
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS48529.roa
File: AS48529.roa (raw, json)
Hash identifier: drkLpRvlFX7/Na806fF09LabapudCIUqYlQCfO00BZ0=
Subject key identifier: 0A:78:77:70:34:45:ED:FE:AD:E4:F4:F3:24:A1:67:51:2A:A2:33:46
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 374F07C3D9A8D64A030DDA747185121758FC5148
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS48529.roa
Signing time: Tue 07 Oct 2025 12:59:22 +0000
ROA not before: Tue 07 Oct 2025 12:54:22 +0000
ROA not after: Tue 06 Oct 2026 12:59:22 +0000
asID: 48529
IP address blocks: 140.233.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 18:49:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:4f:07:c3:d9:a8:d6:4a:03:0d:da:74:71:85:12:17:58:fc:51:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 7 12:54:22 2025 GMT
Not After : Oct 6 12:59:22 2026 GMT
Subject: CN=0A7877703445EDFEADE4F4F324A167512AA23346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ca:f9:b6:5b:6e:01:b4:b2:2f:fa:b6:ab:8f:
04:44:d5:6a:83:12:76:22:16:1d:31:2f:8d:2d:43:
f9:7d:8f:5f:34:6d:d8:32:d2:04:ae:6d:55:8a:cb:
eb:51:87:f2:53:ca:ba:44:e4:a0:aa:40:54:d1:50:
ee:43:36:a8:55:02:c5:12:90:2a:89:69:9e:b9:9d:
1e:b3:78:ae:95:df:e8:16:5e:7d:c1:ed:48:d4:d3:
b9:47:d6:9b:c4:89:4a:6e:ff:4a:30:8a:6c:b3:7c:
95:9f:2f:d7:a7:55:9e:ea:c2:d6:54:f0:09:dc:62:
d8:38:02:8d:1d:b3:1a:e6:e7:17:de:1a:c7:67:f9:
13:cf:ef:df:90:08:97:b3:d7:ad:b5:00:04:ef:40:
86:34:af:ba:e1:e0:9b:25:ca:7b:40:d5:c4:0e:00:
36:60:b9:8b:c9:dc:fc:83:49:16:cf:65:2e:57:8b:
d3:4f:14:23:ad:1f:a8:12:53:31:2e:73:99:72:20:
d2:75:20:b1:65:5b:7a:ef:c5:53:0b:c9:77:c7:96:
81:5a:19:9d:f9:eb:a1:92:04:bc:3c:9b:ab:85:77:
4e:93:df:9a:ef:b5:2d:20:1f:b7:7d:20:52:f2:9f:
3f:96:b1:63:0a:f6:dd:18:91:23:f9:87:1a:d0:88:
eb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:78:77:70:34:45:ED:FE:AD:E4:F4:F3:24:A1:67:51:2A:A2:33:46
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS48529.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.184.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:9a:2c:92:b7:45:60:a9:33:28:1c:61:d0:4b:ab:5d:1c:00:
03:1a:bf:ee:31:fc:3c:4e:0f:5d:76:4d:aa:2b:24:0b:4b:02:
c1:6a:f1:76:8e:0a:e2:01:c2:87:e0:60:d4:9a:fb:6a:b5:21:
4b:fd:83:7d:59:3f:4e:85:03:cc:aa:5e:b5:f1:fc:cb:6b:5d:
74:f5:37:34:75:48:7b:85:0c:47:1c:ac:5d:83:d0:e5:5b:e2:
6c:80:b7:6d:4c:66:94:a3:09:2d:bf:5b:0c:53:56:05:6b:c9:
f7:09:f7:22:a1:55:69:ae:8a:d4:09:18:89:70:43:1c:35:93:
45:58:07:3b:6c:05:48:9b:50:3a:e7:44:32:b9:d1:6f:c7:ba:
2d:6e:5a:39:48:2f:9e:11:2a:ce:03:d3:5e:ea:ee:63:b7:c1:
a8:6e:af:c4:f5:fd:cf:3f:cd:a8:2d:a9:3b:93:ff:88:38:d5:
44:11:b1:cb:7b:af:7b:6b:a1:eb:0f:e3:dd:cf:68:a2:81:e9:
ff:d8:e2:4a:15:0e:34:cf:41:f5:74:a2:f5:1e:88:c3:2a:e5:
19:e3:8e:d0:c1:08:96:28:3c:92:2f:2c:ac:fa:fa:5e:bd:fc:
84:09:2d:28:9d:3a:e8:2b:33:16:99:c8:53:0b:0f:a4:e8:52:
ba:e8:91:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:01:42 2025 by rpki-client