Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS48266.roa
File: AS48266.roa (raw, json)
Hash identifier: 5czUbsW6g5U5NghUzVtdvuvWkKUQsIS1PxoJwK80b8w=
Subject key identifier: 0F:C2:CD:4C:84:3D:C0:04:9C:B7:F7:46:6B:20:F2:98:70:21:47:49
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2CF8C397DEA4B92599382FE9B1EE359D30BDD67A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS48266.roa
Signing time: Sun 13 Sep 2026 12:56:01 +0000
ROA not before: Sun 13 Sep 2026 12:51:01 +0000
ROA not after: Sun 12 Sep 2027 12:56:01 +0000
asID: 48266
IP address blocks: 82.25.25.0/24 maxlen: 24
82.25.33.0/24 maxlen: 24
82.25.40.0/24 maxlen: 24
82.38.121.0/24 maxlen: 24
82.39.150.0/24 maxlen: 24
82.47.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:f8:c3:97:de:a4:b9:25:99:38:2f:e9:b1:ee:35:9d:30:bd:d6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 13 12:51:01 2026 GMT
Not After : Sep 12 12:56:01 2027 GMT
Subject: CN=0FC2CD4C843DC0049CB7F7466B20F29870214749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:88:98:8e:c2:46:30:e5:ab:fe:25:2f:55:cf:
62:8f:f0:c4:3a:38:36:54:ef:7c:94:c7:65:97:e1:
fe:08:81:bd:c9:6a:27:e1:fc:95:1b:8e:df:8f:32:
d4:01:31:43:47:18:80:21:0b:82:1a:11:bd:2a:44:
7f:53:e3:8b:fb:99:ca:ff:a9:6b:a3:29:27:8a:21:
8b:8c:3c:3f:be:b3:84:fd:5f:9c:4a:83:33:5e:91:
f0:18:f3:2d:42:46:0e:22:ce:41:ad:9b:16:58:31:
4b:a4:a3:3e:2f:13:cc:a9:1b:07:dc:65:cf:f6:e7:
eb:71:6a:34:bb:91:10:18:16:a3:b6:39:e9:61:44:
2c:00:92:d2:e6:e6:85:b1:73:c4:99:21:1c:37:35:
a5:08:ab:48:2d:73:e1:10:12:c3:f1:eb:5f:0c:32:
ef:62:49:5e:47:77:21:f3:56:a1:11:a5:c2:c7:e2:
59:78:07:78:f5:50:17:67:e2:b9:32:c4:64:18:6d:
d5:f1:4d:bd:9e:5a:ec:89:a1:19:78:15:ae:7f:f9:
be:c6:c3:b8:9c:89:02:ee:b9:7c:97:35:83:1a:f2:
d3:11:76:ba:af:ef:7a:3a:4e:a7:7b:1d:70:e7:5f:
87:bb:1a:00:f7:a9:58:02:c8:1b:eb:4c:fa:6d:5e:
ad:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C2:CD:4C:84:3D:C0:04:9C:B7:F7:46:6B:20:F2:98:70:21:47:49
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS48266.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.25.0/24
82.25.33.0/24
82.25.40.0/24
82.38.121.0/24
82.39.150.0/24
82.47.47.0/24
Signature Algorithm: sha256WithRSAEncryption
84:26:38:4c:14:f6:6c:c1:76:71:48:b5:f7:7b:35:64:4e:67:
ec:fa:88:46:0b:ef:11:d7:f0:6d:b0:b1:b5:ae:6a:fd:e7:13:
fa:40:6e:e4:6e:5c:a8:ae:51:e2:41:83:bc:b4:5f:c2:47:03:
d5:50:fe:98:99:c0:09:a3:65:d1:d5:93:2a:1b:72:c3:1f:87:
d2:8a:ea:a0:c3:9d:0f:b4:7f:0a:72:d0:5a:6b:39:ec:70:cc:
e3:9d:da:2b:43:2c:d7:26:d0:09:89:3a:6c:4f:b7:9a:30:5b:
ee:61:b4:5d:bd:07:f2:e6:48:69:7a:e8:38:e8:e0:bf:31:b0:
3e:cb:3c:96:15:c2:90:c8:e0:99:ea:08:95:35:ff:6f:87:b7:
d8:dd:a3:32:25:45:d2:dc:d1:59:51:9d:3a:72:85:c6:42:68:
49:9b:22:64:5f:ec:c9:40:a9:58:f8:f0:cc:5e:e5:ef:fe:6c:
3d:83:c0:ba:f1:98:f4:a8:dc:6b:ec:6c:ee:88:24:bc:2b:49:
02:e4:59:e6:c4:a0:b3:71:5d:f8:c9:ac:8f:be:68:a1:22:87:
78:9d:e7:90:0c:93:b6:3f:37:66:eb:0c:e0:da:e1:e3:51:a5:
15:cd:9e:1e:c7:f4:31:7e:ff:6d:7f:92:83:1e:7c:85:44:d3:
06:22:fc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:36:16 2026 by rpki-client