Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS44259.roa
File: AS44259.roa (raw, json)
Hash identifier: BykTPcBTg4zoq1aurw+SWIX0hAOM3T30g4HvSHgeSrs=
Subject key identifier: 9D:B1:55:8A:98:AE:17:4F:C8:4A:69:ED:42:86:55:1C:E5:9B:47:57
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 035A97AC61B312A3B59CF8FA06AF092A4A03EE0A
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS44259.roa
Signing time: Mon 03 Aug 2026 13:58:20 +0000
ROA not before: Mon 03 Aug 2026 13:53:20 +0000
ROA not after: Mon 02 Aug 2027 13:58:20 +0000
asID: 44259
IP address blocks: 168.222.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:5a:97:ac:61:b3:12:a3:b5:9c:f8:fa:06:af:09:2a:4a:03:ee:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 3 13:53:20 2026 GMT
Not After : Aug 2 13:58:20 2027 GMT
Subject: CN=9DB1558A98AE174FC84A69ED4286551CE59B4757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:53:f9:48:d7:67:0b:78:33:58:84:57:55:94:
ec:95:16:b0:15:71:68:f8:b9:60:7a:69:b1:c6:51:
c2:02:8d:a2:87:aa:87:11:9e:bf:80:6f:45:9b:58:
ba:40:4c:4f:c0:b9:c9:09:1d:4e:2b:5b:e8:4d:2b:
d5:cb:13:ff:54:09:2f:96:d9:d0:36:13:68:31:9c:
76:ef:39:a3:d8:3d:51:e7:e4:96:ea:0c:68:12:18:
01:65:90:b1:24:ae:73:c5:a3:72:da:46:e6:3e:53:
5e:36:99:94:c3:b6:f7:06:33:33:a1:6a:17:75:08:
b9:4a:8c:d4:fd:7e:7c:f0:d2:03:87:e8:c1:30:4a:
2d:51:33:cc:c0:92:af:f9:40:81:f4:64:4a:60:f6:
a9:0f:be:9f:c5:e5:1d:2e:60:83:f6:fb:9f:b7:23:
66:cb:33:ae:f1:56:27:91:8e:0e:44:8a:69:b7:3b:
46:5d:10:26:09:85:0c:40:2a:b0:37:e0:35:37:ee:
a2:ef:fc:70:fa:a0:a0:96:43:ec:c3:97:e2:39:76:
dd:13:1e:42:58:64:b3:a7:11:be:25:19:f6:07:e8:
92:26:01:bf:fb:f6:8d:b1:8e:12:64:52:9b:dc:08:
87:07:7d:d0:98:74:ed:37:e4:e8:7a:64:b1:ee:f1:
98:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B1:55:8A:98:AE:17:4F:C8:4A:69:ED:42:86:55:1C:E5:9B:47:57
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS44259.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.75.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:ee:5d:bd:73:3a:44:a1:02:8e:d0:f2:ca:cd:08:da:86:01:
6d:eb:2a:c6:8f:4c:42:c1:cb:2b:ea:4c:53:da:5c:40:2e:c2:
b8:f4:e4:9f:70:8f:25:a0:c7:dc:85:dc:db:fc:a1:f6:9c:f6:
6e:63:8a:ef:c4:85:0c:51:97:c8:dd:b5:aa:e6:90:f3:12:ef:
f3:8b:b5:8f:29:c9:78:3e:a0:89:bf:bc:e4:7b:39:51:24:8e:
eb:53:ac:56:ce:90:9f:a7:82:7b:e7:43:62:82:a3:e2:90:13:
e4:f3:0a:36:8e:65:99:f4:dc:20:8d:b3:99:64:9d:69:ed:4b:
ed:73:3b:57:0d:40:68:e8:cd:ea:22:08:ab:52:12:bb:4c:6c:
3b:fe:24:9c:65:21:3d:a5:a6:b8:a9:c2:da:e7:0f:e5:d5:16:
bb:f3:ef:78:cf:f1:fd:ce:40:42:76:4a:48:0f:94:c0:b4:44:
25:3a:80:42:0a:c4:e0:f3:07:10:9f:f2:32:8d:d1:4e:3c:5c:
f8:65:44:f0:88:fc:69:6c:de:a1:9c:25:27:0a:b1:79:26:0b:
a1:d2:74:0d:db:69:cd:2c:5f:07:fd:eb:d7:2a:5f:76:95:fc:
71:13:de:42:1f:98:4e:0b:62:f8:99:72:42:0b:53:64:07:48:
64:b9:44:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:36 2026 by rpki-client