Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS48678.roa
File: AS48678.roa (raw, json)
Hash identifier: tyvEu4IJOqBoryH10jjL3zxikrP1C5sZC4NpTG9Y+Lo=
Subject key identifier: CB:92:3A:45:05:66:84:2D:35:3A:88:A9:50:53:F6:6A:3B:6E:71:7F
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 7CC1895DFBC675A14CEF884CBE68451EAE56CBB1
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS48678.roa
Signing time: Wed 29 Jul 2026 08:21:58 +0000
ROA not before: Wed 29 Jul 2026 08:16:58 +0000
ROA not after: Wed 28 Jul 2027 08:21:58 +0000
asID: 48678
IP address blocks: 193.111.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 19:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:c1:89:5d:fb:c6:75:a1:4c:ef:88:4c:be:68:45:1e:ae:56:cb:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 29 08:16:58 2026 GMT
Not After : Jul 28 08:21:58 2027 GMT
Subject: CN=CB923A450566842D353A88A95053F66A3B6E717F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:08:b9:f3:46:18:b8:59:96:98:2c:3f:b6:54:
1b:e7:a5:65:59:cd:b8:bf:dd:28:ca:be:51:ea:e9:
e1:0e:0a:21:92:2e:65:d3:04:b7:ba:44:ce:39:1f:
dc:7f:9e:e8:c3:7a:37:9b:e9:9a:6d:af:4b:2b:da:
e7:77:65:a2:86:07:49:19:0f:b7:a1:ea:ea:8d:a1:
5b:cc:c1:29:d6:7d:bd:15:a6:31:29:1a:02:cf:13:
33:ee:af:cc:79:0f:6a:a1:bb:99:c7:96:7a:82:3e:
e3:fb:02:f8:a4:23:1b:12:b0:90:26:c6:30:db:bd:
f3:e4:52:7c:1c:65:67:80:c9:cd:11:16:ac:68:ed:
f7:23:98:79:80:61:3a:d9:1d:2a:18:12:8e:c0:ef:
70:de:50:fa:6b:50:44:8c:10:d9:87:5b:1e:57:f7:
5f:f7:af:d7:39:20:e1:20:ec:7f:42:fd:1a:2b:3d:
66:b2:e6:ed:6f:8b:7b:82:f8:ed:32:82:45:9d:f7:
15:02:7f:00:11:e9:0a:7b:5e:ea:b0:bf:7d:31:51:
7f:a2:32:ca:c3:c4:57:a4:7b:6d:8f:b5:e9:b8:42:
f1:f4:f5:1d:2a:1a:9c:22:03:fb:e9:7c:e0:61:f7:
cb:02:26:b5:90:ab:fa:e0:ed:42:c0:95:cc:3d:ef:
da:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:92:3A:45:05:66:84:2D:35:3A:88:A9:50:53:F6:6A:3B:6E:71:7F
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS48678.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.125.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:77:1c:f9:97:0a:4a:fa:cd:93:c3:4f:9d:e7:68:3d:1a:9c:
58:f0:43:96:d2:f9:ca:89:f6:19:01:a5:85:7a:01:92:25:d4:
5b:f5:8d:b3:6a:c5:88:35:a6:ec:7a:c1:32:ed:11:c5:76:91:
c3:8e:bb:47:d1:c0:8c:48:f0:dc:5c:ad:be:33:3b:b7:d5:84:
33:a4:b5:bf:f8:d8:7c:32:98:97:46:b5:d5:dd:31:70:76:00:
e0:bf:dd:95:41:98:57:49:7d:ff:c8:37:8e:71:90:68:d7:11:
fa:df:24:50:aa:0a:20:c9:ec:0c:58:10:a0:40:49:35:63:62:
79:74:38:50:36:b5:8b:3e:83:9a:15:6d:5d:95:c8:0d:68:06:
19:aa:34:7e:02:a5:f0:ec:a9:be:b3:ed:63:c9:f0:6c:33:73:
2c:e9:e6:48:8f:e0:57:70:2e:aa:d3:31:4f:c1:66:b5:57:62:
e5:f7:cb:94:8e:35:db:fd:7a:ea:54:fa:6e:01:2b:d1:da:25:
dc:7a:cd:49:ba:4c:71:01:9a:9e:d9:92:02:77:a0:67:b4:f2:
cc:43:4f:24:55:6a:e5:bb:72:8a:98:14:55:bf:88:4d:06:07:
12:5b:c2:b9:d6:6f:21:5b:72:09:78:64:5b:30:c8:61:03:c0:
2b:63:86:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 01:42:05 2026 by rpki-client