Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48314.roa
File: AS48314.roa (raw, json)
Hash identifier: Z5Eq1Bn3s4uixnLOCN5Shyxuj/nPuFflGszpsPxpvpc=
Subject key identifier: E4:E5:4D:DF:72:8E:69:D9:07:A8:26:53:10:51:83:20:64:96:57:5A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 14AE3DBE7F7C65935FA379B64F6832F3BA192712
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48314.roa
Signing time: Tue 13 Oct 2026 07:49:36 +0000
ROA not before: Tue 13 Oct 2026 07:44:36 +0000
ROA not after: Tue 12 Oct 2027 07:49:36 +0000
asID: 48314
IP address blocks: 194.110.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 09:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:ae:3d:be:7f:7c:65:93:5f:a3:79:b6:4f:68:32:f3:ba:19:27:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 13 07:44:36 2026 GMT
Not After : Oct 12 07:49:36 2027 GMT
Subject: CN=E4E54DDF728E69D907A82653105183206496575A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:93:86:5a:19:6c:2f:ba:5f:58:84:60:89:
15:7c:dc:09:0f:f9:88:75:f4:43:84:ad:ec:c2:c1:
e6:47:fc:8d:fa:6e:59:2a:a2:d9:da:cb:b8:6a:41:
c1:f8:57:e5:d7:92:0d:a9:40:fd:0d:6f:f7:d7:d1:
23:0d:ed:f7:2a:61:05:e7:55:a7:5f:f9:b2:ec:20:
30:e7:e3:00:b4:e1:53:71:14:49:d7:04:8b:da:58:
10:cc:90:27:1f:88:bd:f6:44:c2:fb:e1:da:c8:24:
29:0b:2b:df:69:7e:97:e8:c7:bd:9e:8a:48:22:17:
78:16:58:23:60:08:32:73:c2:e7:32:f6:48:97:5e:
ee:b6:ec:38:6a:21:57:82:f0:4f:f2:e4:ed:d0:5a:
a7:88:44:07:15:dc:c2:69:4d:cb:f8:bc:d6:04:bd:
15:c3:35:87:c1:20:7a:ca:96:02:f1:14:1e:3b:5b:
e8:15:3c:f3:c6:cf:00:a0:9a:52:63:85:b1:fb:67:
7e:ec:db:c4:f0:ae:d4:ac:ed:6f:f0:5b:af:de:93:
16:de:9f:4e:93:b0:18:5e:c3:1f:ec:a3:ed:ff:74:
c0:27:3a:e4:89:99:00:7f:a8:dd:e4:b9:98:fe:b2:
84:93:ff:12:bf:8d:a0:00:35:21:77:54:79:56:d9:
29:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E5:4D:DF:72:8E:69:D9:07:A8:26:53:10:51:83:20:64:96:57:5A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48314.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.12.0/24
Signature Algorithm: sha256WithRSAEncryption
05:c3:36:6c:96:cc:6a:6d:87:ce:94:ca:29:d8:af:50:2c:60:
8d:d4:41:c2:2f:94:f3:87:d6:81:4a:b7:73:af:7d:03:9d:21:
78:06:70:6f:59:4e:10:b0:71:c7:b2:a5:cd:cf:8d:0a:a4:25:
a0:94:aa:dc:8a:e0:2c:af:d2:5a:2a:22:1c:d3:c6:1d:d3:7c:
ae:d8:78:01:18:82:72:01:54:ab:42:62:2d:f4:91:18:1d:b9:
16:62:4b:16:b9:ef:9f:19:23:f5:59:28:8b:dc:47:db:25:c6:
32:b3:32:4c:b0:f0:25:e2:e8:d1:d6:33:eb:ae:bb:f1:ef:be:
22:d6:5d:ff:5d:3a:42:47:30:e6:89:38:77:fb:e8:37:c7:15:
af:01:6f:13:f4:27:80:2f:39:89:3a:1c:b8:1b:64:9c:c5:e9:
c3:7f:77:7a:ab:db:0b:32:03:90:55:bc:ed:ad:9b:3f:15:6b:
1f:c7:da:57:f6:c5:2f:d1:c7:98:1f:8b:a2:f3:7e:4c:6a:ac:
52:e8:f0:b6:79:ea:46:18:21:a0:be:2a:68:9a:cc:18:7c:10:
7f:6a:bb:73:18:7c:48:f6:c8:be:48:4a:c9:cf:b6:aa:a5:fe:
04:cd:ac:17:1e:24:ac:de:1a:cd:e3:ab:c0:a9:55:dd:7a:7f:
92:04:5d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 21:42:41 2026 by rpki-client