Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS48300.roa
File:                     AS48300.roa (raw, json)
Hash identifier:          zo2yu/UI/7kXKBZeiPaj2YmWoAabRy9SyXC/3Ylg7+g=
Subject key identifier:   75:AC:40:16:4D:8D:12:2A:A1:C3:66:96:F4:2D:DF:9C:AA:E1:E8:FF
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       422A443967BF67D98B4E4C618EFFFA2D50FB2383
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS48300.roa
Signing time:             Mon 11 May 2026 18:39:23 +0000
ROA not before:           Mon 11 May 2026 18:34:23 +0000
ROA not after:            Mon 10 May 2027 18:39:23 +0000
asID:                     48300
IP address blocks:        51.241.20.0/22 maxlen: 24
                          51.241.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2a:44:39:67:bf:67:d9:8b:4e:4c:61:8e:ff:fa:2d:50:fb:23:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: May 11 18:34:23 2026 GMT
            Not After : May 10 18:39:23 2027 GMT
        Subject: CN=75AC40164D8D122AA1C36696F42DDF9CAAE1E8FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:11:80:71:83:e7:86:a3:92:91:ab:42:ba:fd:
                    87:52:d5:0c:ed:7f:b7:23:91:10:9e:09:5d:bb:61:
                    af:bd:b1:32:83:cb:2a:a4:aa:c1:c9:01:f9:97:99:
                    59:ae:7a:81:57:a6:af:80:7a:bb:0e:76:4b:5a:f2:
                    f2:68:b8:29:22:3f:77:54:de:e2:ed:1b:28:9a:74:
                    96:bc:b3:52:1a:d1:29:b1:52:63:a4:39:6c:62:8e:
                    79:da:8d:3b:29:38:3e:84:48:77:9f:b2:1c:82:44:
                    cf:6e:d8:69:45:2e:ef:5e:a5:2d:b2:a7:09:2a:12:
                    1b:eb:60:74:69:dd:61:43:43:4d:6e:0b:1c:42:cc:
                    40:42:d8:46:45:26:58:06:87:1e:90:c0:d1:c3:a0:
                    43:aa:90:82:d0:dd:4d:27:f3:ae:85:dd:b1:b2:fb:
                    27:13:f8:ea:0e:d4:30:1e:14:85:13:30:d3:36:01:
                    79:ee:f8:d2:21:68:fa:41:31:1a:62:b8:0a:dc:69:
                    2e:0b:3d:3d:56:17:e9:37:0c:9f:56:2b:3b:b5:8b:
                    70:b4:9c:ba:2a:f6:fd:b6:3f:41:d7:44:b3:66:12:
                    3e:a3:3b:54:3a:52:27:77:4e:08:c1:5e:12:52:f1:
                    09:70:20:c6:19:84:2e:32:d4:5e:88:01:6c:39:8a:
                    ea:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AC:40:16:4D:8D:12:2A:A1:C3:66:96:F4:2D:DF:9C:AA:E1:E8:FF
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS48300.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.241.20.0/22
                  51.241.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:55:bf:86:55:cb:84:6a:01:b3:51:6b:36:28:58:e6:88:13:
         d3:4d:3c:ac:f2:20:3c:40:13:fb:52:70:25:59:22:3e:52:eb:
         6e:4e:13:09:da:d6:c3:d8:f9:a2:0b:be:b3:46:66:e8:99:8e:
         cf:d8:2b:25:8f:3c:3a:ab:ed:ba:13:e9:c6:bc:ec:e3:5d:7a:
         1b:80:2a:1b:8c:ce:eb:a8:fb:7f:8f:2e:f4:70:36:60:b0:8e:
         72:87:b3:a0:c3:99:28:52:b8:e3:2d:11:ad:be:40:08:3b:fb:
         57:ac:31:f7:a6:f9:2a:b0:a4:af:16:31:b2:c5:c3:eb:02:7d:
         03:19:1c:af:a7:0f:07:2c:51:a7:ce:ef:e9:8c:8e:b8:e1:c9:
         cf:94:82:1f:91:00:4b:08:80:26:1c:64:39:b0:b6:48:e2:0f:
         3d:0b:1a:a9:19:0e:a2:b8:33:76:0c:05:83:6d:09:c3:65:7a:
         e6:b7:17:44:fa:90:af:23:19:19:04:e6:df:d2:bc:c5:bc:89:
         5f:19:90:8f:f0:01:e8:e4:b5:7d:77:c6:1f:63:a5:4c:0c:bf:
         a3:84:21:93:d6:68:8d:ed:45:d7:c4:34:0c:8d:b1:c2:4e:4d:
         68:03:f2:b9:31:32:90:f4:46:46:cb:a5:f4:84:a1:00:7d:36:
         57:5c:9e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:32:00 2026 by rpki-client