Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS44709.roa
File: AS44709.roa (raw, json)
Hash identifier: tStAszCGeUKc60DjC3oOa17w0RaO5thDPfKqUwipzQ0=
Subject key identifier: B2:EC:8C:65:9B:53:80:04:96:F1:D6:B2:20:1A:01:43:12:14:0D:BA
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 0354D989CDFBEB69F3EFE4B17A5B289D4305F84E
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS44709.roa
Signing time: Sun 04 Oct 2026 00:51:38 +0000
ROA not before: Sun 04 Oct 2026 00:46:38 +0000
ROA not after: Sun 03 Oct 2027 00:51:38 +0000
asID: 44709
IP address blocks: 62.219.10.0/24 maxlen: 24
62.219.14.0/24 maxlen: 24
62.219.83.0/24 maxlen: 24
62.219.106.0/24 maxlen: 24
62.219.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:54:d9:89:cd:fb:eb:69:f3:ef:e4:b1:7a:5b:28:9d:43:05:f8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:38 2026 GMT
Not After : Oct 3 00:51:38 2027 GMT
Subject: CN=B2EC8C659B53800496F1D6B2201A014312140DBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:37:41:4d:5a:47:c6:8c:c5:00:af:cb:93:
88:fa:d5:c1:d4:83:4b:06:8e:7d:2e:45:07:cd:20:
f8:59:d3:da:5b:2f:97:e6:5e:17:9b:7b:7d:21:8e:
81:23:f7:80:7e:60:2c:76:77:44:6b:19:3c:67:62:
9c:47:95:19:1e:ef:5d:7f:84:a4:d1:50:48:18:bd:
1e:2e:b8:dc:a0:37:fc:e1:74:62:7f:b7:0f:f3:13:
48:46:95:0d:30:8e:c1:b8:06:49:a4:df:d0:ce:ca:
00:7f:75:92:65:d7:18:a1:d3:c9:e6:82:98:39:ae:
08:ac:4a:9e:59:57:07:33:75:8c:20:0e:ef:7d:7d:
44:42:9e:18:1b:c4:70:a5:39:74:87:9f:f8:ef:88:
99:11:53:f2:c0:e7:7c:21:53:d2:ce:b8:3d:a4:09:
29:0e:ca:89:99:3f:c0:d5:32:f0:6d:ee:d6:87:17:
10:07:dc:1e:b9:be:f4:a3:2d:a0:38:b1:d2:d9:7f:
f0:8d:35:bf:9a:00:43:ec:94:c3:4b:58:85:39:e7:
0c:92:11:5e:61:b3:dc:27:57:d5:70:54:30:d7:02:
a0:60:72:7d:de:a0:cf:a8:f4:16:b7:d6:26:ec:be:
c0:d5:79:99:00:7d:f7:d6:7a:fa:0e:15:41:73:34:
85:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EC:8C:65:9B:53:80:04:96:F1:D6:B2:20:1A:01:43:12:14:0D:BA
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS44709.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.219.10.0/24
62.219.14.0/24
62.219.83.0/24
62.219.106.0/24
62.219.197.0/24
Signature Algorithm: sha256WithRSAEncryption
85:9b:e0:e6:3b:0c:0b:04:d0:75:be:aa:08:36:10:70:e6:dd:
10:e1:d3:66:af:8b:ec:9e:7b:8b:ff:56:c4:f2:aa:3b:77:a9:
53:94:8d:ec:df:79:d4:93:c9:07:9f:0e:9b:41:ed:bc:26:7e:
f5:73:08:46:44:a1:fe:01:b3:fb:78:cf:22:50:7c:0d:bf:85:
a6:8e:44:f7:c8:cb:6a:02:78:69:9a:8c:1f:3b:e3:ae:76:55:
35:87:a9:b4:3f:cd:7c:80:64:29:60:cb:c8:84:59:a9:0a:5e:
ba:af:f0:87:78:b9:3f:9e:ae:d6:af:6e:c4:98:06:62:a8:23:
90:26:df:b6:f4:fe:bb:f9:69:93:83:a4:9c:a9:5b:dc:c6:75:
17:c9:89:d1:0b:01:0f:ad:dc:48:20:f5:41:64:ae:bd:e6:57:
09:2d:ad:3e:45:87:29:ee:bf:be:27:72:23:f3:14:6d:0c:cb:
b2:e3:80:35:db:8e:14:03:d7:30:40:bd:58:35:9b:ba:c3:d2:
05:23:d5:05:7f:53:68:79:9e:34:80:70:16:f5:a6:9b:e0:9e:
f1:b6:6e:d2:bd:14:c6:9d:b2:7a:eb:fe:6d:90:14:b4:08:c7:
9d:83:72:c5:26:39:57:36:1d:8a:8e:5c:0a:1a:bb:7b:4c:ed:
c3:30:00:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:13 2026 by rpki-client