Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS44486.roa
File: AS44486.roa (raw, json)
Hash identifier: wHUbvpp/KLhudgX6HnxtFQsx7GwDYCffMYuL2HL3KQI=
Subject key identifier: 77:CA:51:87:B6:7B:A7:DF:40:AF:45:2D:35:58:AB:C5:01:52:D8:49
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 73B93CD75B36898CB7EBF7A82A38BDB500236417
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS44486.roa
Signing time: Thu 08 Oct 2026 14:28:32 +0000
ROA not before: Thu 08 Oct 2026 14:23:32 +0000
ROA not after: Thu 07 Oct 2027 14:28:32 +0000
asID: 44486
IP address blocks: 143.14.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:b9:3c:d7:5b:36:89:8c:b7:eb:f7:a8:2a:38:bd:b5:00:23:64:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 8 14:23:32 2026 GMT
Not After : Oct 7 14:28:32 2027 GMT
Subject: CN=77CA5187B67BA7DF40AF452D3558ABC50152D849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2d:e3:18:b6:5a:af:72:6a:6e:be:cd:f2:fc:
a2:15:63:01:07:8f:6b:8c:f1:e2:e0:48:3d:52:ff:
23:43:49:2d:8b:1e:fa:c4:d0:0f:ec:70:6e:3e:b4:
ac:8f:ad:e0:b3:31:1b:9e:b1:74:e7:e5:d2:71:ed:
ea:cf:0f:f3:ec:0f:09:84:76:41:23:98:53:32:2d:
30:c8:9a:48:5f:aa:87:14:77:8e:94:c9:a9:4f:73:
59:54:d0:d3:ed:3d:bc:80:23:e5:08:a6:ee:43:65:
89:65:36:f1:b3:7e:fa:64:b9:fe:3e:ed:af:49:d6:
72:92:fb:8d:01:99:a2:61:d6:b8:6c:3f:c4:27:46:
d8:58:d6:fd:85:36:68:c4:18:25:ba:65:c2:ce:c9:
94:8a:48:4d:5f:2d:42:b7:f4:e1:dd:a0:85:82:8a:
49:dd:37:ac:01:f4:f1:c6:89:ad:74:0d:5f:b7:15:
23:ef:cb:fc:b9:6c:c6:22:d7:e1:c0:e9:a1:03:37:
f2:37:e6:7c:f3:5d:72:b8:85:2a:cf:23:d1:35:7b:
8c:44:28:58:ab:65:08:8d:76:33:a3:b0:cb:ee:9e:
a3:82:62:9b:86:57:6a:8b:c1:c6:a3:f2:cf:38:d1:
11:56:82:73:7d:dd:39:9f:b3:d8:f5:47:78:5e:4b:
86:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CA:51:87:B6:7B:A7:DF:40:AF:45:2D:35:58:AB:C5:01:52:D8:49
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS44486.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.20.0/24
Signature Algorithm: sha256WithRSAEncryption
29:cb:1e:7f:2f:c2:84:7a:8a:58:5f:b2:c3:0a:c9:3d:a9:10:
b0:10:9d:40:7c:ac:7b:93:66:4e:7b:ce:d2:e4:29:51:34:7a:
53:97:59:2c:91:c3:ab:96:0f:cc:79:24:78:65:da:21:fd:3f:
17:6c:42:fb:e0:d8:54:b5:6c:92:77:31:c9:5f:33:ee:44:bc:
ca:62:a2:2d:9c:e3:da:03:c2:97:7b:21:fe:09:9e:af:b9:d1:
f6:64:4c:4d:34:8d:22:ad:4c:5b:86:18:08:3a:ce:9f:e2:08:
89:74:72:bb:98:9b:4a:9e:b0:81:45:2c:ec:08:3b:88:47:7e:
c2:22:9b:44:11:9d:43:db:7c:d3:7d:a8:cb:3c:54:85:30:31:
69:93:b6:cc:2d:7f:f6:ab:9c:51:ae:6c:2c:9d:79:e9:2a:56:
fe:a8:1d:13:6f:5b:33:85:58:1e:ba:f3:a7:b9:2d:5a:c7:45:
da:10:11:cc:c8:42:7e:c3:aa:d9:b6:bb:0d:6e:fa:dc:7d:f7:
ae:11:ed:25:1d:83:c1:92:c3:76:c5:a6:23:59:71:04:0d:fe:
16:dd:e8:dc:6d:1d:c5:14:8a:aa:89:63:a3:e8:a7:e9:c0:77:
fa:c0:0d:6f:9f:68:81:8d:a1:88:b4:1a:84:e5:c2:1f:a2:82:
68:ba:1a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:25:19 2026 by rpki-client