Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS44803.roa
File: AS44803.roa (raw, json)
Hash identifier: BNMhx1Y5SZHdcAGA1AU2zrxScVSAxEeNFw3ZK2eSWDg=
Subject key identifier: 11:13:D3:E0:99:4C:7C:44:10:A9:B6:C9:39:A8:DB:75:CF:42:30:D5
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 58433E7F0A2E9CB0DAE9C819BA5562E0D5B0132C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS44803.roa
Signing time: Wed 12 Aug 2026 10:49:26 +0000
ROA not before: Wed 12 Aug 2026 10:44:26 +0000
ROA not after: Wed 11 Aug 2027 10:49:26 +0000
asID: 44803
IP address blocks: 92.113.144.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:43:3e:7f:0a:2e:9c:b0:da:e9:c8:19:ba:55:62:e0:d5:b0:13:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 12 10:44:26 2026 GMT
Not After : Aug 11 10:49:26 2027 GMT
Subject: CN=1113D3E0994C7C4410A9B6C939A8DB75CF4230D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c1:98:dd:8f:70:d8:4f:73:f0:ee:5d:c7:96:
7f:47:4f:61:eb:e9:40:41:20:28:f0:52:36:df:84:
f7:1b:a8:c3:c0:72:57:6a:a6:eb:46:a3:09:94:50:
53:38:0c:21:35:4c:f9:86:31:f1:07:08:d3:18:ee:
aa:fe:ff:6a:b5:73:43:38:ec:04:d7:44:b8:42:fe:
0c:6d:ed:2c:d9:14:9d:31:f4:85:b1:48:7b:d2:13:
d2:a5:12:a5:b4:6e:f8:4c:fc:7c:45:a9:63:c8:30:
64:60:10:d1:9d:0b:2f:87:09:bc:85:78:e1:b1:a4:
65:c4:4f:e1:68:cd:14:a7:23:55:9d:15:48:a9:0e:
04:1d:1a:f2:5e:cf:14:10:7e:cb:ba:95:15:51:4e:
00:d0:0a:a3:18:22:4a:ec:bb:ec:87:a8:dd:0f:94:
96:24:2b:4e:20:3a:81:0d:49:35:3f:c7:5a:c8:90:
65:5b:60:12:c0:f0:1a:ff:47:4b:3f:7e:c8:04:a3:
3e:e3:fb:7f:60:57:fb:06:b4:46:f2:ad:fd:48:8d:
a8:0e:17:d2:52:f3:79:68:06:aa:53:c1:76:16:70:
44:e0:ba:8e:71:19:8a:0f:e2:53:a8:c4:eb:78:6e:
b4:86:e7:f3:4a:fc:89:be:36:1a:7b:c0:57:ec:07:
1e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:13:D3:E0:99:4C:7C:44:10:A9:B6:C9:39:A8:DB:75:CF:42:30:D5
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS44803.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.144.0/21
Signature Algorithm: sha256WithRSAEncryption
79:fa:9f:53:39:88:a3:8a:ff:8d:ef:13:90:60:f6:f2:87:16:
a8:55:d2:1a:99:12:23:73:28:df:3b:3e:e7:a8:45:1a:fe:2b:
02:4f:6d:63:29:b9:31:ec:6e:b1:58:bd:8f:91:0a:a7:de:25:
6b:e7:28:aa:a9:ec:b2:9f:1f:93:61:e8:e3:d4:16:12:16:6c:
13:7c:c8:bd:60:c5:92:56:a0:f4:48:26:63:6b:1c:76:b2:54:
e8:66:12:67:10:94:c2:50:3d:93:41:db:52:be:3d:db:82:b9:
08:3d:89:c7:43:d7:52:ee:7c:8b:d4:ed:32:17:2d:b0:f2:23:
00:41:eb:32:8c:20:af:23:5d:ec:a7:4d:88:c7:7d:c3:9e:a8:
80:f6:cd:02:3c:14:99:28:4f:be:e5:2b:ec:ef:5c:c7:ab:18:
48:a8:a6:e1:8e:bf:7d:37:15:f8:e4:20:cf:4e:e6:bd:5e:ca:
16:f8:1d:14:4e:db:1d:fb:12:3a:57:07:9a:89:ae:41:92:bb:
4f:f2:25:72:84:20:b6:99:61:4a:e7:f8:c5:0b:d9:6f:6a:4b:
22:66:6b:65:bc:3a:8f:34:f2:38:b6:b7:47:4a:3b:db:81:dc:
c3:37:a6:3b:f2:82:bd:61:9d:fe:3b:5a:81:b1:4d:e6:9f:44:
66:ce:ac:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 19:05:42 2026 by rpki-client