Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS45342.roa
File: AS45342.roa (raw, json)
Hash identifier: yDh30f5ywC30aUrlptxkxLge0b/hjNDgnz73PEauqFA=
Subject key identifier: F2:8E:43:C4:4E:AF:6A:A3:FE:B3:B9:F4:7B:38:30:93:06:06:FA:19
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 45539FC36172F96D4F8838C21D970D138083A973
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS45342.roa
Signing time: Wed 02 Sep 2026 08:49:32 +0000
ROA not before: Wed 02 Sep 2026 08:44:32 +0000
ROA not after: Wed 01 Sep 2027 08:49:32 +0000
asID: 45342
IP address blocks: 140.150.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:53:9f:c3:61:72:f9:6d:4f:88:38:c2:1d:97:0d:13:80:83:a9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 2 08:44:32 2026 GMT
Not After : Sep 1 08:49:32 2027 GMT
Subject: CN=F28E43C44EAF6AA3FEB3B9F47B3830930606FA19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3b:d9:d5:13:90:dd:fa:44:5c:e0:41:62:c0:
3f:94:fb:b6:e6:8f:e0:fd:de:7f:fc:6d:3b:0a:95:
ed:b8:f4:c3:04:6b:04:93:79:40:8d:ba:bc:99:e2:
e1:30:25:8c:cf:38:c2:5d:8a:ee:67:7c:dd:b2:cd:
9f:69:45:8f:c2:f8:a7:01:49:eb:ff:c4:d7:b0:e2:
6a:c0:30:88:98:60:48:ca:19:0e:11:ea:b2:3c:c3:
61:08:54:62:a3:8c:7e:14:7e:99:92:1b:1c:1a:9f:
14:ef:b1:10:41:af:9d:05:42:71:b2:4c:e4:af:f1:
f4:68:44:96:4f:de:a5:69:00:66:63:f9:e1:c3:29:
18:82:4a:8b:bd:74:2d:0b:f7:0f:fe:ea:f2:cb:6b:
19:77:dc:3e:c7:74:c8:dc:08:42:fe:f2:d7:f2:1a:
e4:0c:fa:6e:01:db:b3:c0:40:62:e8:a2:78:31:cd:
b5:b5:45:5b:f5:be:b8:c1:47:32:9a:a4:a3:62:a8:
bb:5d:2a:94:f0:1f:b7:aa:6a:62:2f:77:4a:ee:6f:
86:0c:11:71:50:5f:6a:e4:25:22:b7:37:72:da:c5:
70:2b:99:ef:36:80:75:f0:1f:de:ab:d3:5a:76:a7:
7c:2a:5c:07:86:09:96:32:b0:2f:5a:dc:b6:c6:92:
aa:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8E:43:C4:4E:AF:6A:A3:FE:B3:B9:F4:7B:38:30:93:06:06:FA:19
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS45342.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.157.0/24
Signature Algorithm: sha256WithRSAEncryption
49:85:7a:11:12:65:9b:a0:36:a7:4a:14:56:eb:4d:8c:d5:b5:
a3:57:28:e6:9e:e9:09:c1:86:97:23:55:ef:f6:51:c7:69:38:
91:b0:2c:4c:8f:18:45:34:92:1b:b9:77:58:73:17:a0:d4:19:
a5:64:ae:9f:f4:c0:f8:b8:d4:d9:fd:4a:51:96:e8:4d:5c:8d:
1e:5f:58:c4:9a:e4:e6:0f:21:fc:7b:8c:4f:ac:39:70:bd:0e:
5b:a7:e2:d5:b8:5f:ff:6e:eb:75:72:c1:8c:a3:ae:20:46:a0:
5a:b4:39:41:38:20:07:30:36:93:14:55:f8:f6:fc:75:69:2b:
8d:10:1d:7b:6e:3a:1c:31:14:d8:2c:97:de:7f:e9:7a:a2:1d:
90:ef:4b:29:3e:bd:25:cc:66:58:6c:4b:5e:95:90:67:f6:c7:
70:30:a1:39:6d:00:c0:e9:94:b6:f6:5c:6b:34:ea:98:93:a8:
95:02:86:e9:57:4e:a7:50:8c:71:a9:a1:89:e7:e6:ca:9f:d6:
26:aa:68:35:07:4c:f4:50:73:a6:06:57:d7:17:38:70:4f:26:
57:f5:86:d1:d0:3d:95:b6:83:2a:91:f2:7e:53:33:37:e9:3b:
16:fe:32:a1:7f:21:b7:0d:2f:1e:a8:ae:67:83:7d:04:03:ea:
99:71:42:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:48:38 2026 by rpki-client