Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS26666.roa
File: AS26666.roa (raw, json)
Hash identifier: grQEzMbqaxuEV+/Mh1Rd07skCtGOevwAb1ujj3D119o=
Subject key identifier: 67:1B:52:69:D2:9C:BA:90:27:67:BB:AA:3C:8F:C3:04:76:86:77:F0
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 02CB4978748BCA46E25BD65419AFBBE1F5D4D574
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS26666.roa
Signing time: Mon 14 Sep 2026 20:31:01 +0000
ROA not before: Mon 14 Sep 2026 20:26:01 +0000
ROA not after: Mon 13 Sep 2027 20:31:01 +0000
asID: 26666
IP address blocks: 146.103.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:cb:49:78:74:8b:ca:46:e2:5b:d6:54:19:af:bb:e1:f5:d4:d5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 14 20:26:01 2026 GMT
Not After : Sep 13 20:31:01 2027 GMT
Subject: CN=671B5269D29CBA902767BBAA3C8FC304768677F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:42:09:86:2a:1f:bd:34:bc:b3:8c:95:bb:2f:
ab:b6:5f:28:e0:da:f5:1d:66:cb:40:62:2a:c8:56:
34:50:62:ea:45:5c:2d:a7:ad:20:f5:be:73:99:e3:
c3:9e:0a:fc:11:e1:1f:8d:59:05:fa:1e:5b:b2:6d:
28:fa:63:d7:cc:b8:e4:6b:fe:16:71:49:4f:f9:20:
06:e4:a6:50:70:02:60:a3:17:51:b0:36:f6:ec:39:
c3:e4:ba:64:85:3f:1b:f2:3a:07:86:3f:18:fa:7a:
39:cc:14:ce:33:4b:f2:93:ce:c9:0f:c7:59:71:7d:
f5:68:56:38:bc:1e:a8:78:5d:46:d8:65:4e:2e:48:
30:39:85:03:04:70:7b:96:11:10:93:3d:ee:46:c8:
d6:29:e8:1d:12:a0:bc:de:2a:83:79:8b:d6:b7:08:
44:28:1d:f4:9a:35:c0:8f:6a:75:52:41:22:bc:f5:
15:9a:17:b3:6e:7e:42:91:96:0d:9c:c7:d9:72:94:
f6:36:f8:38:e2:93:ae:c9:45:94:95:39:26:fd:f3:
a4:fe:30:10:75:84:3b:1a:83:b1:6f:ad:fd:b9:8d:
3f:3c:b2:a5:59:15:c7:a6:33:4d:a3:aa:db:0d:dd:
ab:fe:00:e4:c9:2d:80:29:5e:a0:ff:2d:a7:ec:b1:
12:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1B:52:69:D2:9C:BA:90:27:67:BB:AA:3C:8F:C3:04:76:86:77:F0
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS26666.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.48.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c5:83:a5:64:ef:ed:ed:58:ad:4e:c1:48:2a:14:a5:3f:9e:
05:9c:c3:c1:a6:56:27:bf:ed:f4:32:52:4f:4b:bf:b3:1e:68:
e9:cb:89:b1:2e:6f:f0:93:ad:08:9e:a3:e5:75:1e:8b:e8:e7:
51:f3:0e:f9:38:d2:42:20:af:c3:87:ac:02:0a:23:0c:7c:f7:
e2:e8:f2:42:85:94:f8:b1:73:67:ff:d2:a4:e2:fb:a7:69:16:
c2:15:c9:f2:5f:a6:85:9a:fe:3f:cb:8a:90:f7:44:6f:f2:81:
cf:0b:ed:f0:9f:36:20:6f:ac:cc:21:17:f0:a7:21:50:2f:af:
26:a2:61:75:7d:41:10:0c:63:99:0f:30:c4:b3:e2:86:d3:c9:
c8:36:f6:b4:47:23:ee:33:e5:c3:4f:c8:9b:a2:60:ce:17:d1:
bc:d3:b6:d5:64:99:da:10:99:3a:3d:6b:99:47:be:6f:11:7a:
f4:5e:df:e4:2e:14:3e:d1:8c:25:04:6f:2d:03:ec:ad:f3:c8:
59:9d:82:6c:87:e6:35:0b:90:34:33:cc:1b:9d:7f:b4:07:5b:
a7:02:62:5e:0b:ec:3e:e5:46:39:cb:2b:c1:78:dd:44:38:1f:
bb:fc:04:14:84:5a:13:77:56:44:4a:59:bf:f6:1b:f4:30:93:
4d:41:f1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:46:37 2026 by rpki-client