Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS44024.roa
File: AS44024.roa (raw, json)
Hash identifier: zw1IlBB2rMEKF7AOaKXB+RFZlrSzorEBKOixUm5dQfc=
Subject key identifier: CC:4C:52:42:40:74:41:CE:36:93:9F:01:79:D2:F0:75:80:BB:20:9F
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 648CB26686DEBB3171E4CC058DFC40CD099830A9
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS44024.roa
Signing time: Fri 07 Aug 2026 01:09:00 +0000
ROA not before: Fri 07 Aug 2026 01:04:00 +0000
ROA not after: Fri 06 Aug 2027 01:09:00 +0000
asID: 44024
IP address blocks: 2a0f:85c1:cf0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:8c:b2:66:86:de:bb:31:71:e4:cc:05:8d:fc:40:cd:09:98:30:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 7 01:04:00 2026 GMT
Not After : Aug 6 01:09:00 2027 GMT
Subject: CN=CC4C5242407441CE36939F0179D2F07580BB209F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ca:ae:af:66:3a:99:3c:2a:f7:eb:a9:ee:1b:
cf:49:81:fe:c6:cb:e4:ba:eb:f5:bc:76:40:32:ef:
29:c6:bc:b3:64:26:d6:49:22:ca:52:af:c9:01:89:
89:8e:e2:b8:c1:55:b6:a6:01:fa:92:9b:6f:80:7f:
be:18:eb:62:42:2b:88:b1:c8:a9:10:b1:f9:3a:c2:
24:c2:47:b4:9c:b6:3e:a4:92:8b:9f:8c:ca:68:bd:
c1:52:51:3f:3b:6d:21:ba:9a:44:e6:ea:58:0a:e9:
e0:4a:9c:40:0b:87:76:19:a6:94:12:f7:7e:83:50:
5b:07:3c:46:9c:71:0e:04:f2:b5:6e:6a:b9:44:8c:
51:8b:f5:70:3c:77:cd:56:81:ab:c4:07:b3:92:50:
83:3a:20:eb:b2:38:c4:08:54:a2:22:d8:a8:59:74:
59:55:6f:02:ba:71:b6:95:33:98:11:9b:84:eb:fe:
e5:11:40:01:84:19:86:0c:71:bb:1e:9b:a4:8a:d3:
8b:98:c9:82:8e:64:2c:d7:72:98:14:8e:1a:ae:af:
29:25:8a:46:cc:cf:f5:da:39:7e:27:4d:a5:26:4b:
54:ee:49:00:3e:56:56:65:ab:f5:df:b5:cd:8f:24:
8b:70:53:f3:16:21:54:81:98:b1:f3:b1:b9:3b:b2:
07:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4C:52:42:40:74:41:CE:36:93:9F:01:79:D2:F0:75:80:BB:20:9F
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS44024.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cf0::/48
Signature Algorithm: sha256WithRSAEncryption
2b:41:13:82:50:b2:28:e2:50:8f:65:71:a1:61:b3:77:58:0e:
ac:54:a1:bc:e4:05:a5:a3:41:6f:7c:27:65:f8:5a:72:2e:8b:
6e:51:d9:aa:9f:96:6f:e3:d8:8b:5f:a9:f8:e4:fd:0b:8c:73:
3e:50:6c:56:37:65:bd:0c:34:a1:85:97:7d:de:38:04:73:f8:
86:f9:80:bd:5b:d0:bf:eb:9e:b7:a4:a9:bf:2b:e7:9b:12:be:
24:5d:5f:70:8f:0a:63:24:e6:f0:b6:6d:4b:92:85:93:f8:eb:
b6:d9:46:bb:d8:9b:b9:5b:26:06:5b:fb:97:04:96:fd:b6:01:
4c:8b:30:60:94:b7:77:3e:94:a5:71:93:8a:1c:df:84:d5:13:
11:8f:07:9f:14:a9:3e:81:28:b6:9b:b0:79:91:3d:5e:47:fb:
d7:e0:2c:e8:a3:88:16:11:0e:d7:7c:b2:e4:ff:a8:e3:cb:3d:
32:ea:32:4d:12:fd:0e:49:ed:6b:51:a8:4f:3e:b1:59:95:08:
ab:b6:ef:03:eb:d8:5a:54:ba:bf:f7:29:23:a6:5f:ab:fc:e1:
91:06:39:91:af:63:9c:48:35:15:c1:be:20:33:98:8f:b6:e6:
71:5c:c6:2c:5f:e4:18:dd:e8:38:0b:4d:a9:6a:8a:89:e5:d7:
c3:49:07:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:41:18 2026 by rpki-client