Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS48266.roa
File: AS48266.roa (raw, json)
Hash identifier: 5XHsHWtEphXEUuyM9GSRd9gYVMapRAebR1SxMatNo3k=
Subject key identifier: 55:E4:1B:C1:B5:FF:9B:16:59:2A:55:EA:9F:82:D4:C3:AB:08:53:E8
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 48F30D316951D8A0584B979A7FA4B74A66A9A753
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS48266.roa
Signing time: Mon 02 Mar 2026 01:53:49 +0000
ROA not before: Mon 02 Mar 2026 01:48:49 +0000
ROA not after: Mon 01 Mar 2027 01:53:49 +0000
asID: 48266
IP address blocks: 46.236.193.0/24 maxlen: 24
46.236.194.0/24 maxlen: 24
46.236.195.0/24 maxlen: 24
46.236.207.0/24 maxlen: 24
46.236.253.0/24 maxlen: 24
82.139.238.0/24 maxlen: 24
82.139.242.0/24 maxlen: 24
82.139.243.0/24 maxlen: 24
82.139.244.0/24 maxlen: 24
82.139.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:f3:0d:31:69:51:d8:a0:58:4b:97:9a:7f:a4:b7:4a:66:a9:a7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Mar 2 01:48:49 2026 GMT
Not After : Mar 1 01:53:49 2027 GMT
Subject: CN=55E41BC1B5FF9B16592A55EA9F82D4C3AB0853E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c6:83:bf:d4:3d:48:c0:5d:9c:87:b5:f0:b0:
30:67:c0:fd:b4:54:57:81:d0:8f:9a:72:22:06:89:
b3:86:ba:5c:b6:a5:3e:c2:cf:fe:4b:d2:3b:69:18:
89:0f:25:d0:7f:8b:59:9e:cc:fe:f7:8d:2f:8a:fa:
3a:d8:72:dc:9e:0b:e7:9a:f7:74:a5:35:20:9c:c8:
ec:d4:c1:b0:d5:65:1f:0c:53:55:de:27:5e:ac:57:
a2:15:b4:c3:e6:c8:8d:93:58:e4:be:02:16:92:e9:
7d:f9:a0:ab:21:7a:6e:b6:3c:30:79:b0:c4:52:7a:
37:87:c9:99:68:18:b4:22:d9:d1:10:db:46:9c:23:
bf:21:db:35:d7:54:1a:bb:b9:74:55:44:fc:05:f8:
30:c9:3a:ff:a5:98:78:97:7a:76:45:fd:be:59:7d:
11:6f:39:ab:f0:fc:e0:c4:db:4c:c9:34:97:6a:cb:
15:bb:6a:0b:f8:2f:7b:bb:d6:37:00:d4:d3:19:ea:
9b:be:26:be:ed:bc:e6:75:e9:c6:9c:cd:16:c2:18:
0c:03:a5:32:70:b0:ac:16:5f:c0:c4:72:6a:0f:93:
4b:8d:ca:a2:1f:62:95:2c:77:23:f3:eb:32:a0:dd:
6a:f6:73:23:20:bb:ee:20:ec:2c:ad:a3:6b:de:99:
63:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E4:1B:C1:B5:FF:9B:16:59:2A:55:EA:9F:82:D4:C3:AB:08:53:E8
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS48266.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.193.0-46.236.195.255
46.236.207.0/24
46.236.253.0/24
82.139.238.0/24
82.139.242.0-82.139.244.255
82.139.246.0/24
Signature Algorithm: sha256WithRSAEncryption
01:65:83:ab:a3:a5:bf:24:70:d5:26:0c:11:98:21:78:8a:ae:
9e:81:37:06:72:98:a6:4a:69:43:06:9a:9e:77:20:c3:ce:df:
ea:ae:42:55:54:87:9b:13:be:54:d2:c5:e2:92:9c:e5:eb:f9:
76:8c:66:ca:28:75:df:e3:6b:86:8d:01:ed:5b:c2:ae:c9:8d:
1c:e0:d3:0f:22:33:ba:31:ec:b6:f0:08:8d:8f:6c:2d:d8:d3:
76:e8:3d:35:27:9b:c7:9d:93:f0:c5:d5:f6:57:82:2a:a8:76:
b9:b0:24:3a:6d:e9:5f:12:5d:ac:7d:bf:79:53:46:f7:ad:c8:
35:2f:7f:69:92:b6:f4:c8:d2:9e:57:00:cd:dc:f3:1f:ca:a4:
a3:7f:7f:6d:19:18:e7:4f:2f:71:65:d1:d4:11:65:61:53:a7:
b7:f7:25:93:b3:01:63:1d:7a:cf:4b:ec:87:fa:22:7c:d4:a8:
50:7f:db:2b:2c:00:f9:cd:e3:80:61:3f:aa:8c:ef:b0:22:e8:
f3:93:39:6d:f0:50:f6:a4:67:91:b3:75:8d:e2:6b:b5:61:89:
da:db:61:a2:cf:64:40:f9:81:fa:93:97:65:e5:4f:3e:c7:8d:
2b:07:5c:9a:85:df:3d:62:03:65:f0:39:ac:9e:ea:47:d6:3f:
48:af:94:4c
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUSPMNMWlR2KBYS5eaf6S3Smapp1MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNjAzMDIwMTQ4NDlaFw0yNzAzMDEwMTUzNDlaMDMxMTAvBgNV
BAMTKDU1RTQxQkMxQjVGRjlCMTY1OTJBNTVFQTlGODJENEMzQUIwODUzRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbxoO/1D1IwF2ch7XwsDBnwP20
VFeB0I+aciIGibOGuly2pT7Cz/5L0jtpGIkPJdB/i1mezP73jS+K+jrYctyeC+ea
93SlNSCcyOzUwbDVZR8MU1XeJ16sV6IVtMPmyI2TWOS+AhaS6X35oKshem62PDB5
sMRSejeHyZloGLQi2dEQ20acI78h2zXXVBq7uXRVRPwF+DDJOv+lmHiXenZF/b5Z
fRFvOavw/ODE20zJNJdqyxW7agv4L3u71jcA1NMZ6pu+Jr7tvOZ16caczRbCGAwD
pTJwsKwWX8DEcmoPk0uNyqIfYpUsdyPz6zKg3Wr2cyMgu+4g7Cyto2vemWORAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUVeQbwbX/mxZZKlXqn4LUw6sIU+gwHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt
NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTNDgyNjYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwTQYIKwYBBQUHAQcBAf8EPjA8MDoEAgABMDQwDAMEAC7s
wQMEAi7swAMEAC7szwMEAC7s/QMEAFKL7jAMAwQBUovyAwQAUov0AwQAUov2MA0G
CSqGSIb3DQEBCwUAA4IBAQABZYOro6W/JHDVJgwRmCF4iq6egTcGcpimSmlDBpqe
dyDDzt/qrkJVVIebE75U0sXikpzl6/l2jGbKKHXf42uGjQHtW8KuyY0c4NMPIjO6
Mey28AiNj2wt2NN26D01J5vHnZPwxdX2V4IqqHa5sCQ6belfEl2sfb95U0b3rcg1
L39pkrb0yNKeVwDN3PMfyqSjf39tGRjnTy9xZdHUEWVhU6e39yWTswFjHXrPS+yH
+iJ81KhQf9srLAD5zeOAYT+qjO+wIujzkzlt8FD2pGeRs3WN4mu1YYna22Giz2RA
+YH6k5dl5U8+x40rB1yahd89YgNl8DmsnupH1j9Ir5RM
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:48:25 2026 by rpki-client