Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS48925.roa
File: AS48925.roa (raw, json)
Hash identifier: WzkG/rspGpyDZshrHoaqNy3O4ts9+PujufSOllWXLhc=
Subject key identifier: 5C:0E:CE:19:83:5A:DB:B3:7D:EE:97:95:FE:A5:D0:20:6B:DB:FA:CD
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0C9EA117B9CA0EEC7C355CD64AE39AD3FB3F4435
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS48925.roa
Signing time: Thu 25 Jun 2026 09:45:31 +0000
ROA not before: Thu 25 Jun 2026 09:40:31 +0000
ROA not after: Thu 24 Jun 2027 09:45:31 +0000
asID: 48925
IP address blocks: 82.47.17.0/24 maxlen: 24
178.83.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:9e:a1:17:b9:ca:0e:ec:7c:35:5c:d6:4a:e3:9a:d3:fb:3f:44:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 25 09:40:31 2026 GMT
Not After : Jun 24 09:45:31 2027 GMT
Subject: CN=5C0ECE19835ADBB37DEE9795FEA5D0206BDBFACD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:9b:22:11:a2:24:d4:a2:47:9e:3a:80:ec:
89:78:16:db:38:c9:0d:db:4d:d8:47:26:f4:e3:d3:
be:9a:02:56:26:dd:93:4f:87:dc:27:68:57:45:22:
72:1a:07:a6:05:cf:60:34:03:2d:92:e0:da:e2:94:
c6:37:4a:dd:76:18:cc:8a:aa:ff:c1:3b:4a:85:52:
ee:87:05:e5:dd:a7:e6:5c:92:a1:99:48:77:e9:c8:
cf:f2:cd:54:cf:a6:5f:e1:58:aa:fd:05:32:58:78:
04:8c:8c:9a:08:5b:0a:24:46:fa:01:77:f0:5e:db:
1c:64:52:25:30:c3:18:12:ba:76:97:b5:39:ef:e1:
83:76:e2:61:6f:3d:0f:19:aa:6d:10:5b:c2:bd:51:
35:ad:bb:61:32:3b:9b:c1:49:67:ac:67:4a:07:9f:
de:f3:b3:93:fc:2a:ea:d5:f3:b1:a9:e2:aa:cf:56:
05:21:60:94:52:16:66:1a:66:42:bb:26:5d:9a:47:
10:06:6d:a0:3c:9c:fb:ea:1a:32:a7:82:ef:90:3b:
47:48:45:3f:b7:e5:25:a6:ce:41:8f:e2:4e:64:21:
b3:1a:e8:96:44:43:30:c7:a8:e1:55:75:c8:66:12:
25:8b:53:de:e5:53:2e:15:88:42:37:19:6f:02:73:
87:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0E:CE:19:83:5A:DB:B3:7D:EE:97:95:FE:A5:D0:20:6B:DB:FA:CD
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS48925.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.17.0/24
178.83.136.0/24
Signature Algorithm: sha256WithRSAEncryption
51:20:fd:c8:ff:05:d7:58:6a:3f:0b:90:b6:dd:be:af:21:d2:
d2:17:28:02:83:8c:ae:d5:71:21:f0:fa:79:4d:aa:a9:a9:ee:
ce:27:2c:76:f2:5a:01:1c:ff:b6:56:43:0d:95:3e:fc:5f:45:
e8:d0:e9:5f:f6:09:30:ed:3a:36:f2:81:a9:c6:c9:48:98:35:
90:5e:7f:2d:26:bf:53:0f:a4:92:ad:df:be:1d:de:18:b8:9c:
c8:77:d8:51:3c:f6:9c:57:4a:cc:86:12:b8:f0:83:90:4c:dc:
09:6c:eb:c1:ed:db:5b:a5:f1:d9:23:99:38:27:d8:48:57:aa:
62:76:27:ea:f7:da:0c:63:6b:ac:5e:a1:07:08:7a:24:48:58:
b1:0e:e3:27:23:97:54:e6:40:ed:5d:ef:40:c3:25:c3:7d:e9:
e4:b2:c5:41:e6:28:05:18:ff:d2:aa:09:89:be:d4:ab:f1:a5:
d8:de:3b:5a:80:5d:d1:e8:26:c2:1d:aa:a6:e9:8e:8f:d3:e3:
f2:4f:40:3b:42:e4:ef:fa:5c:1d:55:ef:9e:44:e1:94:59:3f:
b1:e6:c2:5e:f4:a7:42:03:00:84:7f:25:7f:43:75:c7:91:0f:
ec:c5:a1:c5:32:4c:3d:71:58:3d:d1:55:9e:0f:69:e9:9b:ac:
b5:17:12:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:07:07 2026 by rpki-client