Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS46450.roa
File: AS46450.roa (raw, json)
Hash identifier: A/br1iujhqh/zzuCONTcRXLU3Cg6+wAO6robbMpRSxk=
Subject key identifier: 27:F9:D9:F2:B4:4A:28:15:7C:22:D5:9A:E3:72:AF:C2:E9:7A:27:96
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2482679D67D978D6687267AC2647530E17770378
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS46450.roa
Signing time: Sun 23 Aug 2026 00:49:30 +0000
ROA not before: Sun 23 Aug 2026 00:44:30 +0000
ROA not after: Sun 22 Aug 2027 00:49:30 +0000
asID: 46450
IP address blocks: 140.150.184.0/21 maxlen: 24
140.150.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 03:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:82:67:9d:67:d9:78:d6:68:72:67:ac:26:47:53:0e:17:77:03:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 23 00:44:30 2026 GMT
Not After : Aug 22 00:49:30 2027 GMT
Subject: CN=27F9D9F2B44A28157C22D59AE372AFC2E97A2796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c9:90:33:33:f6:0d:f7:ac:13:c9:79:ff:ad:
5b:23:c6:28:b6:b3:6c:31:75:3c:63:e0:4f:b3:7a:
b6:a9:d5:69:ce:18:d0:21:1e:23:5e:1e:94:f2:ab:
2d:87:d1:1a:2b:73:31:1b:6e:aa:e7:84:ee:cc:da:
bc:d8:8a:00:0f:8d:38:b6:61:cf:76:85:66:47:32:
24:e8:f6:c0:1d:32:23:c0:27:4b:a0:a2:0a:1d:6a:
e1:b3:e3:8e:01:ea:68:7d:6c:9e:36:56:31:76:31:
fd:c5:28:c3:e3:75:6f:d0:89:95:09:9d:bb:2f:88:
b3:c5:ec:eb:9c:d5:b3:37:0b:92:b6:3d:c4:7c:55:
e8:85:8f:c1:92:9b:cf:9a:3b:98:c0:b8:16:41:a9:
73:ad:d8:5e:75:c1:00:39:21:e9:83:fd:0b:83:ea:
f5:18:5d:cc:65:56:f9:d4:b1:dd:56:ff:3f:b3:42:
bb:a5:ab:88:3e:04:ad:85:cd:26:7e:52:f7:9c:28:
d0:a3:b4:d8:07:f0:44:d2:0c:05:f3:bc:bc:c9:28:
60:29:80:11:5d:10:2d:7a:e9:f7:2e:a5:be:93:31:
b2:3f:8d:f9:98:83:ce:bb:7c:64:7b:ee:39:8f:4e:
b2:e8:ff:75:1d:85:c9:92:38:c5:55:6c:07:2a:76:
ef:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F9:D9:F2:B4:4A:28:15:7C:22:D5:9A:E3:72:AF:C2:E9:7A:27:96
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS46450.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.184.0/21
140.150.228.0/22
Signature Algorithm: sha256WithRSAEncryption
06:07:72:56:bb:20:3f:c7:36:da:76:8e:28:1f:c4:e9:9b:52:
64:a1:fd:56:11:b3:7a:77:94:c9:f0:5e:c6:45:16:e6:8b:30:
a2:d1:b3:e5:f3:ae:a0:de:a6:2b:3a:d9:d6:01:db:24:60:cc:
e1:04:2c:61:a5:59:ca:35:88:53:18:2b:c1:ca:d6:33:e8:5c:
90:c0:23:cf:32:01:bd:b8:b1:4a:69:cb:19:58:21:81:b2:98:
ed:a2:ca:e0:60:41:2c:9f:96:56:5a:d9:c6:e0:ba:78:e5:29:
c5:15:43:98:9b:f8:a8:ca:2b:5c:4f:92:5e:ac:9b:6f:f4:72:
4e:8a:a2:46:72:60:2c:7b:4a:a7:f2:c7:02:bb:64:34:bc:6b:
28:d4:99:7f:57:c4:a6:b2:ca:af:7f:ad:f4:c9:72:bd:f8:f3:
e5:72:2b:2e:64:b9:bf:dc:6c:b9:33:ee:09:51:8b:75:65:b8:
fa:5e:7d:61:2f:79:16:14:49:d6:52:ce:e9:34:7c:c5:0f:70:
cd:45:5a:f4:22:84:b7:85:f1:b8:20:bf:aa:59:2b:74:e6:33:
ca:28:67:82:50:d4:6e:05:7e:bf:78:1d:26:ab:12:2f:4b:c4:
5c:a1:6c:ce:33:e5:bf:c6:5e:b7:cc:f3:db:b1:3b:88:1f:da:
74:ae:22:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 08:49:00 2026 by rpki-client