Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS44822.roa
File: AS44822.roa (raw, json)
Hash identifier: kI4ZXSWZYji8hyoZ554BAAaHGAvgCt4z9c8Uz+oBemY=
Subject key identifier: B0:5A:C8:67:AD:F7:73:38:6C:0D:07:06:D1:11:56:05:C0:D9:B7:6F
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 59FDA51123DC339E5FD1654F185C4D2AC4ECD07D
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS44822.roa
Signing time: Tue 06 Jan 2026 01:00:43 +0000
ROA not before: Tue 06 Jan 2026 00:55:43 +0000
ROA not after: Tue 05 Jan 2027 01:00:43 +0000
asID: 44822
IP address blocks: 2a14:7580:3000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Feb 2026 15:25:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:fd:a5:11:23:dc:33:9e:5f:d1:65:4f:18:5c:4d:2a:c4:ec:d0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jan 6 00:55:43 2026 GMT
Not After : Jan 5 01:00:43 2027 GMT
Subject: CN=B05AC867ADF773386C0D0706D1115605C0D9B76F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:04:bb:02:11:e7:d3:db:fa:26:58:34:65:fd:
f7:ce:5b:5d:f7:ad:a6:10:87:fd:ea:eb:3f:1a:5d:
66:82:37:02:ce:f6:9a:75:8f:23:cb:87:2a:ad:b5:
47:a7:3d:60:92:43:0e:10:03:ff:a9:5a:08:ed:a0:
8a:1c:02:48:2c:65:8a:03:86:34:a7:d8:89:d0:bb:
6b:f1:f2:89:3d:97:a5:f7:01:4c:df:78:ec:6b:ae:
e4:ee:57:21:60:55:64:08:f0:78:3b:33:55:77:b0:
ee:c0:08:36:eb:d6:95:fd:19:0b:75:52:ed:d2:13:
2f:d3:d6:0a:66:68:38:c3:82:bb:7d:50:01:a0:92:
de:e4:6a:fd:9e:e9:7a:de:c9:37:a7:f1:2b:a4:c5:
7e:22:6b:a0:3b:bd:e7:a1:2e:87:97:f9:b9:b7:28:
30:10:9f:d0:2a:0d:ca:28:98:2d:db:8c:3f:07:87:
78:16:b1:b2:27:90:cb:9e:a3:61:8f:93:00:4d:d0:
fa:e3:d2:fe:a9:3b:e1:d3:75:4b:a1:20:75:0a:99:
6b:c6:8b:4e:78:0f:de:1c:5a:25:29:e7:51:a7:ab:
0a:43:3b:aa:d9:cd:c3:b5:8f:01:4d:08:f7:17:d6:
c4:8d:82:3b:3a:84:85:01:84:38:a6:e0:dc:14:20:
69:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5A:C8:67:AD:F7:73:38:6C:0D:07:06:D1:11:56:05:C0:D9:B7:6F
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS44822.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:3000::/36
Signature Algorithm: sha256WithRSAEncryption
76:47:cf:e2:d4:1d:ba:4a:77:4d:45:02:52:57:ac:d4:0d:ec:
33:d4:f3:ff:9b:ef:39:ae:b1:84:5c:c8:0a:49:7f:b5:0f:81:
4b:8a:a8:f6:91:cd:63:84:f5:a2:40:64:c7:b5:f7:0b:32:68:
dd:98:fc:b4:fb:21:36:d7:ff:b3:2e:6f:a5:34:07:83:7b:c0:
fc:88:9e:26:25:a6:ba:3a:ac:3a:e8:d8:5d:cc:b3:09:f8:ce:
21:84:56:39:1e:e0:75:11:0a:7b:94:f2:af:97:ce:26:45:c8:
3c:25:bb:37:f8:46:e5:0a:77:48:77:be:25:46:9c:03:71:03:
ba:e4:9b:3d:55:04:3a:df:df:a3:b4:08:88:b8:14:5d:16:04:
88:ab:93:1d:fc:fa:a1:a3:aa:d8:73:97:f4:6d:9c:5b:f5:80:
e6:0f:bb:07:01:a9:85:88:2c:bf:f0:c0:f1:d4:df:c7:5b:d0:
3a:1c:d9:5c:fd:77:7b:26:4d:ea:06:c1:73:90:70:d8:22:7c:
4e:e0:94:9e:bc:4c:29:d0:b0:30:aa:af:af:5a:aa:7b:24:b7:
f6:13:8b:8c:19:46:db:cb:fc:93:65:1a:93:79:b2:cc:62:c4:
9d:01:1d:28:7a:4d:87:82:e3:20:4a:38:d2:58:7e:77:3a:6e:
ac:48:3d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:22:46 2026 by rpki-client