Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS44589.roa
File: AS44589.roa (raw, json)
Hash identifier: VsPx98CetZ02QcaRIzh3ueVK+gDlYThLmRkYEHjVHpM=
Subject key identifier: AC:CC:A0:D8:A0:8A:54:8F:C5:C1:4A:9F:C3:71:41:C5:C3:41:FD:01
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7D4FF63D0EEBA3BEE1E1AC2C78F9675B570732ED
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS44589.roa
Signing time: Sat 06 Jun 2026 05:14:55 +0000
ROA not before: Sat 06 Jun 2026 05:09:55 +0000
ROA not after: Sat 05 Jun 2027 05:14:55 +0000
asID: 44589
IP address blocks: 82.27.8.0/24 maxlen: 24
82.41.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:4f:f6:3d:0e:eb:a3:be:e1:e1:ac:2c:78:f9:67:5b:57:07:32:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 6 05:09:55 2026 GMT
Not After : Jun 5 05:14:55 2027 GMT
Subject: CN=ACCCA0D8A08A548FC5C14A9FC37141C5C341FD01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3e:b8:5d:be:38:6a:c4:d9:a8:16:df:d9:bf:
e2:5e:9e:db:0c:b8:91:ed:a3:ee:cd:95:c5:a7:de:
e7:2f:46:1e:0a:98:b7:8a:0e:d6:36:7a:1b:eb:52:
6d:a2:0b:0c:58:07:2b:0d:7d:01:2f:93:59:af:d3:
e5:8a:f0:ed:57:3c:47:34:a4:37:14:95:e1:d5:4a:
d8:9e:c7:b9:c2:5f:12:e0:3a:d8:25:f1:8e:6a:64:
f8:55:fb:46:1b:73:82:77:75:b9:be:ab:c8:af:f9:
b2:b2:6e:87:ac:e8:f9:31:b7:4d:e8:c7:1d:92:ca:
3d:77:d5:f7:c8:a7:06:f0:26:29:29:69:f9:27:08:
ec:08:82:31:5d:15:b1:bf:dc:54:92:1b:15:9c:4b:
b0:4c:45:c4:04:46:92:ee:67:c4:22:f2:cc:d5:fc:
00:67:f9:00:f4:57:7c:f2:6a:8a:b6:4f:31:b6:4b:
33:c8:2b:d9:c9:cb:b9:63:fa:c3:4b:6b:aa:e5:da:
c8:0b:6f:9f:88:4d:87:7a:fd:db:c3:7e:8b:6c:e6:
f0:43:d3:51:f2:20:80:ed:c4:9e:4e:99:4a:6f:70:
af:23:8d:62:9a:8a:09:54:d0:8d:93:0d:e3:b2:8a:
88:49:8e:5b:e5:28:ed:7d:45:1b:bb:ab:88:19:19:
0c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CC:A0:D8:A0:8A:54:8F:C5:C1:4A:9F:C3:71:41:C5:C3:41:FD:01
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS44589.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.8.0/24
82.41.180.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ee:9c:37:91:7f:92:5f:00:d5:2c:f9:04:ef:4d:81:aa:ae:
d6:6a:e3:ab:8d:3d:44:85:dd:d2:9d:6c:06:84:00:5c:0b:5b:
cd:9a:01:eb:2c:c8:ae:a9:b3:4d:8f:60:50:0e:1f:ac:73:ca:
8f:36:9c:09:aa:49:12:35:5f:72:21:06:90:86:3f:ae:f6:a0:
7c:f8:49:73:1e:28:fd:af:a7:a5:3d:52:18:52:94:6e:9a:fc:
03:d5:43:7a:c6:4c:64:7a:d7:85:08:07:fc:a9:c4:73:b3:0b:
9c:b8:86:cb:d8:b7:26:90:26:e7:1a:ad:a0:86:aa:96:cf:d7:
52:cb:c0:c4:99:d5:57:7c:eb:fe:d3:e5:d7:5a:b0:5a:a3:16:
6c:d3:e6:74:cc:b8:6e:69:67:1f:fc:7e:fb:d7:36:fc:50:6f:
ec:45:a4:d8:bd:68:84:2b:1c:20:a9:b1:43:d9:f8:5e:54:1c:
07:1e:61:12:52:a0:0e:ae:77:fc:39:4d:76:d4:0c:fb:b9:8a:
39:2f:2a:68:6f:97:28:16:07:4b:02:bd:2b:98:b5:46:d9:ca:
95:cd:d7:7a:09:a0:f7:6e:1f:5d:18:d5:69:5b:1b:d9:38:2a:
16:02:6b:39:62:0d:e9:ed:b3:04:6c:bc:fa:98:72:d0:f2:46:
d6:53:ab:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 11:54:07 2026 by rpki-client