Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS44803.roa
File: AS44803.roa (raw, json)
Hash identifier: eZSo58sS3+DDJYy4BJNKBtCETTGIEJB0AWOuYZfmgwM=
Subject key identifier: 29:85:BB:DE:16:5B:19:B3:6D:C1:34:CA:A9:EF:48:65:47:9B:52:E7
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 536FDBE69ECE0A07235BBC65811D5C3F2602972D
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS44803.roa
Signing time: Wed 24 Jun 2026 12:59:51 +0000
ROA not before: Wed 24 Jun 2026 12:54:51 +0000
ROA not after: Wed 23 Jun 2027 12:59:51 +0000
asID: 44803
IP address blocks: 51.146.4.0/24 maxlen: 24
51.146.13.0/24 maxlen: 24
51.146.21.0/24 maxlen: 24
51.146.233.0/24 maxlen: 24
51.194.70.0/24 maxlen: 24
51.194.76.0/24 maxlen: 24
51.194.82.0/24 maxlen: 24
51.194.98.0/24 maxlen: 24
51.194.129.0/24 maxlen: 24
51.241.0.0/24 maxlen: 24
51.241.115.0/24 maxlen: 24
51.241.117.0/24 maxlen: 24
51.241.118.0/24 maxlen: 24
51.241.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:6f:db:e6:9e:ce:0a:07:23:5b:bc:65:81:1d:5c:3f:26:02:97:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 24 12:54:51 2026 GMT
Not After : Jun 23 12:59:51 2027 GMT
Subject: CN=2985BBDE165B19B36DC134CAA9EF4865479B52E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:03:c2:d3:8c:1d:f3:60:74:4f:8f:8e:3e:48:
0a:b9:1c:0a:77:4d:f9:c6:14:5e:32:ac:37:0c:42:
87:df:47:91:90:3b:ea:4d:f9:bd:e3:34:4f:79:bf:
d8:df:f5:7a:f9:08:5b:6b:c0:1f:33:3c:da:29:46:
e9:ac:8e:0f:f0:e9:5d:ba:25:f9:c8:43:50:42:0d:
bd:57:09:d8:47:a7:bf:53:ab:c3:5f:a7:33:30:83:
14:5a:78:c6:e4:0a:2e:2a:58:c2:b8:64:f8:0a:a4:
59:3a:8d:3c:f2:a5:cd:b3:2d:67:0f:e3:99:e3:37:
d8:21:00:77:76:3e:e5:6d:97:c7:1a:88:04:22:6c:
41:1c:b1:25:2b:4a:77:f4:29:63:9f:bd:9c:89:94:
6b:65:43:e5:16:3b:a9:54:c3:79:8f:24:41:3e:8a:
02:11:a7:3d:3f:77:c4:93:e4:0a:6a:45:b5:f5:34:
d9:3a:7c:70:ae:4f:66:32:83:1e:96:d0:3e:d5:8a:
fb:03:45:e0:fc:94:09:ae:c0:45:93:0f:e6:26:3a:
97:ea:2c:2d:5f:7f:4c:83:48:64:3f:92:db:81:4a:
c0:f0:e9:86:f4:a0:1f:dc:84:d8:1f:e2:d5:ba:34:
b3:84:d4:97:37:e7:7d:3d:c8:ca:c5:92:e2:cd:2d:
ad:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:85:BB:DE:16:5B:19:B3:6D:C1:34:CA:A9:EF:48:65:47:9B:52:E7
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS44803.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.4.0/24
51.146.13.0/24
51.146.21.0/24
51.146.233.0/24
51.194.70.0/24
51.194.76.0/24
51.194.82.0/24
51.194.98.0/24
51.194.129.0/24
51.241.0.0/24
51.241.115.0/24
51.241.117.0-51.241.119.255
Signature Algorithm: sha256WithRSAEncryption
6b:81:75:78:52:dd:fa:23:ca:3c:df:32:2d:ae:e8:ef:3c:b5:
f8:6f:40:a6:3f:9a:ce:aa:45:48:0d:ba:1e:7b:c8:a0:0a:4e:
36:84:42:bc:8f:5c:0e:e9:82:59:24:8c:30:71:1f:ce:8a:a1:
e8:51:4b:2e:1d:f2:5c:77:f9:7e:51:37:94:67:72:e0:9b:fd:
42:00:90:d3:f2:0f:49:f3:8b:3b:99:8a:7d:55:da:48:e6:e0:
95:0b:15:3a:12:9f:3b:05:5c:4d:62:0e:21:61:ff:85:4b:89:
83:3b:7a:6d:b1:23:2e:ad:73:7f:98:d9:83:0e:4a:21:60:96:
36:95:61:09:83:85:2d:cc:e5:33:04:c3:7d:d2:60:91:9a:ae:
05:5e:81:6b:cb:1f:56:d6:72:59:4c:ad:7c:cf:98:ab:c8:9d:
b0:fb:e1:0a:3c:22:98:30:37:46:6c:b4:c0:f4:19:5b:32:4e:
d5:8f:1d:63:3c:78:77:a8:6a:d8:b6:d3:ef:ce:02:18:06:33:
6d:d9:9a:d7:56:30:36:a1:8d:55:6f:a5:2c:f5:7d:96:d5:7e:
aa:50:0c:fe:b5:39:48:58:9e:bc:49:f4:2b:d8:c7:e2:a5:7a:
8a:8f:0b:97:7b:98:4d:dd:3a:ff:26:49:09:9c:99:3a:b8:2b:
52:9f:d1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:42:57 2026 by rpki-client