Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS3549.roa
File: AS3549.roa (raw, json)
Hash identifier: 99rEpI0dxED2WQHSHKQvLFvOhVYz4D6bdWZGlK/3t3s=
Subject key identifier: CE:13:3C:70:F5:02:81:8E:E6:39:4F:D6:BA:86:C2:63:7E:63:4C:3F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 517FE7AC71DFBAB98E1F0D1EB12326D6258B6FB0
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS3549.roa
Signing time: Fri 20 Mar 2026 22:13:14 +0000
ROA not before: Fri 20 Mar 2026 22:08:14 +0000
ROA not after: Fri 19 Mar 2027 22:13:14 +0000
asID: 3549
IP address blocks: 167.148.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:7f:e7:ac:71:df:ba:b9:8e:1f:0d:1e:b1:23:26:d6:25:8b:6f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 20 22:08:14 2026 GMT
Not After : Mar 19 22:13:14 2027 GMT
Subject: CN=CE133C70F502818EE6394FD6BA86C2637E634C3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:30:93:f9:50:2c:d8:10:a0:48:7d:b3:24:d9:
5a:fb:56:39:a6:32:7c:ed:da:db:76:d1:67:a3:d1:
4b:4e:e4:bc:a6:24:21:f8:8e:fd:02:74:a9:a9:bf:
f6:fe:dd:d4:c7:91:8c:1b:d3:99:cf:08:cd:ce:dc:
f6:ed:48:59:86:9a:73:67:4a:a4:2b:db:6e:6c:3d:
28:ae:3f:dd:bc:a8:63:07:30:92:66:42:08:80:5d:
1a:7b:80:d8:ca:e5:88:71:b9:f5:14:a4:da:82:9f:
73:35:92:01:f4:ec:16:81:cd:23:00:21:51:55:de:
82:d6:7f:32:7c:e4:8c:90:c0:a9:53:a0:fe:17:87:
ec:70:e7:88:b3:86:e0:52:29:f3:f0:c3:19:2d:bf:
b7:16:72:4a:95:d8:76:ec:f0:36:45:ee:99:67:e2:
4c:97:37:4f:cc:fe:45:e0:24:14:8b:ac:7a:8d:da:
03:c3:81:46:31:50:a3:98:c5:c7:91:98:41:eb:4c:
17:b0:bf:bb:d0:6a:54:fb:99:f0:1b:61:8c:51:de:
81:23:fb:4a:1c:b2:b9:56:a7:f8:0f:df:e8:a0:d2:
7d:5b:a0:88:64:71:ce:e2:2d:3a:75:71:f6:0d:07:
92:c7:3e:cb:7a:b6:5f:93:5d:a3:76:0f:e6:5c:19:
74:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:13:3C:70:F5:02:81:8E:E6:39:4F:D6:BA:86:C2:63:7E:63:4C:3F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS3549.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.171.0/24
Signature Algorithm: sha256WithRSAEncryption
33:52:28:8b:a9:b4:36:da:67:ef:38:82:8d:4a:07:8c:38:6a:
f0:c4:4e:90:2f:fa:f0:41:bb:c5:79:7f:9e:61:cf:40:a5:f7:
1f:7c:81:60:08:a5:4c:a0:21:9f:57:79:a1:ad:dc:f1:85:1c:
48:3c:9b:9e:0b:03:77:89:89:36:a9:c0:01:df:c7:e8:5d:07:
a1:ab:39:1f:7e:f0:51:0b:37:73:da:3d:b5:10:ce:b2:e1:2f:
16:79:22:94:c0:18:ad:92:0f:72:63:ba:2b:23:e7:92:e5:65:
7d:07:79:2c:73:22:35:3d:72:6f:02:dc:58:3f:5f:41:7a:0a:
37:f2:e4:26:57:9a:ef:27:b1:33:92:a4:39:17:c5:64:af:37:
85:8a:da:e1:f5:59:e9:b1:cf:9b:56:25:9f:e9:06:58:58:26:
7e:ab:d0:3f:b5:c2:0e:7e:06:ae:88:34:2c:12:98:f2:e1:12:
4e:f3:56:2c:34:80:3a:e7:af:89:b8:f1:47:47:07:2b:38:f6:
25:45:28:14:84:b7:59:b0:ce:77:45:ba:8c:05:f5:5e:45:3d:
6f:d7:60:a4:95:b7:0d:c7:04:b2:f9:1f:db:54:bd:9d:1f:15:
5f:28:8a:e2:51:dc:36:f7:f6:9f:2b:f3:53:96:48:90:9c:f2:
d7:08:e6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 08:00:28 2026 by rpki-client