Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS46841.roa
File: AS46841.roa (raw, json)
Hash identifier: XefpIYmWk9z3075XPw9+1UuSEULCxLQVLmbCvFWLlvc=
Subject key identifier: AB:B0:5E:59:FA:FA:96:05:C7:EF:88:BE:EC:43:89:63:CE:A3:44:5E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 25AE40E37A362504309DB9024122A110BD422A38
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS46841.roa
Signing time: Fri 21 Aug 2026 08:18:34 +0000
ROA not before: Fri 21 Aug 2026 08:13:34 +0000
ROA not after: Fri 20 Aug 2027 08:18:34 +0000
asID: 46841
IP address blocks: 96.62.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:ae:40:e3:7a:36:25:04:30:9d:b9:02:41:22:a1:10:bd:42:2a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 21 08:13:34 2026 GMT
Not After : Aug 20 08:18:34 2027 GMT
Subject: CN=ABB05E59FAFA9605C7EF88BEEC438963CEA3445E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9a:86:2c:a5:41:29:26:55:c3:bd:a6:7e:33:
ba:3d:04:de:c3:d0:eb:43:8e:c3:91:b9:3a:1e:7d:
8c:fe:bf:2f:de:3c:ff:eb:e2:89:b7:5b:e5:a8:fd:
a4:56:7f:97:92:42:9f:6e:d2:79:53:68:76:36:e1:
e2:ec:af:a1:f3:51:1f:3a:71:3d:fc:4a:ee:82:d9:
4c:d4:b0:b0:ae:10:1f:1a:6e:d5:d0:77:fc:08:11:
96:d2:eb:3d:35:f2:19:7d:3c:1e:e8:63:b6:ec:45:
5e:2b:d2:94:b0:06:da:15:58:58:de:15:01:d3:3a:
41:8b:57:1d:8c:30:d0:84:c7:36:7b:06:90:67:28:
77:4f:e0:1c:5f:ba:be:6c:91:79:89:ed:cc:02:cb:
c8:7a:8c:25:8a:34:35:c8:2c:80:ef:1e:b6:19:2d:
b8:59:c8:2d:16:bf:0a:df:b6:1b:cd:93:0b:04:5e:
8b:57:5f:ff:df:9f:fd:f0:66:d8:eb:87:a8:52:a1:
dc:45:56:13:7d:f8:d3:75:2f:d7:47:22:1d:b3:29:
f5:50:45:72:4c:3e:c9:3e:5c:49:38:f9:5a:50:5b:
18:5b:f7:01:f3:78:5c:75:95:2e:fa:20:49:44:6e:
eb:09:df:1c:a0:c0:20:7b:28:34:d8:8c:1e:99:6f:
80:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B0:5E:59:FA:FA:96:05:C7:EF:88:BE:EC:43:89:63:CE:A3:44:5E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS46841.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.115.0/24
Signature Algorithm: sha256WithRSAEncryption
af:89:d1:6a:b2:37:d2:5b:2c:66:69:3e:97:d9:0b:23:fd:4f:
ac:b2:b0:ba:e4:2c:75:29:2f:00:38:bf:b3:78:f5:3f:5b:78:
1b:26:aa:1a:01:4e:68:4b:1e:c3:a0:24:21:a1:60:a0:5b:ea:
6c:77:3c:70:f1:18:c8:0d:7e:4b:fb:5a:6e:7b:4c:44:00:42:
21:d4:3f:40:8d:02:c9:c8:b9:50:ac:5c:18:3c:8d:28:88:c0:
b1:21:74:75:9c:81:00:3d:7a:30:77:c0:1a:84:f5:a6:60:0c:
96:a9:3d:0c:8d:4e:50:94:5b:6f:36:cb:18:8e:c0:71:f8:88:
6d:e9:cd:78:57:54:7a:bd:37:a3:d1:74:95:0e:70:9d:e1:bf:
58:e7:8d:80:05:ee:71:21:72:d0:61:26:65:64:2c:25:8f:0a:
61:20:a6:34:84:56:b3:0e:fa:0a:84:79:45:96:6c:ce:52:a9:
2b:0d:2a:04:72:7f:ba:30:7e:8b:6d:9a:d3:c4:4f:01:53:ca:
17:9d:18:c5:99:b1:c1:ac:84:4a:0d:58:0f:5c:26:d2:79:dc:
d0:f7:23:c8:ed:a3:5f:de:cd:ac:8c:57:f4:ac:c9:59:d7:a6:
50:32:56:bd:03:04:3f:bf:a4:24:eb:44:ee:6e:45:5b:ab:3f:
0c:60:2b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:38 2026 by rpki-client