Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS48629.roa
File: AS48629.roa (raw, json)
Hash identifier: XkubmTm5b2ZChkBftupEF01crbiA2RcIkxrESgrgmVM=
Subject key identifier: 72:C7:A6:C0:FF:F1:84:66:BE:9E:7C:31:4E:25:40:7F:7A:D6:F1:36
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 66E3A3E8D7B62F51A96C0F87F3542F01912141EE
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS48629.roa
Signing time: Mon 12 Oct 2026 09:09:49 +0000
ROA not before: Mon 12 Oct 2026 09:04:49 +0000
ROA not after: Mon 11 Oct 2027 09:09:49 +0000
asID: 48629
IP address blocks: 143.20.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:e3:a3:e8:d7:b6:2f:51:a9:6c:0f:87:f3:54:2f:01:91:21:41:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 12 09:04:49 2026 GMT
Not After : Oct 11 09:09:49 2027 GMT
Subject: CN=72C7A6C0FFF18466BE9E7C314E25407F7AD6F136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bb:ee:6e:19:3f:58:f2:04:5e:43:43:66:6c:
91:ed:bf:30:23:fa:ca:66:97:54:2a:5e:6d:66:86:
64:dd:01:a5:0e:de:9f:c6:59:98:b1:49:52:60:11:
8a:c9:ad:e8:8e:56:27:44:c4:5d:94:c2:42:98:cd:
7c:76:13:d8:4c:e8:c3:a3:3e:2f:c8:1e:51:95:bc:
25:bf:1c:2f:37:f2:3f:ba:e9:0e:66:3c:ea:e5:9f:
29:38:9b:39:52:20:90:91:e3:d2:6e:d4:93:7b:bf:
37:ae:42:fc:15:76:a7:e7:9b:df:64:f6:56:04:f7:
42:ca:4e:39:bf:10:b5:ee:fc:3d:f4:6a:b2:5b:6e:
5a:01:0b:7b:44:a1:4b:c2:cd:96:ca:b2:c7:3e:5c:
da:77:62:20:91:a2:99:43:16:43:8e:c5:06:6c:1d:
16:b5:b3:89:89:df:63:f1:b6:79:23:18:69:b5:d3:
2d:81:8b:18:9f:94:5a:ed:27:ed:d1:60:81:d0:82:
42:46:e8:e1:e6:eb:bf:6e:17:e0:9f:87:79:61:47:
d2:9b:19:ad:ac:e6:e2:6c:9f:d6:fd:28:2b:32:b7:
9a:06:a8:e2:1a:1f:f0:b6:9b:28:3f:a3:37:86:59:
26:94:bf:aa:8f:b8:bf:05:44:f3:1b:4e:df:20:e1:
f6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C7:A6:C0:FF:F1:84:66:BE:9E:7C:31:4E:25:40:7F:7A:D6:F1:36
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS48629.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.45.0/24
Signature Algorithm: sha256WithRSAEncryption
72:49:d5:77:18:2f:d3:eb:fe:0e:3a:df:3d:68:ec:ed:2c:14:
8d:c1:2e:01:c0:83:f3:0f:b6:fd:8e:65:6d:86:70:27:02:98:
aa:13:29:38:17:cf:99:98:de:46:7c:bb:d8:d3:ee:6c:bd:08:
77:0d:73:79:43:01:af:33:5c:f1:d1:74:f2:40:5a:81:1a:3c:
79:f6:fa:40:ef:9f:35:1f:f4:c6:31:f4:80:76:38:c1:ee:93:
77:6e:d3:b6:66:bc:15:df:dd:3a:38:84:c1:f7:3d:a7:8a:f6:
79:a7:64:47:d7:63:c9:0c:aa:9c:fd:fd:b5:1b:35:64:d6:50:
bf:29:e5:29:ae:7f:4f:96:13:29:de:5c:8a:2b:1d:e3:12:57:
f7:39:53:8e:b1:c4:3e:72:84:63:ad:80:17:fb:49:90:bc:a3:
cb:8e:6c:dd:3e:7b:47:60:52:bb:11:f5:57:50:5e:a2:50:fb:
d7:ef:57:f1:6a:2c:cc:e2:36:bb:09:80:02:ad:e0:85:ed:59:
fe:08:d9:a1:39:9e:0e:c5:4f:af:0d:19:a4:0d:cb:8d:f8:0c:
c5:2d:b2:25:c7:33:f6:76:1e:bb:55:52:06:a6:c4:93:e7:9a:
bb:f2:04:47:81:eb:22:34:72:4d:44:2e:73:4a:61:43:1c:f9:
24:c2:46:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:15:10 2026 by rpki-client