Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS33652.roa
File: AS33652.roa (raw, json)
Hash identifier: fKQ9lYFzakHzz2Dv0UmPhEfIgCDKSLfnFXJBFB2eea4=
Subject key identifier: 7E:42:34:3C:6D:50:B7:78:EC:F7:A6:BC:F0:BA:91:B0:A7:9A:E0:00
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1BEDE6A4787523E4DE4E36264D2A41169037D134
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS33652.roa
Signing time: Tue 01 Sep 2026 11:49:31 +0000
ROA not before: Tue 01 Sep 2026 11:44:31 +0000
ROA not after: Tue 31 Aug 2027 11:49:31 +0000
asID: 33652
IP address blocks: 46.202.218.0/24 maxlen: 24
92.113.86.0/24 maxlen: 24
92.113.89.0/24 maxlen: 24
92.113.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:ed:e6:a4:78:75:23:e4:de:4e:36:26:4d:2a:41:16:90:37:d1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 1 11:44:31 2026 GMT
Not After : Aug 31 11:49:31 2027 GMT
Subject: CN=7E42343C6D50B778ECF7A6BCF0BA91B0A79AE000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:fd:4a:3a:a0:3a:ad:46:bc:82:0f:29:f7:
b3:e8:27:17:eb:80:f2:a3:fd:86:52:58:2d:9e:c5:
70:a7:84:f6:e3:e7:ab:af:04:17:d0:61:7f:b6:85:
c5:1a:43:46:4f:8f:8e:34:b7:83:0a:88:a3:f6:40:
5e:e1:1f:99:93:4f:38:12:af:43:b0:5b:da:91:3f:
ee:29:e3:6a:7d:57:04:08:86:ce:c3:42:65:d5:ba:
8a:03:4d:56:8b:b2:82:55:14:91:0f:21:e5:4d:ed:
38:32:32:90:c6:f6:5d:2f:c3:6d:98:b6:b9:13:30:
59:c8:66:e5:9a:a1:b8:4e:bc:e2:26:00:3d:3f:26:
ef:84:36:b2:e7:82:cf:a4:0c:43:18:c8:ad:c1:d3:
5c:7b:a5:6e:20:a3:22:da:d8:6a:9f:90:04:20:0d:
a7:33:87:9e:f8:50:32:0a:82:3e:ff:10:1a:f4:b3:
07:67:3d:7c:e7:18:1c:fb:01:a3:da:d0:be:ce:0f:
d7:60:d1:a1:af:16:a1:d3:31:93:61:23:9a:ff:17:
71:59:af:17:79:9f:ea:29:f4:81:07:9b:ba:7a:a0:
8c:08:7d:4e:e0:b4:7d:86:87:a8:96:4d:e1:79:fb:
9b:c1:fc:e5:fb:c0:4c:d3:35:d6:4b:ee:bc:c7:a6:
79:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:42:34:3C:6D:50:B7:78:EC:F7:A6:BC:F0:BA:91:B0:A7:9A:E0:00
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS33652.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.218.0/24
92.113.86.0/24
92.113.89.0/24
92.113.114.0/24
Signature Algorithm: sha256WithRSAEncryption
06:f7:08:dd:ff:31:f1:ec:ee:20:8a:df:65:98:fb:a7:0a:9e:
7f:f0:f9:aa:e5:44:e2:29:41:eb:75:02:fc:58:d6:7d:27:ca:
3e:02:ff:32:70:98:03:6d:73:19:54:e6:a3:5d:13:ff:bc:61:
c1:6d:48:a3:84:79:f9:45:52:ed:18:c0:a5:c2:1c:cc:33:df:
0e:b6:4c:b2:70:ec:be:e9:4a:53:be:c8:55:78:b9:5f:1d:68:
a6:a3:74:32:67:69:eb:6a:eb:24:1a:32:e0:9f:25:e5:e1:20:
6b:48:93:86:52:ce:4e:af:b6:bb:56:72:ec:42:48:36:a3:7c:
ee:9e:3d:29:f4:2f:dc:29:e4:6a:9f:ca:f2:0d:29:e5:10:9b:
d9:91:1e:09:3f:34:13:58:af:c5:90:cc:a2:af:c7:58:67:18:
8a:31:19:53:7e:93:74:52:68:4d:79:71:c2:7e:00:df:93:d8:
5e:03:56:b9:1e:bf:85:ad:01:68:06:14:bf:7f:c8:f0:82:ce:
05:9a:7c:6d:1b:a2:51:20:e5:c4:cb:f5:15:7d:cd:e4:cd:83:
4f:e3:6e:ca:9e:99:7c:8e:bd:5b:8a:06:86:3f:b3:6d:a5:16:
33:7c:24:b0:8d:04:ba:f7:7d:77:0c:ac:31:63:d1:85:83:ea:
9c:ea:b3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:23:13 2026 by rpki-client