Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS26548.roa
File: AS26548.roa (raw, json)
Hash identifier: OxmHn1zrTXLLPAsbGTvp1AQfS8DoFBP3VuUvtpkve+k=
Subject key identifier: D3:F3:F4:D6:48:85:A2:D6:5D:AC:D4:EF:57:9C:74:8D:2A:AF:32:38
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 42D17FAA74FDAA6304F609E3AE1B235F57B78982
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS26548.roa
Signing time: Sat 07 Feb 2026 11:55:37 +0000
ROA not before: Sat 07 Feb 2026 11:50:37 +0000
ROA not after: Sat 06 Feb 2027 11:55:37 +0000
asID: 26548
IP address blocks: 140.150.128.0/21 maxlen: 21
140.150.136.0/21 maxlen: 21
140.150.144.0/21 maxlen: 21
140.150.176.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:54:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:d1:7f:aa:74:fd:aa:63:04:f6:09:e3:ae:1b:23:5f:57:b7:89:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 7 11:50:37 2026 GMT
Not After : Feb 6 11:55:37 2027 GMT
Subject: CN=D3F3F4D64885A2D65DACD4EF579C748D2AAF3238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:65:06:db:79:0d:15:76:b2:66:2c:62:cf:fa:
1d:4f:83:87:69:80:72:34:d5:dc:55:0e:f5:0d:90:
04:bb:bd:73:19:1c:17:b5:7a:a4:55:e2:df:40:3f:
65:5d:14:13:97:7a:5d:cf:30:d5:cd:1a:97:82:ca:
00:4e:c2:14:cc:25:9b:d3:33:29:44:3a:47:69:79:
86:8d:69:12:95:d6:47:c4:29:32:28:12:33:85:af:
42:d1:2a:f2:86:0d:f4:43:49:d6:e0:c6:0f:d3:44:
1a:88:8b:dc:8a:11:23:3a:14:90:86:94:9b:cd:87:
6a:2b:a4:df:b1:43:e3:ce:d2:09:5e:31:e9:2f:b0:
23:3d:9c:ff:c3:3a:c0:1f:85:b1:4b:0e:6e:76:96:
29:8f:9a:41:18:b2:4c:c5:bc:e2:ac:a3:fe:df:b8:
d9:f8:62:37:a4:3a:ec:48:a9:45:b3:f9:c3:66:14:
cc:20:b2:6e:41:84:32:64:46:0a:96:f8:1b:b8:73:
97:a7:61:7e:45:4d:86:68:08:b9:7e:c1:36:23:14:
5c:e8:ee:00:ca:25:66:61:14:e6:fa:64:fe:d2:1e:
f7:3b:d7:ba:2a:02:4f:b7:be:87:c7:c3:52:ab:d1:
21:0f:f9:98:53:92:dd:8d:7c:de:23:c0:cf:f1:39:
cf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F3:F4:D6:48:85:A2:D6:5D:AC:D4:EF:57:9C:74:8D:2A:AF:32:38
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS26548.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.128.0-140.150.151.255
140.150.176.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:ba:6c:a8:8f:94:81:b2:43:c0:d6:4d:12:2f:2b:9c:1a:e4:
15:72:78:cf:af:86:1a:15:cb:35:27:fd:46:53:11:d8:5d:1f:
86:0d:3b:41:d7:97:d8:20:d0:15:90:6c:fc:61:ff:ae:1d:13:
c6:34:d5:af:eb:54:42:84:01:88:2e:6b:98:e1:c7:8b:c6:4d:
6f:a0:0e:05:1e:01:4a:c6:d4:b3:f7:1d:2b:de:49:94:d3:d5:
f8:f5:bf:88:17:5e:9d:3d:41:eb:09:9f:f3:ed:6c:46:11:ba:
bb:88:9d:61:e5:77:fe:3b:89:8b:66:9c:4a:4c:b2:e5:67:1c:
f6:ff:91:d2:86:0c:85:b0:59:3c:4c:06:c7:70:bd:d0:13:91:
df:9a:23:c8:ef:bb:43:5f:c9:90:8d:9d:0c:46:64:76:48:26:
0e:a1:ff:59:3c:20:5c:72:85:db:10:e1:d1:c7:a2:08:0e:36:
61:48:ab:f5:01:4b:1b:80:2b:f6:ef:59:b3:32:8b:45:9e:b8:
5c:ec:79:1e:7f:15:6d:41:4b:94:5d:77:11:37:09:fa:9b:09:
8d:d0:aa:b4:ff:ef:6b:f9:1b:3e:a2:be:60:d0:16:2b:eb:48:
94:43:62:06:41:14:93:cf:d0:80:a1:51:d9:77:5d:5b:71:7d:
1a:02:89:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:48:20 2026 by rpki-client