Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS46562.roa
File: AS46562.roa (raw, json)
Hash identifier: qK1O9jcJ4Gn5o9mKNoP+iJS1n+ZOrLfxVgXkjO7sHng=
Subject key identifier: 3F:3F:8F:D9:51:FC:42:D8:5C:7C:F6:24:E3:68:21:B8:1D:70:3B:B2
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6E4E34903E26D9944FE4277C5C4A4C5A7B4D97A6
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS46562.roa
Signing time: Sun 26 Oct 2025 22:47:32 +0000
ROA not before: Sun 26 Oct 2025 22:42:32 +0000
ROA not after: Sun 25 Oct 2026 22:47:32 +0000
asID: 46562
IP address blocks: 45.95.37.0/24 maxlen: 24
181.214.5.0/24 maxlen: 24
181.214.45.0/24 maxlen: 24
191.96.37.0/24 maxlen: 24
191.96.103.0/24 maxlen: 24
191.96.215.0/24 maxlen: 24
191.101.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:4e:34:90:3e:26:d9:94:4f:e4:27:7c:5c:4a:4c:5a:7b:4d:97:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 26 22:42:32 2025 GMT
Not After : Oct 25 22:47:32 2026 GMT
Subject: CN=3F3F8FD951FC42D85C7CF624E36821B81D703BB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6f:5b:6f:5d:39:6c:f7:67:18:a7:5c:49:40:
7d:17:e8:16:45:1f:db:f0:0b:7a:4b:79:8a:76:12:
47:e0:50:7f:35:87:d8:74:6c:6d:1d:c1:f3:8c:0e:
42:13:bf:9a:76:fc:55:31:f1:a8:ad:6e:e0:b6:76:
8c:c6:37:ff:35:5b:92:58:f4:b2:85:37:5b:16:08:
3b:fe:bb:75:c4:6f:f1:fb:4c:b0:8d:59:c5:a1:46:
38:9f:a7:76:29:7d:55:86:a2:01:88:60:1b:9f:dc:
23:bf:54:97:58:bd:40:36:27:72:e8:ee:b7:33:57:
42:96:32:72:61:4f:f1:d0:2b:54:c2:0a:95:81:9a:
0b:56:d0:a2:3d:22:5e:17:9a:dc:5d:bf:92:35:9d:
af:9a:86:88:1b:a8:3e:ca:f9:cd:de:48:71:2d:d8:
b7:14:b6:4f:2c:7d:73:4e:ee:6b:84:c0:70:08:53:
f3:af:da:24:56:57:76:7c:0f:0b:4d:28:9f:fd:f1:
91:d2:d4:6e:72:b6:9a:3b:c2:81:81:15:d3:e2:78:
8e:70:d3:14:01:0f:97:b4:ec:15:38:b7:a9:83:2c:
2d:4d:50:cd:1e:28:47:b6:2f:43:ff:5d:2b:84:4c:
99:6b:31:38:b1:f0:ff:6c:ed:ea:c5:32:2f:53:36:
68:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3F:8F:D9:51:FC:42:D8:5C:7C:F6:24:E3:68:21:B8:1D:70:3B:B2
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS46562.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.37.0/24
181.214.5.0/24
181.214.45.0/24
191.96.37.0/24
191.96.103.0/24
191.96.215.0/24
191.101.237.0/24
Signature Algorithm: sha256WithRSAEncryption
18:a7:10:30:ba:ee:95:bd:0d:77:49:bd:c6:0b:75:ef:d6:30:
d5:45:61:e6:e7:2f:e4:44:91:2c:43:21:7b:a7:fe:dd:68:18:
92:35:eb:1e:f8:6b:04:fd:0b:e9:26:9b:2e:9e:4f:47:ee:f6:
ec:6c:3c:22:83:85:f9:06:5e:d8:5a:d4:e7:1f:cb:0f:fa:33:
99:27:7d:14:fc:3e:22:88:cb:a0:1e:b1:a2:83:22:46:22:de:
d9:a5:2e:4f:e9:da:f4:a1:68:53:d6:4d:34:5a:a3:6e:8c:ec:
9c:d9:a2:21:a0:9d:3c:da:74:e3:13:fc:96:70:b6:7e:4f:a9:
47:55:a4:17:2f:3c:a4:b2:d6:5a:72:12:8c:37:05:45:10:44:
d8:cf:91:8b:fc:87:7b:15:ec:d9:3a:e7:47:b1:36:5a:e1:a9:
73:0b:93:f6:0a:ee:bd:18:bb:ce:8e:7d:c4:de:5c:a3:f8:4e:
5f:09:be:72:dc:fc:9e:d4:9f:bd:a1:3a:97:a7:e9:6e:8f:48:
82:5c:8e:3a:19:24:1c:51:ae:48:b0:67:56:8c:c0:5b:e5:e3:
df:d1:21:25:6d:b9:1d:da:66:58:c8:a9:6c:b8:f1:77:cb:42:
d4:d3:82:7f:98:28:61:dd:42:44:19:76:d4:0b:0b:0c:7c:be:
ad:fa:0b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:29 2025 by rpki-client