Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS48266.roa
File: AS48266.roa (raw, json)
Hash identifier: XC/SLQZD0k7rXRjbpORhu+CyxCF0aGce1Vib2rXe/MU=
Subject key identifier: 41:6A:FF:1E:7E:AB:05:AE:11:C9:32:CC:20:45:84:DA:28:54:70:2F
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 4FAA4B29AE47FB6AC96D0EEBD0F8F7E66DE424AA
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS48266.roa
Signing time: Wed 16 Sep 2026 07:25:21 +0000
ROA not before: Wed 16 Sep 2026 07:20:21 +0000
ROA not after: Wed 15 Sep 2027 07:25:21 +0000
asID: 48266
IP address blocks: 212.74.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:12:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:aa:4b:29:ae:47:fb:6a:c9:6d:0e:eb:d0:f8:f7:e6:6d:e4:24:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:21 2026 GMT
Not After : Sep 15 07:25:21 2027 GMT
Subject: CN=416AFF1E7EAB05AE11C932CC204584DA2854702F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:73:a7:5a:2b:9d:86:7a:c3:b4:f2:91:75:bb:
47:fe:d9:5a:fd:5f:5c:f1:9f:dc:1e:0b:e8:69:59:
f9:4d:4f:35:98:ce:d7:f3:a3:fc:55:bd:a2:3c:62:
4b:47:54:f7:d0:7e:92:28:21:b8:bc:c0:2d:38:6c:
c5:30:cd:5e:cd:ac:ed:84:09:87:20:3b:a6:70:25:
b2:1e:3c:31:c5:0c:3b:49:06:92:c5:ae:a3:07:4c:
6c:32:31:94:c8:84:1c:4d:6f:b5:04:20:12:75:de:
d1:d0:94:72:89:3d:2c:59:ab:71:b0:57:e5:b7:56:
64:b3:84:40:2d:7d:f9:a7:3b:a6:9f:ad:f7:b7:f6:
75:a9:0d:00:e1:d9:f8:6f:45:ed:a3:81:e7:9d:43:
50:94:97:36:af:f6:46:b8:a9:1a:22:a5:5d:ef:48:
03:65:a4:b0:b9:67:6d:7a:eb:c8:7f:50:c1:89:4a:
5d:1c:49:f9:5c:18:29:29:40:07:ac:7d:4f:1d:67:
11:77:1e:29:63:d1:b3:47:cd:1e:7a:7c:e4:30:c8:
d2:61:a2:ee:f5:09:09:92:2c:67:75:03:41:45:f7:
e1:9e:42:9d:f9:38:04:6b:fc:f3:09:30:37:e6:7d:
84:07:51:87:3a:aa:cc:9d:9c:2d:7e:a8:19:58:d4:
e6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6A:FF:1E:7E:AB:05:AE:11:C9:32:CC:20:45:84:DA:28:54:70:2F
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS48266.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.53.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:44:f1:92:8b:7f:79:75:91:25:85:29:60:c5:af:9e:f3:ca:
17:b6:a3:ae:76:8e:c9:21:d2:54:f8:42:f5:0e:ba:e2:96:a4:
de:d0:48:40:9b:7c:c2:e3:8a:b4:3e:b1:0f:9e:9b:4c:55:79:
08:bc:1d:a2:b6:d4:7f:8c:cc:86:fc:62:f3:12:16:0e:8e:2d:
f1:7a:d4:06:ae:67:8c:60:f0:cb:e3:94:09:a4:66:70:f5:71:
95:23:ac:d0:bf:ea:d0:19:2c:c8:86:91:64:ee:a4:e7:8f:9d:
b0:b3:29:d5:e9:d5:bb:3f:12:67:40:32:7d:59:64:a5:99:e6:
4a:70:32:d4:8a:78:96:ad:ea:c9:15:58:64:aa:61:fd:7b:f3:
52:34:95:27:a9:7c:4f:43:b9:62:0f:16:60:c3:00:5e:f4:c7:
2c:44:60:8b:bf:22:e2:2b:04:77:e2:8b:da:9a:a7:b3:59:5f:
08:54:e8:da:72:b9:34:70:9d:fd:31:55:50:4c:b5:88:e7:21:
4f:0e:17:30:ad:4b:8c:26:c7:42:99:de:a4:35:fb:38:73:bc:
ff:3d:dc:4a:70:4e:e0:5c:b5:73:ef:d6:37:f3:6b:39:e5:c1:
46:63:54:22:af:fa:da:73:1d:27:b5:04:15:e5:0a:97:d3:be:
54:86:ce:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:27:04 2026 by rpki-client