Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS48925.roa
File: AS48925.roa (raw, json)
Hash identifier: r1cvPAT0nuaQgsXtUim0jKQpm3O8imklc70BGnXmpNU=
Subject key identifier: 9B:53:FC:10:84:F9:8C:AF:9E:B1:FD:15:83:47:FD:6D:F8:26:D0:3D
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 49AFAC63064EE172152872AA744EF3B059757A76
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS48925.roa
Signing time: Sat 29 Aug 2026 21:06:29 +0000
ROA not before: Sat 29 Aug 2026 21:01:29 +0000
ROA not after: Sat 28 Aug 2027 21:06:29 +0000
asID: 48925
IP address blocks: 46.203.182.0/24 maxlen: 24
178.95.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 14:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:af:ac:63:06:4e:e1:72:15:28:72:aa:74:4e:f3:b0:59:75:7a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 29 21:01:29 2026 GMT
Not After : Aug 28 21:06:29 2027 GMT
Subject: CN=9B53FC1084F98CAF9EB1FD158347FD6DF826D03D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2e:63:ed:53:c7:a1:86:6e:db:63:71:b1:4a:
30:64:b0:d9:72:08:b6:48:71:0e:82:a0:59:e1:3c:
a6:f8:4d:7c:26:5a:d4:47:ef:10:8b:c8:4d:e1:01:
20:63:39:69:0d:7c:7c:ca:10:99:e4:2b:49:74:4b:
9a:06:c2:3d:b9:6c:36:c2:e9:3e:0e:6b:88:97:34:
b7:fa:96:1d:44:bf:40:6c:ab:8c:b6:96:bc:bc:d8:
4b:01:88:56:1b:38:fe:79:97:25:83:79:73:99:05:
7e:ef:d5:5e:64:ec:cf:41:f7:3f:20:3b:df:0b:68:
f2:be:1f:dc:5f:01:5a:eb:b0:61:d4:1d:93:ab:df:
c1:ef:15:30:7c:60:f6:f2:d2:47:a2:5a:ff:c1:ee:
6e:b0:3d:d6:84:d9:00:55:1d:ef:63:25:23:8c:61:
f2:15:b2:a9:d4:af:d7:8b:5c:9e:45:9a:c6:e4:8e:
55:a8:1f:28:33:51:41:15:4c:89:6c:b3:4e:f3:a7:
f5:6b:bd:76:1c:84:cf:49:e0:a8:0e:c9:0a:0a:61:
3d:b0:d1:cc:90:7a:1f:2e:f9:3e:f2:d3:2b:4d:f1:
38:58:62:f7:45:0a:55:82:f2:c4:bb:37:ac:44:01:
3b:76:04:23:74:6a:8c:89:f4:23:d1:f1:be:4e:85:
77:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:53:FC:10:84:F9:8C:AF:9E:B1:FD:15:83:47:FD:6D:F8:26:D0:3D
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS48925.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.182.0/24
178.95.158.0/24
Signature Algorithm: sha256WithRSAEncryption
38:18:61:8d:2b:ab:3c:96:bc:05:a7:75:3f:ea:09:f1:36:17:
9e:f6:fa:33:d3:2f:3c:10:4a:dc:ff:92:4f:73:81:b2:2e:f2:
44:f9:a5:a5:db:a6:43:61:40:02:de:b8:b3:38:f3:3d:ca:e4:
c2:50:fc:e6:df:98:af:53:70:f2:43:1a:97:c5:48:5c:fb:3a:
45:6a:89:ce:61:f0:84:c4:86:dd:f2:51:9f:22:61:6a:55:57:
b4:77:76:66:36:7e:3a:7d:43:51:2e:bf:c5:16:ec:56:53:4a:
6d:25:6b:c0:bd:0c:90:cc:8a:78:19:ab:30:60:cc:a4:99:b9:
47:f7:54:46:e9:80:c5:8a:f6:cb:1c:56:c2:dd:17:e9:33:ab:
dc:b7:8b:60:68:df:7b:b7:b4:eb:a4:39:5b:56:47:08:f9:58:
f6:04:c0:35:17:1f:b6:2a:d4:64:8b:40:13:af:1a:a0:75:79:
18:fa:19:33:70:8f:53:f4:db:c5:d9:9e:da:a9:ec:33:b1:da:
0d:2f:95:f9:2e:f4:6b:72:0a:1d:97:18:1d:0b:28:64:29:8e:
df:32:1f:11:46:2a:96:6a:90:7c:b4:df:f5:63:aa:7e:3e:f6:
f9:78:1e:dd:e0:c2:73:e9:d8:8f:fa:8d:37:27:a9:0e:a4:5a:
dc:6f:bb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 16:25:47 2026 by rpki-client