Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS45102.roa
File: AS45102.roa (raw, json)
Hash identifier: jQspnd6Z+RMAyDMFckG/J2i16WPQ0mk05FKBvhFIIGk=
Subject key identifier: 79:5C:A5:9D:7B:0F:6C:38:94:70:F4:A0:71:03:FE:A6:50:3C:E8:52
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 08CBE75E74BCBEF459832C291E62DF34FBD5A2ED
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS45102.roa
Signing time: Tue 09 Jun 2026 07:20:22 +0000
ROA not before: Tue 09 Jun 2026 07:15:22 +0000
ROA not after: Tue 08 Jun 2027 07:20:22 +0000
asID: 45102
IP address blocks: 82.47.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:cb:e7:5e:74:bc:be:f4:59:83:2c:29:1e:62:df:34:fb:d5:a2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 9 07:15:22 2026 GMT
Not After : Jun 8 07:20:22 2027 GMT
Subject: CN=795CA59D7B0F6C389470F4A07103FEA6503CE852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ad:ab:95:82:92:b3:82:f5:50:c4:0b:32:ed:
09:e1:17:ca:9b:93:d7:11:b3:f2:43:7e:4c:0e:2d:
6e:82:4c:97:38:60:d6:25:9d:af:2b:23:d6:4a:1e:
29:d9:74:b3:73:c5:46:9c:b9:15:49:43:d1:00:88:
73:0d:9b:c3:50:ad:67:5e:d0:60:7e:7e:40:13:aa:
8a:45:33:dd:26:8a:35:8f:de:f6:9a:1d:b5:37:97:
86:d3:b8:53:61:5e:7b:56:dc:92:0d:f0:5c:9e:71:
b0:85:75:57:89:ab:aa:f0:82:6b:20:73:74:7e:da:
47:8d:b8:95:7e:f6:c9:d2:23:e7:d7:25:27:68:ea:
fa:9c:48:d5:3b:0f:89:45:88:3e:14:4d:69:69:80:
3b:36:60:2e:08:b0:23:59:20:49:af:cc:ef:b9:8b:
49:05:5a:9d:e7:d7:0d:e0:a2:73:ad:da:8f:ed:e7:
ec:c4:1a:dd:9b:bc:f9:c9:ee:2e:6a:99:b8:1a:d5:
04:2c:28:a3:76:f6:4d:d1:7f:40:10:be:4f:25:51:
95:37:c6:aa:79:18:5e:6c:8a:61:88:4e:53:e7:a3:
9b:f4:bc:b3:a7:83:2c:a8:8e:15:3f:43:44:d8:12:
76:c4:ca:85:1a:f5:b7:81:27:9a:3e:39:04:f3:b3:
06:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5C:A5:9D:7B:0F:6C:38:94:70:F4:A0:71:03:FE:A6:50:3C:E8:52
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS45102.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.189.0/24
Signature Algorithm: sha256WithRSAEncryption
41:d6:b8:06:49:c2:6d:f9:da:48:11:42:f0:da:ec:82:57:6c:
ab:1e:55:59:29:68:1f:c9:ea:29:5f:f1:af:a0:01:67:2d:a8:
7a:a6:d0:be:20:3d:bd:03:83:1e:c9:c9:e0:19:b7:4d:83:3a:
ca:d2:12:9d:1b:3f:c9:62:f5:c7:ad:a6:c8:13:29:1c:d7:4d:
02:88:e8:4b:df:a1:00:c8:91:08:ef:8e:1e:26:63:74:9e:09:
83:ee:af:4c:d5:ca:3b:3d:d4:cf:e2:a2:c1:ad:90:de:dc:6e:
e4:5f:2c:e7:6c:31:e2:0c:ba:f9:ca:4a:f9:d7:55:a2:45:60:
6c:1d:05:0b:10:a6:28:98:e6:3f:94:c1:e6:9f:ca:a9:5d:40:
fd:2f:38:c6:2e:12:21:4f:2e:66:9b:b1:4e:7d:c4:3b:64:68:
27:d9:3b:44:15:f9:fa:35:01:f0:0c:12:a6:f8:3c:74:19:88:
9e:36:9c:71:91:43:da:b0:c7:6a:75:ec:6a:f7:a7:7b:2d:df:
fd:0c:9a:f3:24:d4:cd:04:e1:9e:b8:4d:c4:00:0b:d4:ea:9a:
5f:74:52:e8:3f:57:9f:1a:b0:c6:37:7f:ce:b3:36:8a:bc:b7:
ce:9c:9b:1e:f5:0c:02:b3:7d:aa:f3:bc:4b:6f:31:ed:4c:6c:
7c:6a:5c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:23:34 2026 by rpki-client