Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS984.roa
File: AS984.roa (raw, json)
Hash identifier: aRBwKYbBsIyxkAHQYLGhr+9Ql0TJfTCvsiUaP/hAWPk=
Subject key identifier: 42:AA:4B:56:B9:9E:9A:6D:FA:AD:4E:6C:81:1D:B8:06:53:C6:5E:94
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 48AE2F5E219C984A79DECB546910891FB2CA6906
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS984.roa
Signing time: Wed 14 Oct 2026 09:49:36 +0000
ROA not before: Wed 14 Oct 2026 09:44:36 +0000
ROA not after: Wed 13 Oct 2027 09:49:36 +0000
asID: 984
IP address blocks: 45.146.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 19:43:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ae:2f:5e:21:9c:98:4a:79:de:cb:54:69:10:89:1f:b2:ca:69:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 14 09:44:36 2026 GMT
Not After : Oct 13 09:49:36 2027 GMT
Subject: CN=42AA4B56B99E9A6DFAAD4E6C811DB80653C65E94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:52:da:5b:1a:99:8b:70:44:25:8b:92:78:8a:
60:ab:a8:92:fc:ff:4c:af:e0:62:a4:9a:18:96:f2:
c6:97:0b:d0:de:fd:db:c5:e3:88:89:70:bf:e6:a4:
20:39:c8:5a:53:2f:dc:22:84:95:0b:21:d7:63:f8:
f8:3c:fe:f3:2a:47:69:9c:c3:0c:3a:a9:fb:f4:b0:
fc:ab:8a:4d:74:de:7f:a6:47:25:d6:18:f7:f4:29:
43:ce:a3:ad:7d:f9:2b:aa:e7:c3:4c:e3:a0:73:08:
1b:31:e3:70:fe:1e:37:ab:a7:38:29:e6:cc:3e:0c:
e1:22:87:25:98:0b:90:52:75:55:cf:96:91:29:fc:
93:23:5c:6e:87:7c:83:b2:2e:e4:e8:93:4e:d8:5d:
f1:8f:b8:25:20:1d:a5:3a:57:e3:37:be:7d:ea:2e:
69:fd:d8:3a:1c:d4:63:32:6d:30:38:3c:de:cb:f4:
9f:b8:eb:cb:a8:97:7f:78:d7:3f:88:ce:ca:7b:04:
3c:5d:5d:5b:52:44:63:27:74:a4:c2:de:f9:de:7c:
d7:ce:a7:9c:2e:88:52:ae:9b:70:9d:d7:67:60:ad:
08:43:2d:9e:20:a4:da:64:c1:82:98:9c:08:c3:38:
35:07:4a:48:c9:f8:71:ec:d1:88:48:45:e8:dd:9c:
5a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AA:4B:56:B9:9E:9A:6D:FA:AD:4E:6C:81:1D:B8:06:53:C6:5E:94
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS984.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.80.0/24
Signature Algorithm: sha256WithRSAEncryption
be:a3:3b:b8:17:7e:f7:48:c7:86:11:2c:6c:d1:68:17:b0:b4:
44:9c:aa:b0:fd:e4:86:2a:95:61:d8:4e:7f:b8:8c:1f:d5:fe:
7f:ae:43:dd:e1:15:87:a6:c2:17:be:ee:35:ff:cf:52:6a:5d:
1c:29:53:42:96:7b:2b:50:a9:b3:f0:e6:3c:1b:49:ca:0d:e3:
1c:49:7c:49:68:72:20:e6:64:ce:d9:a8:0e:4e:bf:67:c2:b2:
cd:c0:5c:27:37:38:62:10:e8:98:34:f0:48:6e:b0:a2:4a:d3:
be:fb:ba:fa:94:66:e8:c3:08:74:e4:2f:04:98:e9:fb:a6:69:
1f:6f:da:0f:84:d8:27:b0:08:0e:0d:1b:5f:5c:7a:37:90:63:
b1:b2:3a:dd:9a:51:39:fe:b0:53:33:b5:fd:19:c5:b0:6f:04:
54:85:3e:94:cf:0a:04:a5:b8:6b:b6:19:13:d5:fb:9f:82:bd:
49:9f:b4:64:32:35:6d:dd:be:53:3e:e2:f3:94:0f:21:07:0b:
58:75:00:72:57:dc:dd:06:53:4a:9e:f5:e3:a5:df:33:8e:ae:
17:ee:b6:20:1a:db:af:fb:75:dc:a7:d8:28:53:52:5b:83:a0:
98:1d:f3:16:ee:80:b3:54:1e:15:2b:37:2a:22:86:a2:19:d0:
e3:6d:18:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 06:04:14 2026 by rpki-client