Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS44589.roa
File: AS44589.roa (raw, json)
Hash identifier: 6r2uVRWwkzMggZAriJzhwKjxPj1oqNJSmDFIhWOfKIw=
Subject key identifier: D2:20:01:1A:40:C5:94:88:87:2C:9F:75:07:73:B3:DC:0C:9E:D3:7D
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4E5090EC332ECFBDB3F873901853F488DE49E4E2
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS44589.roa
Signing time: Sat 06 Jun 2026 05:14:57 +0000
ROA not before: Sat 06 Jun 2026 05:09:57 +0000
ROA not after: Sat 05 Jun 2027 05:14:57 +0000
asID: 44589
IP address blocks: 51.194.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:50:90:ec:33:2e:cf:bd:b3:f8:73:90:18:53:f4:88:de:49:e4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 6 05:09:57 2026 GMT
Not After : Jun 5 05:14:57 2027 GMT
Subject: CN=D220011A40C59488872C9F750773B3DC0C9ED37D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c0:12:2a:43:02:c0:db:7b:66:da:7f:cc:e3:
3a:6a:5b:ce:0a:2d:69:41:ac:f2:02:df:11:87:45:
70:2a:9d:a0:98:15:ed:6d:e7:f7:e6:67:bc:b1:3b:
13:76:de:2e:ea:a1:4e:68:64:8e:c1:2a:38:a7:8a:
09:e1:0f:61:d0:54:a2:45:e3:60:86:f2:e2:e7:a3:
b8:69:c9:0e:6d:e3:0c:70:5f:fa:04:cc:45:78:98:
7c:0e:c9:30:8c:fe:10:21:27:e0:4f:63:2e:d6:87:
1e:70:f7:8b:7f:c0:32:77:98:21:ab:21:8a:6b:fc:
4d:1d:69:96:29:31:c0:66:22:36:c8:31:04:1c:36:
3b:59:fb:b7:a6:a2:53:a4:3e:36:ae:2d:6a:24:4f:
7f:87:81:81:7e:1d:33:18:ba:a7:ba:31:7d:9b:d4:
72:2e:14:2f:6f:78:cd:45:81:45:ab:d4:1a:76:11:
eb:34:da:11:8e:a2:37:2e:d8:9f:58:78:46:92:eb:
84:6f:0c:5b:6b:81:11:e2:68:bc:22:82:dd:23:8e:
13:26:d1:2b:67:25:95:ce:d5:e6:82:4d:47:ad:5d:
2d:05:ba:6a:45:6b:37:3f:d3:88:45:94:5e:45:de:
7d:99:98:18:1a:81:50:9c:04:1e:15:11:ff:a4:e3:
ec:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:20:01:1A:40:C5:94:88:87:2C:9F:75:07:73:B3:DC:0C:9E:D3:7D
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS44589.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.172.0/24
Signature Algorithm: sha256WithRSAEncryption
68:cd:f1:bf:b6:8e:60:36:74:b7:51:34:76:c6:23:93:3c:04:
cf:6f:51:62:33:d5:ae:13:d4:9c:eb:8c:77:23:5e:27:78:77:
5f:e5:bd:e0:1f:6e:a0:05:d8:81:59:03:e2:af:d3:c7:19:f9:
da:27:30:5a:b3:8a:de:ec:48:ba:77:b9:fd:9d:12:eb:02:58:
7f:6f:0d:3c:b9:d0:28:ef:f5:a3:f4:f3:0a:de:85:76:3f:c7:
93:ff:36:7e:14:01:47:23:32:98:ba:57:e2:ee:eb:1c:07:b5:
83:0a:27:e5:54:cb:b1:97:9c:31:a3:a5:b3:30:ce:86:ce:d5:
11:ee:b9:11:eb:78:7b:57:4f:7a:5f:f2:cc:86:4e:40:f0:aa:
9a:b0:1b:c0:f1:0c:b4:92:dc:cd:16:5d:89:76:7b:e2:4f:0b:
53:a2:e0:f8:35:4a:13:3a:b1:a0:7f:e3:d5:9a:5f:19:d6:c5:
ff:f5:f5:1f:0e:6a:91:82:75:d9:d1:1f:02:62:0e:61:a3:6e:
48:df:9a:46:45:9b:3c:e8:1f:3c:74:9f:96:17:cd:a3:b3:25:
12:0d:f5:67:90:85:94:79:ec:1d:a8:36:90:c0:f0:ea:7c:15:
ba:55:5a:46:b6:b8:fc:1f:47:88:dc:46:11:0f:97:59:c4:da:
29:51:cd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 11:54:08 2026 by rpki-client