Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS44876.roa
File: AS44876.roa (raw, json)
Hash identifier: WME6TaMq3CWd1tCaL0lRq1DgGFzsPcpcSKj0P7RxgZ0=
Subject key identifier: 65:61:EB:B2:4B:7A:D3:20:BF:FC:D3:6E:53:6B:D5:30:62:66:B9:D5
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 01B0112148FE419AB77CE24CCAE059DA1B15E6FA
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS44876.roa
Signing time: Fri 26 Jun 2026 08:08:42 +0000
ROA not before: Fri 26 Jun 2026 08:03:42 +0000
ROA not after: Fri 25 Jun 2027 08:08:42 +0000
asID: 44876
IP address blocks: 2a0f:85c1:326::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:b0:11:21:48:fe:41:9a:b7:7c:e2:4c:ca:e0:59:da:1b:15:e6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:42 2026 GMT
Not After : Jun 25 08:08:42 2027 GMT
Subject: CN=6561EBB24B7AD320BFFCD36E536BD5306266B9D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:27:b4:c7:32:a5:4d:34:68:c3:8c:88:e2:f1:
f0:0f:4a:55:43:c2:10:0d:1f:8d:fa:42:06:8d:8a:
20:e3:b9:20:d8:81:c4:a4:36:13:1c:50:b1:d9:92:
39:84:97:4c:17:93:4c:69:39:d2:63:ac:89:ff:af:
8b:66:0b:4d:2a:13:99:1e:30:6e:10:3a:ba:3f:3e:
49:0c:ed:81:48:34:8c:ab:21:ce:fb:46:56:97:06:
e0:91:07:e3:83:76:05:7d:31:3d:c8:f5:bf:1c:79:
c8:09:54:8b:6a:c5:51:34:e4:56:5e:72:c1:45:fb:
b3:30:73:07:c4:53:45:7f:8f:f1:14:b1:52:b5:8a:
24:30:4e:46:6d:09:a4:48:07:42:d5:e7:25:a2:01:
9e:b7:55:ff:e6:5a:94:24:35:e8:58:e0:13:70:4f:
e5:93:87:a7:4e:ac:d1:3c:27:83:9b:e8:ba:e2:66:
9f:c4:b9:c9:ab:f3:42:5e:4b:d3:c0:d4:59:a3:be:
2e:8a:ec:de:af:1e:25:dc:cf:38:25:3d:89:7b:7a:
76:05:84:4b:e8:e2:0e:40:80:d6:e6:43:a8:7a:ce:
83:28:2d:f4:f6:c1:3e:2d:53:ed:5e:7e:b0:a7:e4:
ac:2d:c1:b8:1e:63:63:be:77:e5:df:2a:47:3b:f2:
81:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:61:EB:B2:4B:7A:D3:20:BF:FC:D3:6E:53:6B:D5:30:62:66:B9:D5
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS44876.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:326::/48
Signature Algorithm: sha256WithRSAEncryption
a8:7b:ed:40:b0:5c:a0:54:42:2b:c5:9f:39:27:cd:8f:6e:91:
0d:56:94:ac:a1:2e:84:82:5c:88:73:a9:e5:c7:a1:8b:fe:41:
1f:c2:99:bb:3a:e4:ef:b4:8e:9e:75:ee:8c:07:20:21:09:e1:
fc:ec:1a:43:c5:4d:78:e3:d3:a6:a8:4a:e5:91:51:01:ce:88:
63:ee:07:59:29:4e:70:31:2a:ed:6d:87:35:a9:bf:2e:85:ca:
5d:c0:1d:e3:c4:fd:a6:9c:96:3e:6d:08:c7:f6:04:05:1e:54:
15:e3:c9:4c:37:f9:b7:b2:81:a9:e9:20:08:d2:93:61:ef:d2:
73:4a:53:aa:55:ab:11:0e:e9:3d:8f:e9:0a:c2:4c:ea:e6:63:
c3:a4:d5:47:e4:ca:78:bf:34:68:af:3b:0f:91:48:20:64:9c:
9e:53:1e:4d:a5:04:4f:c4:70:dd:89:19:b8:4d:57:76:c8:06:
a7:a8:c7:0c:b8:14:7e:39:ed:53:e6:93:fc:16:ec:c3:0b:ad:
f8:75:71:df:97:0e:75:5b:ad:56:f1:f5:5c:18:bc:9f:05:62:
13:e0:93:a8:44:6a:cb:59:15:ca:ae:38:3c:26:b4:f9:1d:a3:
f5:a2:33:27:90:f7:18:20:15:ff:60:a0:eb:17:3f:46:53:fa:
68:1a:62:b6
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUAbARIUj+QZq3fOJMyuBZ2hsV5vowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA2MjYwODAzNDJaFw0yNzA2MjUwODA4NDJaMDMxMTAvBgNV
BAMTKDY1NjFFQkIyNEI3QUQzMjBCRkZDRDM2RTUzNkJENTMwNjI2NkI5RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2J7THMqVNNGjDjIji8fAPSlVD
whANH436QgaNiiDjuSDYgcSkNhMcULHZkjmEl0wXk0xpOdJjrIn/r4tmC00qE5ke
MG4QOro/PkkM7YFINIyrIc77RlaXBuCRB+ODdgV9MT3I9b8cecgJVItqxVE05FZe
csFF+7MwcwfEU0V/j/EUsVK1iiQwTkZtCaRIB0LV5yWiAZ63Vf/mWpQkNehY4BNw
T+WTh6dOrNE8J4Ob6LriZp/Eucmr80JeS9PA1Fmjvi6K7N6vHiXczzglPYl7enYF
hEvo4g5AgNbmQ6h6zoMoLfT2wT4tU+1efrCn5KwtwbgeY2O+d+XfKkc78oEtAgMB
AAGjggIMMIICCDAdBgNVHQ4EFgQUZWHrskt60yC//NNuU2vVMGJmudUwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTNDQ4NzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqD4XB
AyYwDQYJKoZIhvcNAQELBQADggEBAKh77UCwXKBUQivFnzknzY9ukQ1WlKyhLoSC
XIhzqeXHoYv+QR/Cmbs65O+0jp517owHICEJ4fzsGkPFTXjj06aoSuWRUQHOiGPu
B1kpTnAxKu1thzWpvy6Fyl3AHePE/aaclj5tCMf2BAUeVBXjyUw3+beyganpIAjS
k2Hv0nNKU6pVqxEO6T2P6QrCTOrmY8Ok1Ufkyni/NGivOw+RSCBknJ5THk2lBE/E
cN2JGbhNV3bIBqeoxwy4FH457VPmk/wW7MMLrfh1cd+XDnVbrVbx9VwYvJ8FYhPg
k6hEastZFcquODwmtPkdo/WiMyeQ9xggFf9goOsXP0ZT+mgaYrY=
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:48:47 2026 by rpki-client