Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS46562.roa
File: AS46562.roa (raw, json)
Hash identifier: xGy+uo19/5kUfXxnUPmX8SDDR39mbNWy3h4sfrg/Tig=
Subject key identifier: 5C:3F:4F:06:08:1F:F2:81:33:1F:14:DC:CA:4E:CE:49:32:15:CA:84
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 105AD10FCA672BCB20A773C00E7CFAEF3893D8C3
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS46562.roa
Signing time: Wed 01 Apr 2026 00:26:45 +0000
ROA not before: Wed 01 Apr 2026 00:21:45 +0000
ROA not after: Wed 31 Mar 2027 00:26:45 +0000
asID: 46562
IP address blocks: 45.95.37.0/24 maxlen: 24
181.214.5.0/24 maxlen: 24
181.214.45.0/24 maxlen: 24
191.96.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:5a:d1:0f:ca:67:2b:cb:20:a7:73:c0:0e:7c:fa:ef:38:93:d8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 1 00:21:45 2026 GMT
Not After : Mar 31 00:26:45 2027 GMT
Subject: CN=5C3F4F06081FF281331F14DCCA4ECE493215CA84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:73:1f:b8:27:32:7e:a3:0b:88:1b:db:34:25:
b2:09:88:0d:f4:1e:4b:16:4f:57:59:b4:05:7b:3c:
45:e0:54:b6:1f:61:61:4d:bc:3b:eb:6f:2e:04:ca:
23:97:fa:51:aa:ac:b3:ec:5e:20:7a:af:64:3f:d8:
bd:5a:98:a0:0b:3d:06:e9:fe:89:2e:8d:e8:02:cb:
92:a8:fd:fa:94:9a:cc:fe:2c:5c:88:06:de:0d:80:
42:34:da:ef:2a:79:11:84:47:73:43:f6:57:f0:d9:
37:43:54:94:79:42:41:b6:d6:b3:14:20:2c:e8:7d:
f5:35:a0:1d:93:de:e3:a7:c7:6d:38:c9:d2:88:c4:
6c:8d:f6:da:34:40:c2:1c:fb:71:0d:a3:be:a7:1c:
39:98:2b:b2:e1:9c:15:ce:d5:30:48:1d:de:0e:95:
46:21:b8:05:3a:9f:ac:0a:3b:be:8e:55:af:60:cd:
7f:d5:62:7c:58:15:b7:72:19:2f:d7:fd:a2:19:bc:
1a:ba:3b:49:c1:04:71:10:ee:9e:d8:52:74:3d:fb:
c2:13:29:7d:a7:19:34:42:b6:0c:e9:67:32:e7:14:
4e:40:fb:76:4b:0c:f8:a8:45:73:a1:36:f9:af:d8:
de:14:a6:60:39:19:d0:3c:e8:f1:9e:8c:bf:c4:00:
80:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3F:4F:06:08:1F:F2:81:33:1F:14:DC:CA:4E:CE:49:32:15:CA:84
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS46562.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.37.0/24
181.214.5.0/24
181.214.45.0/24
191.96.215.0/24
Signature Algorithm: sha256WithRSAEncryption
92:bd:57:83:8d:9f:16:14:2b:bf:81:0d:c2:59:76:89:06:88:
ba:db:85:a0:b4:1d:c3:2b:46:97:c2:33:ce:ef:94:99:ed:90:
27:18:47:ca:9d:df:a7:77:37:74:91:15:c2:4a:cc:fa:3b:98:
9c:3f:2f:05:e0:e3:86:d1:e5:7a:a7:eb:b3:87:a3:df:67:08:
44:55:53:c0:36:84:85:bc:23:66:71:22:0b:3a:65:79:2a:96:
6a:57:60:d7:d3:bc:a9:ed:0f:55:c4:fa:02:d6:da:f9:c5:5b:
d5:6c:2d:12:50:d6:79:39:27:71:d8:2d:0b:21:17:8e:cd:6d:
18:ab:06:d9:73:9e:6d:a1:11:e3:cc:9b:a7:57:cd:61:16:98:
f8:6c:53:10:05:02:e3:84:a0:25:f4:39:e3:87:65:44:4e:8a:
cb:c2:81:a9:4c:8e:04:23:c8:17:e6:83:94:24:d0:c7:ba:6c:
c4:29:82:69:1e:96:1b:ba:0a:fb:28:96:33:09:9f:e7:13:55:
fe:13:04:ad:99:29:79:1b:8b:9d:88:af:c0:9e:ac:96:58:fd:
67:bb:f5:3e:48:87:b5:6a:23:76:d2:ad:3c:50:4a:e1:3f:42:
4e:18:68:f1:c0:e3:d2:d6:7c:d6:96:a2:4c:a9:40:88:fd:c1:
34:97:97:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:34:22 2026 by rpki-client