Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS44822.roa
File: AS44822.roa (raw, json)
Hash identifier: Hby+eZq1ViWfFQaE3esutSxxfBKhJ/taS5CjjdXfA/E=
Subject key identifier: 74:B8:35:54:08:6B:1B:03:A5:B7:A8:20:55:16:68:10:0D:66:ED:13
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0CF109D1BC059B64307AA46462324E7854226FEE
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS44822.roa
Signing time: Fri 26 Jun 2026 08:08:37 +0000
ROA not before: Fri 26 Jun 2026 08:03:37 +0000
ROA not after: Fri 25 Jun 2027 08:08:37 +0000
asID: 44822
IP address blocks: 2a0f:85c1:327::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:f1:09:d1:bc:05:9b:64:30:7a:a4:64:62:32:4e:78:54:22:6f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:37 2026 GMT
Not After : Jun 25 08:08:37 2027 GMT
Subject: CN=74B83554086B1B03A5B7A820551668100D66ED13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fa:2f:8b:64:16:69:3f:69:00:57:60:71:71:
7a:46:a9:d2:f6:f9:f0:da:3d:e9:4c:18:9b:82:1d:
52:7f:cb:21:8a:fa:fb:10:1d:1a:43:5f:89:92:98:
23:ab:ae:0e:28:17:c8:fb:11:58:aa:a4:07:13:ee:
7d:1b:3c:43:fb:6d:dc:e2:23:cf:a7:3d:a1:9f:17:
0c:68:e0:6f:a2:a8:39:70:a0:26:b7:82:fa:33:41:
fb:79:15:a6:47:ce:5b:e9:27:43:47:ca:d2:f5:2c:
f5:23:7a:f7:70:61:fd:dd:b7:21:15:74:1c:00:f9:
92:b6:a5:a2:d8:e0:df:8e:46:22:ce:08:1a:ba:ae:
a5:0a:00:7a:58:b2:17:45:8e:fa:77:c9:6f:7d:37:
f5:52:b2:e9:e7:9f:86:ee:23:e9:d7:cf:85:e1:a2:
14:15:50:57:ed:c6:22:54:eb:6a:38:90:01:57:d6:
02:e4:9a:f2:de:a5:74:ae:e8:a8:c2:92:69:46:26:
3e:42:ac:af:9f:08:c6:41:3d:99:57:33:b7:4a:2d:
9f:a5:22:40:2b:03:93:d5:f2:f2:61:5a:72:13:ad:
b9:98:ad:22:f6:b8:2a:37:c9:e0:b1:fb:87:ea:7d:
5c:21:fd:5e:68:b1:3d:d1:60:55:2f:e7:60:30:3f:
6c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B8:35:54:08:6B:1B:03:A5:B7:A8:20:55:16:68:10:0D:66:ED:13
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS44822.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:327::/48
Signature Algorithm: sha256WithRSAEncryption
c1:c9:74:83:4a:f9:89:07:b5:65:93:1b:f9:3e:69:88:4e:0a:
02:2a:a3:ae:bd:f4:18:18:90:20:9f:f9:27:03:4e:de:8b:ba:
69:22:22:1d:1e:20:47:7f:49:8d:e3:5d:77:6f:c2:ca:b9:fd:
da:55:ad:57:a9:4c:7d:2e:6d:26:02:12:a1:ee:b6:9b:50:cd:
f3:08:1d:27:e4:5a:59:c0:f6:11:0a:97:94:09:96:15:2b:53:
60:e6:bc:d5:ea:02:b4:08:38:a8:e0:ed:a6:1e:44:9d:f4:cf:
71:07:03:91:14:8e:f0:cb:36:c5:a9:1b:f3:65:16:49:ef:e3:
d6:72:9b:77:b3:ec:3a:73:7c:c8:e7:42:7e:26:97:9f:2b:62:
76:38:78:02:59:4a:ae:a9:0a:1e:0e:7e:5f:8d:e3:d5:b6:50:
2e:94:c8:06:b0:be:f5:aa:38:a7:0a:1d:8f:6c:78:f2:40:76:
fd:87:e0:b5:4a:c4:7a:6e:67:29:bc:53:53:4e:2c:4d:f0:82:
07:d2:6c:e7:29:7f:19:2a:be:f8:01:ef:84:dc:6f:40:07:b7:
62:56:ba:a0:57:ea:78:d4:52:58:da:b4:dc:54:a4:5f:c5:60:
96:94:8a:55:7b:c1:e5:eb:ae:aa:c8:97:e7:d8:a1:7b:e0:94:
54:e6:7d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:42 2026 by rpki-client