Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS48678.roa
File: AS48678.roa (raw, json)
Hash identifier: RIJdavLh3OMB/ihHQSqL4G1JOMAQLv4UPVTUEPj6NEM=
Subject key identifier: 56:BB:A8:8F:12:F9:39:5D:A4:AA:49:67:D0:1F:C1:32:8C:56:24:A1
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 10D59370DA0BB939CBDCADC3A30151E17174336A
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS48678.roa
Signing time: Sat 08 Aug 2026 08:25:45 +0000
ROA not before: Sat 08 Aug 2026 08:20:45 +0000
ROA not after: Sat 07 Aug 2027 08:25:45 +0000
asID: 48678
IP address blocks: 31.40.199.0/24 maxlen: 24
141.98.48.0/24 maxlen: 24
141.98.112.0/24 maxlen: 24
141.98.113.0/24 maxlen: 24
141.98.114.0/24 maxlen: 24
141.98.115.0/24 maxlen: 24
176.96.130.0/24 maxlen: 24
217.18.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:d5:93:70:da:0b:b9:39:cb:dc:ad:c3:a3:01:51:e1:71:74:33:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Aug 8 08:20:45 2026 GMT
Not After : Aug 7 08:25:45 2027 GMT
Subject: CN=56BBA88F12F9395DA4AA4967D01FC1328C5624A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a3:df:88:71:4f:60:1a:e0:45:c3:08:6c:18:
13:ee:4b:d7:80:20:44:2f:f5:38:b3:a1:ee:da:d4:
83:e1:6b:a0:bd:2c:f9:14:8a:7c:eb:45:3d:78:fe:
54:91:76:42:b3:2e:85:c8:66:c6:1a:29:53:6e:a0:
60:c3:a1:33:85:00:08:36:8a:bf:b7:a3:12:93:b8:
0f:32:43:4d:23:9c:a7:48:32:7f:e7:c1:b4:c3:34:
75:1e:c7:02:a9:93:6c:51:9c:4d:70:5c:a4:dc:c6:
ca:24:4a:58:be:2f:d4:4f:3c:e9:da:f8:69:f6:91:
5a:d7:6f:2e:eb:7e:31:c0:91:27:76:35:ec:6b:f1:
5e:4d:a2:8b:b1:d3:13:76:23:48:b1:f8:fc:1f:d1:
38:3d:de:12:bc:25:49:22:7e:67:93:4d:ed:3b:ec:
18:be:3e:42:ce:27:cf:f8:d4:a4:4f:ca:d5:bb:74:
1f:61:e0:db:4a:73:90:78:c5:d6:17:f1:8c:74:52:
7b:12:c1:55:67:b8:11:89:9f:71:91:b4:ef:e9:65:
27:1f:c5:30:a4:41:5b:7e:16:93:d9:c4:f2:e7:d9:
5a:28:13:c6:f8:2f:81:64:04:59:26:a2:ee:47:ed:
b6:ea:7d:17:7f:64:74:6d:f9:79:34:e1:cc:39:b6:
92:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BB:A8:8F:12:F9:39:5D:A4:AA:49:67:D0:1F:C1:32:8C:56:24:A1
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS48678.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.199.0/24
141.98.48.0/24
141.98.112.0/22
176.96.130.0/24
217.18.209.0/24
Signature Algorithm: sha256WithRSAEncryption
46:6a:73:7c:bc:6d:ca:81:51:c4:f3:77:b9:30:ab:73:1c:2b:
5d:81:13:c6:2d:16:d2:97:6b:5a:82:00:14:d3:00:c0:fa:75:
f1:20:e6:fd:24:7a:8b:92:bd:8f:40:84:21:57:9a:6c:a3:34:
77:8e:13:af:f2:85:d4:62:99:32:8e:38:fa:e4:6f:0e:23:54:
2a:b4:d2:c3:0f:b0:b3:3b:67:2e:c0:a6:ec:1a:3c:70:e4:50:
2f:01:5e:ac:cc:91:a9:28:04:00:fb:34:a3:48:1e:98:3d:6f:
b7:2b:02:f6:7a:6a:7d:d3:0d:4b:ce:bf:f1:55:be:bd:76:74:
e0:86:99:da:0e:6e:ec:05:e0:21:88:c5:1c:b2:f4:ef:bc:81:
e3:ff:d6:da:50:10:2f:49:49:ce:9e:17:8d:93:e6:3e:8f:f7:
17:84:b1:a6:ff:5f:e1:67:aa:44:6e:17:b3:a5:13:a2:c5:66:
9b:8b:4f:c7:c7:93:64:e4:b6:d4:ab:f0:0e:a5:30:a3:90:23:
93:ba:97:ce:a4:05:10:7d:4c:33:9b:d4:6f:f0:26:80:44:24:
91:e2:f4:f7:41:30:42:0d:20:a7:ec:85:da:44:2e:7a:27:e7:
ea:96:e5:28:26:cb:4a:ed:ae:21:24:e8:25:b7:d7:09:a4:3a:
b2:e7:cc:66
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUENWTcNoLuTnL3K3DowFR4XF0M2owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0
MDg0ZDIwYzAeFw0yNjA4MDgwODIwNDVaFw0yNzA4MDcwODI1NDVaMDMxMTAvBgNV
BAMTKDU2QkJBODhGMTJGOTM5NURBNEFBNDk2N0QwMUZDMTMyOEM1NjI0QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXo9+IcU9gGuBFwwhsGBPuS9eA
IEQv9Tizoe7a1IPha6C9LPkUinzrRT14/lSRdkKzLoXIZsYaKVNuoGDDoTOFAAg2
ir+3oxKTuA8yQ00jnKdIMn/nwbTDNHUexwKpk2xRnE1wXKTcxsokSli+L9RPPOna
+Gn2kVrXby7rfjHAkSd2Nexr8V5Nooux0xN2I0ix+Pwf0Tg93hK8JUkifmeTTe07
7Bi+PkLOJ8/41KRPytW7dB9h4NtKc5B4xdYX8Yx0UnsSwVVnuBGJn3GRtO/pZScf
xTCkQVt+FpPZxPLn2VooE8b4L4FkBFkmou5H7bbqfRd/ZHRt+Xk04cw5tpKRAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUVruojxL5OV2kqkln0B/BMoxWJKEwHwYDVR0j
BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm
YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD
RTBndy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt
NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTNDg2Nzgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBAAfKMcD
BACNYjADBAKNYnADBACwYIIDBADZEtEwDQYJKoZIhvcNAQELBQADggEBAEZqc3y8
bcqBUcTzd7kwq3McK12BE8YtFtKXa1qCABTTAMD6dfEg5v0keouSvY9AhCFXmmyj
NHeOE6/yhdRimTKOOPrkbw4jVCq00sMPsLM7Zy7ApuwaPHDkUC8BXqzMkakoBAD7
NKNIHpg9b7crAvZ6an3TDUvOv/FVvr12dOCGmdoObuwF4CGIxRyy9O+8geP/1tpQ
EC9JSc6eF42T5j6P9xeEsab/X+FnqkRuF7OlE6LFZpuLT8fHk2TkttSr8A6lMKOQ
I5O6l86kBRB9TDOb1G/wJoBEJJHi9PdBMEINIKfshdpELnon5+qW5Sgmy0rtriEk
6CW31wmkOrLnzGY=
-----END CERTIFICATE-----
Generated at Wed Aug 12 21:27:14 2026 by rpki-client