Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS48266.roa
File: AS48266.roa (raw, json)
Hash identifier: bMUjaV/zrukPHur/enwWknsnzqvOgoiCYnqoXIVR7Rw=
Subject key identifier: B0:64:45:EF:37:98:41:F3:D1:AD:AC:B5:7A:82:EB:60:E4:0C:C8:9C
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 4E2C7BD035AA74BCDB18171D4C22E81A6C8D1581
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS48266.roa
Signing time: Wed 01 Apr 2026 00:26:49 +0000
ROA not before: Wed 01 Apr 2026 00:21:49 +0000
ROA not after: Wed 31 Mar 2027 00:26:49 +0000
asID: 48266
IP address blocks: 82.139.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:2c:7b:d0:35:aa:74:bc:db:18:17:1d:4c:22:e8:1a:6c:8d:15:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Apr 1 00:21:49 2026 GMT
Not After : Mar 31 00:26:49 2027 GMT
Subject: CN=B06445EF379841F3D1ADACB57A82EB60E40CC89C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:06:ec:eb:b9:ee:29:cc:f3:b5:fa:bb:bd:c7:
5b:3c:0f:8e:ac:7d:15:ea:64:bd:d4:f5:51:d3:64:
fb:ba:2b:96:66:3b:d0:f3:25:e9:77:32:c7:68:95:
f6:d4:04:bc:b9:39:fa:c6:3a:b0:e3:0b:bf:a3:cc:
f4:61:49:c3:a2:85:3d:f1:8a:a3:34:34:d5:7e:c0:
40:ce:bb:e6:c1:87:72:b0:a2:de:fa:dc:84:64:ef:
b9:4d:45:bd:17:fb:5b:c2:f1:de:74:81:ba:8c:5a:
d2:2c:cb:85:89:b7:23:42:1b:87:e8:85:1f:0f:ea:
77:36:53:24:d5:cc:c2:55:e0:06:32:81:86:c6:c4:
a2:3f:cf:3e:6b:4d:7e:ae:ea:12:86:72:2d:e5:b2:
b7:29:9e:14:ad:5e:a2:73:2e:c6:d9:72:93:a3:c6:
85:42:7f:98:76:50:94:b3:f7:07:40:de:ff:a2:b8:
0b:f5:f9:07:29:0c:9f:29:af:1d:e9:ab:d6:e8:e6:
f7:a5:ff:72:06:fb:b2:31:35:1b:6d:42:ba:23:13:
55:36:29:fb:a4:73:e3:4f:d0:7f:ce:02:7b:9e:fa:
d9:83:28:0b:d8:b9:ff:fe:e6:d0:4d:2f:d5:d4:76:
7b:68:05:78:e2:cc:0d:00:1a:8b:34:aa:f0:14:fe:
0c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:64:45:EF:37:98:41:F3:D1:AD:AC:B5:7A:82:EB:60:E4:0C:C8:9C
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS48266.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.238.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:e1:12:e7:6a:14:61:37:51:09:f0:a8:14:2e:7c:12:cb:f0:
e2:43:6f:6f:65:79:d2:cb:9b:a0:5e:0a:16:bf:3c:64:76:d6:
f0:95:dd:31:9d:69:78:51:a9:30:a4:b9:99:37:9b:b1:51:4c:
52:e2:94:9c:4a:f6:4d:f8:13:00:ae:e1:14:04:55:a5:a8:6d:
84:c6:69:a0:d7:75:81:3f:b2:92:b4:06:10:4f:43:74:0c:b3:
bb:87:ac:dd:99:3c:f4:7a:3c:64:26:5c:2e:90:ca:6f:45:4e:
a7:64:12:bf:84:cb:40:9f:95:fa:f5:45:a7:0c:4d:21:c4:62:
77:2a:1d:eb:8c:a6:59:3b:83:82:0a:21:81:75:9e:a9:35:95:
c5:88:27:a6:91:e2:00:97:24:64:cb:d6:2e:0d:5b:92:7b:70:
2b:81:c0:60:1d:37:ba:a2:6a:3c:21:42:5e:13:a3:f4:fd:68:
ef:10:c4:40:2f:ca:35:09:eb:c8:1b:9a:88:72:5e:80:b3:f1:
c3:e8:f7:47:d9:f1:88:4e:13:4d:ce:18:0f:73:91:13:cf:b0:
96:63:94:b1:63:e6:98:c9:23:a8:cc:d5:e2:88:41:24:e0:1c:
b4:48:97:ca:d8:34:14:7f:9b:58:9c:d1:a1:8c:a1:0e:a4:98:
8d:5e:45:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:15:09 2026 by rpki-client