Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS46450.roa
File: AS46450.roa (raw, json)
Hash identifier: FgatXDS8YDBEei/INCP79vTMcZsccm+HlOaVpW7/5DM=
Subject key identifier: 3E:D4:09:15:F5:2D:CB:E7:98:62:B4:65:97:04:BB:15:40:66:96:7B
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0DC454D1226585A6048B783613C7FCE4291CF320
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS46450.roa
Signing time: Wed 10 Sep 2025 13:05:16 +0000
ROA not before: Wed 10 Sep 2025 13:00:16 +0000
ROA not after: Wed 09 Sep 2026 13:05:16 +0000
asID: 46450
IP address blocks: 92.113.60.0/24 maxlen: 24
95.134.97.0/24 maxlen: 24
95.135.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:c4:54:d1:22:65:85:a6:04:8b:78:36:13:c7:fc:e4:29:1c:f3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 10 13:00:16 2025 GMT
Not After : Sep 9 13:05:16 2026 GMT
Subject: CN=3ED40915F52DCBE79862B4659704BB154066967B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f8:03:22:9c:b5:02:b9:43:5b:81:60:53:65:
c0:fe:5f:1a:a4:c1:a1:87:2c:52:7e:f2:12:f2:fc:
5e:31:dd:50:ec:61:26:7f:03:ee:90:71:97:7c:5c:
ff:99:80:89:63:1f:02:67:69:de:4f:2a:96:a7:03:
da:c2:26:97:11:42:4d:af:ee:b4:14:15:80:48:18:
6c:11:18:d4:27:5c:6e:63:74:2c:50:ed:17:67:96:
3b:cb:ee:82:77:ab:ac:38:b1:83:e7:a4:5e:37:1e:
69:64:24:ef:37:9f:cb:22:72:e1:34:50:91:b5:75:
7c:82:3d:8a:34:e5:8c:ab:27:a8:27:af:bb:59:4f:
03:ed:28:38:38:db:56:b5:43:1e:fa:cb:59:7c:ca:
a7:4f:75:66:34:85:e9:de:e8:ed:01:ac:14:0a:9b:
20:24:a8:a7:15:a3:98:2a:d9:2c:7d:7a:b2:b6:a1:
08:eb:69:ae:d0:67:15:e5:50:53:8e:51:ba:c2:22:
1e:8d:1c:f0:df:0f:8a:c2:0e:c2:d1:06:02:42:dd:
a9:e5:ce:ba:80:f3:e8:31:f2:f7:17:2c:a9:73:60:
97:f5:81:89:d6:78:2a:43:87:00:59:6a:ac:7c:24:
4f:3b:3e:1e:60:2c:cb:01:06:fa:71:95:0d:42:b7:
45:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D4:09:15:F5:2D:CB:E7:98:62:B4:65:97:04:BB:15:40:66:96:7B
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS46450.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.60.0/24
95.134.97.0/24
95.135.116.0/24
Signature Algorithm: sha256WithRSAEncryption
08:b6:6f:6d:75:ab:15:03:ea:02:fa:e4:6c:a9:4f:ae:a2:89:
ba:e4:3b:ef:0d:54:54:c6:e2:3b:cb:f0:01:3d:2a:6d:d8:92:
b6:45:e9:8c:6d:eb:3e:28:37:fa:7e:6d:a0:80:25:aa:cf:15:
76:3d:8e:c0:d8:b2:f6:d5:18:02:5f:9a:06:2a:fc:34:38:ac:
cb:4a:15:8a:0b:72:ad:72:34:df:00:0c:bd:d6:ca:e8:6b:a9:
aa:f7:87:c3:8f:9d:f8:da:d2:00:e7:af:03:b0:e2:05:c1:2c:
04:e0:01:03:ff:bb:84:8e:d1:14:db:a1:86:bc:e7:85:6e:6b:
f3:70:5d:90:49:87:24:28:4b:49:f4:d6:58:3b:04:96:f5:53:
b5:67:62:7b:1f:fd:7c:85:f9:a4:f8:3e:fc:bb:81:be:97:06:
87:8b:57:fb:7a:9d:57:ed:f8:21:13:26:51:75:60:a1:60:a5:
aa:ba:60:ed:39:ec:02:02:02:7c:46:a4:97:4d:86:b2:19:dd:
2d:fa:4e:74:d0:fa:c3:49:ba:bf:d8:75:25:a9:84:31:56:78:
43:06:de:1b:44:7a:4f:1f:a5:55:50:6b:0d:99:a5:04:1f:36:
fd:38:07:38:25:98:49:f0:1b:6d:cb:1c:04:8a:db:92:59:e1:
8a:d4:54:c7
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUDcRU0SJlhaYEi3g2E8f85Ckc8yAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTA5MTAxMzAwMTZaFw0yNjA5MDkxMzA1MTZaMDMxMTAvBgNV
BAMTKDNFRDQwOTE1RjUyRENCRTc5ODYyQjQ2NTk3MDRCQjE1NDA2Njk2N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY+AMinLUCuUNbgWBTZcD+Xxqk
waGHLFJ+8hLy/F4x3VDsYSZ/A+6QcZd8XP+ZgIljHwJnad5PKpanA9rCJpcRQk2v
7rQUFYBIGGwRGNQnXG5jdCxQ7RdnljvL7oJ3q6w4sYPnpF43HmlkJO83n8sicuE0
UJG1dXyCPYo05YyrJ6gnr7tZTwPtKDg421a1Qx76y1l8yqdPdWY0hene6O0BrBQK
myAkqKcVo5gq2Sx9erK2oQjraa7QZxXlUFOOUbrCIh6NHPDfD4rCDsLRBgJC3anl
zrqA8+gx8vcXLKlzYJf1gYnWeCpDhwBZaqx8JE87Ph5gLMsBBvpxlQ1Ct0VVAgMB
AAGjggIVMIICETAdBgNVHQ4EFgQUPtQJFfUty+eYYrRllwS7FUBmlnswHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNDY0NTAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBABccTwD
BABfhmEDBABfh3QwDQYJKoZIhvcNAQELBQADggEBAAi2b211qxUD6gL65GypT66i
ibrkO+8NVFTG4jvL8AE9Km3YkrZF6Yxt6z4oN/p+baCAJarPFXY9jsDYsvbVGAJf
mgYq/DQ4rMtKFYoLcq1yNN8ADL3Wyuhrqar3h8OPnfja0gDnrwOw4gXBLATgAQP/
u4SO0RTboYa854Vua/NwXZBJhyQoS0n01lg7BJb1U7VnYnsf/XyF+aT4Pvy7gb6X
BoeLV/t6nVft+CETJlF1YKFgpaq6YO057AICAnxGpJdNhrIZ3S36TnTQ+sNJur/Y
dSWphDFWeEMG3htEek8fpVVQaw2ZpQQfNv04BzglmEnwG23LHASK25JZ4YrUVMc=
-----END CERTIFICATE-----
Generated at Mon Sep 15 20:35:04 2025 by rpki-client