Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS49453.roa
File: AS49453.roa (raw, json)
Hash identifier: 07fJya1Y7aU8U+T6qXdKkhyuoL5/CsxRTU9Jiejc7AM=
Subject key identifier: 2B:3F:A1:0F:D3:1E:D7:7E:77:7B:1E:F6:55:3D:87:BE:D8:5B:4A:39
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 501CC83CC24AA88ED23645E0D5EA0E3FEBBDAA81
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS49453.roa
Signing time: Fri 26 Jun 2026 15:11:23 +0000
ROA not before: Fri 26 Jun 2026 15:06:23 +0000
ROA not after: Fri 25 Jun 2027 15:11:23 +0000
asID: 49453
IP address blocks: 82.40.24.0/21 maxlen: 21
178.83.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:1c:c8:3c:c2:4a:a8:8e:d2:36:45:e0:d5:ea:0e:3f:eb:bd:aa:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 26 15:06:23 2026 GMT
Not After : Jun 25 15:11:23 2027 GMT
Subject: CN=2B3FA10FD31ED77E777B1EF6553D87BED85B4A39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ef:56:3e:56:15:2b:52:9b:79:5f:d6:33:f2:
d2:c7:ba:82:e3:24:a9:89:e1:4c:4f:c1:37:73:2c:
85:9e:cb:a7:78:ca:8a:42:24:94:11:62:c0:13:2d:
26:98:23:d8:01:42:d7:9d:cc:22:05:69:8c:ce:7e:
5b:f8:15:76:45:f4:84:24:ee:30:09:33:ac:12:f8:
63:f9:ba:fa:5c:05:e0:cd:19:27:e3:79:03:e8:3c:
55:28:9f:9c:da:dd:2d:32:4f:56:a8:94:ca:94:23:
73:1c:72:03:ae:0b:30:60:81:04:a0:46:e3:10:c9:
cf:48:23:17:bb:89:db:77:5c:03:07:a1:e8:96:89:
ce:1c:88:1a:71:1e:b1:f8:0c:18:3d:4d:66:a3:d7:
46:c4:84:44:9a:dc:1d:0f:01:23:a9:99:40:be:09:
c4:98:23:ac:b5:52:16:8d:3e:3e:ba:b1:8f:10:4e:
ac:4d:fe:4b:7f:4e:02:40:7b:af:88:0e:bb:e7:7f:
48:9e:2d:3d:35:5f:b4:06:3d:55:b9:d3:76:85:e2:
ab:14:cc:1d:3f:24:81:96:50:7c:59:af:87:9f:fc:
a7:d4:8e:4d:7f:20:ab:fa:30:fe:11:b8:04:50:01:
a2:f6:b5:a3:aa:a7:29:d3:d2:1c:7e:05:1c:70:90:
ca:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3F:A1:0F:D3:1E:D7:7E:77:7B:1E:F6:55:3D:87:BE:D8:5B:4A:39
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS49453.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.40.24.0/21
178.83.28.0/24
Signature Algorithm: sha256WithRSAEncryption
56:72:b1:1a:24:e3:72:8c:df:c1:c5:c9:4a:dd:f7:1e:e9:83:
b3:5d:a9:f5:65:b8:b9:3d:cc:19:54:21:08:70:01:92:ff:ec:
7f:cf:11:d1:78:d9:da:f8:65:05:54:2f:94:0e:d9:92:38:59:
c6:f0:2e:1b:30:7c:42:1e:68:85:b9:0a:a6:53:f1:78:d5:cc:
61:c0:78:1a:a3:d2:78:7f:ed:97:f0:87:f0:70:83:e5:01:da:
ca:f4:08:cf:d0:75:97:b3:76:20:d9:3a:12:8a:3d:54:f0:f8:
ab:fa:d5:85:9a:50:2b:f4:80:be:23:ba:ca:5f:6d:a3:00:e2:
28:73:f2:f0:c4:4e:74:9f:6e:34:bf:60:a3:c8:76:b4:1d:6d:
87:f1:b6:b2:e8:b5:5c:30:9c:b3:a6:d2:1d:21:84:3e:d6:45:
94:13:a1:3c:f1:85:b2:ba:83:bf:30:20:a3:3a:2f:57:b5:13:
d0:ba:f4:56:1f:ff:b4:d7:44:0b:52:b5:01:b2:e4:3f:b5:9e:
66:23:5f:45:62:09:a2:45:a9:2b:f8:dd:55:44:49:d9:ef:75:
6c:2d:1d:44:9b:cb:37:a3:e9:33:05:73:09:68:e9:d4:56:7e:
db:08:41:46:83:e2:5b:76:73:d2:b1:57:ff:1a:23:62:ab:0d:
49:b9:7b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:06:57 2026 by rpki-client