Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS46562.roa
File: AS46562.roa (raw, json)
Hash identifier: P8E+AcOWeDoN6jiv56M70WoRx8t01Uv+rHV43jowj8Y=
Subject key identifier: 61:D3:17:09:DA:14:B3:5F:3A:CC:11:4A:B6:46:CB:C3:D2:67:25:F2
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 5F09F56F366A9F1FAA7E4B17F5A285DBB1FDAD19
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS46562.roa
Signing time: Thu 19 Feb 2026 21:12:22 +0000
ROA not before: Thu 19 Feb 2026 21:07:22 +0000
ROA not after: Thu 18 Feb 2027 21:12:22 +0000
asID: 46562
IP address blocks: 45.95.37.0/24 maxlen: 24
181.214.5.0/24 maxlen: 24
181.214.45.0/24 maxlen: 24
191.96.37.0/24 maxlen: 24
191.96.103.0/24 maxlen: 24
191.96.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:09:f5:6f:36:6a:9f:1f:aa:7e:4b:17:f5:a2:85:db:b1:fd:ad:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 19 21:07:22 2026 GMT
Not After : Feb 18 21:12:22 2027 GMT
Subject: CN=61D31709DA14B35F3ACC114AB646CBC3D26725F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:a4:1c:42:44:a7:24:97:39:91:b4:54:f5:
25:24:2a:b7:66:fd:05:95:aa:ce:37:5b:6d:f2:8a:
37:e8:84:e0:c8:2a:53:5d:17:82:d3:b4:39:1c:f9:
ec:60:da:c1:41:cf:2b:08:21:44:a6:5d:2e:04:40:
89:3c:98:e6:ba:a1:65:ce:73:17:5a:89:fc:66:93:
83:45:77:ba:d5:49:b4:b5:a7:70:d0:c4:4e:25:64:
eb:51:51:41:65:22:2c:50:04:14:77:39:ae:5e:bc:
92:6e:0c:16:7a:b2:03:11:8f:e5:5d:61:04:8a:48:
67:96:18:61:56:62:85:32:82:c4:81:11:b7:c0:f7:
28:88:23:ae:73:49:0c:fa:06:5a:68:a8:88:b6:0c:
87:80:d9:c4:b3:b8:65:f7:08:4c:0a:f0:ca:95:ac:
b1:0a:4a:1f:3c:6d:72:66:67:b8:37:55:d8:f1:ab:
d5:07:63:6e:5a:09:1a:c6:1d:3e:11:3d:37:e7:6e:
45:b2:ab:4a:67:54:14:82:3a:0e:64:bb:89:35:aa:
a1:93:84:0a:bc:e1:0d:24:dc:07:6f:3f:a8:48:0b:
ce:78:8d:4f:58:a6:cb:67:9d:16:65:2a:52:f7:40:
82:94:8b:87:f7:b1:0f:61:87:00:4d:8d:f4:3b:69:
a2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D3:17:09:DA:14:B3:5F:3A:CC:11:4A:B6:46:CB:C3:D2:67:25:F2
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS46562.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.37.0/24
181.214.5.0/24
181.214.45.0/24
191.96.37.0/24
191.96.103.0/24
191.96.215.0/24
Signature Algorithm: sha256WithRSAEncryption
79:f9:fb:08:50:56:bd:db:5a:5a:c0:64:e7:c3:54:a2:47:c9:
65:f9:be:9b:b9:53:ec:18:aa:0d:18:5c:a9:1e:e8:a6:46:06:
ec:eb:f6:1c:68:54:a7:b7:16:f8:c9:20:27:c5:7f:13:b7:e3:
c4:e9:28:a2:ff:ce:d9:be:90:48:a3:42:36:c4:5a:a9:78:9d:
b0:44:39:19:57:0a:a1:d7:54:5b:21:87:9d:6c:72:0f:af:ee:
3c:04:6e:e9:25:8f:e4:9a:0f:7f:d0:93:36:3a:ca:67:4d:e2:
36:f9:4a:a9:77:1c:95:d8:f4:63:dd:9f:4b:70:e4:1a:d0:ef:
b2:24:79:a2:10:b2:0e:c6:0f:cc:00:ab:fb:17:1f:ec:0e:62:
50:9e:da:d8:d0:aa:cc:20:13:82:c3:38:ed:08:a8:75:dd:09:
e1:ff:93:8f:11:fd:a4:ba:66:5f:33:46:87:99:b0:dc:78:80:
df:a4:96:e8:2e:ce:3a:5c:63:d2:a3:0d:aa:ac:96:b7:ee:ef:
b8:b9:16:96:3c:ba:56:c2:9c:48:18:12:43:a0:bb:3e:e5:0c:
4f:c4:31:81:5c:2b:0d:f1:38:43:07:2b:cf:a0:66:2e:0b:d2:
f6:c8:a2:fb:f4:2e:d2:19:bc:43:08:f8:8f:c0:2a:f1:5d:f1:
03:0f:2a:ff
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgIUXwn1bzZqnx+qfksX9aKF27H9rRkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjAyMTkyMTA3MjJaFw0yNzAyMTgyMTEyMjJaMDMxMTAvBgNV
BAMTKDYxRDMxNzA5REExNEIzNUYzQUNDMTE0QUI2NDZDQkMzRDI2NzI1RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8UaQcQkSnJJc5kbRU9SUkKrdm
/QWVqs43W23yijfohODIKlNdF4LTtDkc+exg2sFBzysIIUSmXS4EQIk8mOa6oWXO
cxdaifxmk4NFd7rVSbS1p3DQxE4lZOtRUUFlIixQBBR3Oa5evJJuDBZ6sgMRj+Vd
YQSKSGeWGGFWYoUygsSBEbfA9yiII65zSQz6BlpoqIi2DIeA2cSzuGX3CEwK8MqV
rLEKSh88bXJmZ7g3Vdjxq9UHY25aCRrGHT4RPTfnbkWyq0pnVBSCOg5ku4k1qqGT
hAq84Q0k3AdvP6hIC854jU9YpstnnRZlKlL3QIKUi4f3sQ9hhwBNjfQ7aaI5AgMB
AAGjggInMIICIzAdBgNVHQ4EFgQUYdMXCdoUs186zBFKtkbLw9JnJfIwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNDY1NjIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUHAQcBAf8ELjAsMCoEAgABMCQDBAAtXyUD
BAC11gUDBAC11i0DBAC/YCUDBAC/YGcDBAC/YNcwDQYJKoZIhvcNAQELBQADggEB
AHn5+whQVr3bWlrAZOfDVKJHyWX5vpu5U+wYqg0YXKke6KZGBuzr9hxoVKe3FvjJ
ICfFfxO348TpKKL/ztm+kEijQjbEWql4nbBEORlXCqHXVFshh51scg+v7jwEbukl
j+SaD3/QkzY6ymdN4jb5Sql3HJXY9GPdn0tw5BrQ77IkeaIQsg7GD8wAq/sXH+wO
YlCe2tjQqswgE4LDOO0IqHXdCeH/k48R/aS6Zl8zRoeZsNx4gN+kluguzjpcY9Kj
Daqslrfu77i5FpY8ulbCnEgYEkOguz7lDE/EMYFcKw3xOEMHK8+gZi4L0vbIovv0
LtIZvEMI+I/AKvFd8QMPKv8=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:02:50 2026 by rpki-client