Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48925.roa
File: AS48925.roa (raw, json)
Hash identifier: 0/z5PGQqmXl2IEK0vmVIk3EVdM1mOP1/KnjikX2JpfI=
Subject key identifier: 30:96:71:31:AF:1C:8F:50:E6:E6:AD:F3:3A:DF:FC:B3:AF:C6:D7:E9
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3F936360EE87667987C440CA8D42FD77813A0E1D
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48925.roa
Signing time: Mon 14 Sep 2026 12:49:35 +0000
ROA not before: Mon 14 Sep 2026 12:44:35 +0000
ROA not after: Mon 13 Sep 2027 12:49:35 +0000
asID: 48925
IP address blocks: 181.215.63.0/24 maxlen: 24
191.96.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:24:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:93:63:60:ee:87:66:79:87:c4:40:ca:8d:42:fd:77:81:3a:0e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 14 12:44:35 2026 GMT
Not After : Sep 13 12:49:35 2027 GMT
Subject: CN=30967131AF1C8F50E6E6ADF33ADFFCB3AFC6D7E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cd:05:83:80:2a:7e:1e:49:ea:d3:60:06:4b:
43:dd:ba:9b:d8:7c:58:65:bf:3f:2b:35:03:55:6a:
33:01:23:2a:c2:e9:40:26:1c:40:db:23:17:24:aa:
77:63:28:f0:a2:5f:34:56:25:28:65:68:2c:bf:2d:
6c:6c:d6:33:33:1d:4e:0c:63:31:f0:33:98:13:76:
d0:04:fb:c2:f4:46:8a:bb:22:44:96:74:80:c0:8d:
7a:f3:c7:a0:eb:48:ff:60:63:09:d6:00:a2:b0:96:
09:1c:24:65:da:44:d9:54:5b:e7:aa:e0:17:0b:81:
27:a1:52:a8:b6:16:58:61:b4:6d:f9:36:2c:8b:5f:
60:fe:70:2e:74:c9:f0:9d:3d:5f:39:5f:73:de:84:
e9:18:ba:4a:d9:8c:1c:83:74:21:67:bc:d1:6a:57:
26:86:81:88:6e:12:0e:a2:85:ef:47:ed:3c:a5:11:
8a:bb:f5:61:d5:dd:f0:8f:8c:e6:8a:bb:c0:1e:0e:
52:d1:df:ca:85:54:14:f8:7f:6a:ed:c6:92:0c:ca:
ad:65:bf:56:1e:60:58:c3:c5:32:a0:a1:82:af:eb:
1f:b1:ad:a9:d2:e4:19:db:0a:1f:a8:a5:53:54:18:
b0:2f:b9:48:ab:9c:12:54:f8:cd:cb:0d:80:1b:44:
c6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:96:71:31:AF:1C:8F:50:E6:E6:AD:F3:3A:DF:FC:B3:AF:C6:D7:E9
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48925.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.63.0/24
191.96.152.0/24
Signature Algorithm: sha256WithRSAEncryption
17:f1:c4:3b:99:79:4e:ad:07:1f:eb:34:2a:60:12:47:b8:20:
95:cd:1b:01:b2:f8:1d:b9:e7:69:9c:b3:99:bc:12:0a:53:1c:
46:0b:e2:8d:0c:39:1d:bd:71:1d:aa:61:c7:ea:34:83:a3:bc:
9e:6a:1a:86:eb:9d:18:66:9b:e0:20:2d:15:3e:24:a3:bb:4e:
d9:a2:59:f1:6e:fd:ad:69:06:14:ca:27:2d:57:d4:4c:b5:ca:
dc:ff:4a:b0:ba:bb:33:b3:ed:80:2f:fb:a3:5d:21:2f:da:bd:
f8:d9:31:cc:00:15:bd:a8:67:b7:14:63:52:d4:c6:81:2a:fa:
c8:f0:dd:93:8b:3d:b7:3b:f2:87:2d:b7:5a:32:50:47:02:29:
7f:74:9b:ee:51:cd:af:0c:ca:ac:b5:35:a1:f9:d2:27:49:93:
a4:f4:ec:4e:b6:01:0b:1b:dc:35:59:4e:86:3f:c1:05:7e:e2:
d2:86:9f:6b:e5:f5:53:0d:bb:47:5f:52:fe:75:d9:12:1d:83:
a6:7a:ce:a1:84:af:57:3a:cf:8e:c5:2b:e2:a2:0f:5b:87:45:
bf:8c:d6:52:3b:87:1f:64:d8:32:05:1c:20:39:7c:8a:22:73:
6a:92:49:ba:e5:84:0e:bb:61:04:41:e1:33:0b:c8:4c:16:31:
2a:2e:4f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:36:43 2026 by rpki-client