bd:0a:
40:ed:c8:7b:70:cd:d7:80:fa:50:09:a0:b1:77:d5:57:ab:41:
77:71:67:44:8a:a7:7d:ae:f5:eb:6d:85:e8:1e:a9:38:3c:22:
1d:ae:f2:f0:bb:99:b3:56:7f:5f:13:f6:97:1a:93:c6:67:03:
9c:b8:23:48:97:67:b8:d6:3b:89:f0:04:f8:02:78:8f:7e:80:
6a:e8:aa:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:46:38 2026 by rpki-client