Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS48529.roa
File: AS48529.roa (raw, json)
Hash identifier: UOAqoh2pqHfORAaEOGAy/DeFGC5dNihjiFR2y9jfalE=
Subject key identifier: 7F:46:82:10:30:C3:EC:26:4F:14:D6:45:2D:38:E2:52:7E:CC:17:8A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6A37641F8CEF05F200CC89D071175DADE80B4018
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS48529.roa
Signing time: Sat 28 Mar 2026 00:04:17 +0000
ROA not before: Fri 27 Mar 2026 23:59:17 +0000
ROA not after: Sat 27 Mar 2027 00:04:17 +0000
asID: 48529
IP address blocks: 82.24.172.0/24 maxlen: 24
82.26.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:37:64:1f:8c:ef:05:f2:00:cc:89:d0:71:17:5d:ad:e8:0b:40:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 27 23:59:17 2026 GMT
Not After : Mar 27 00:04:17 2027 GMT
Subject: CN=7F46821030C3EC264F14D6452D38E2527ECC178A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:ee:1a:80:24:a8:4b:d7:85:45:b0:48:ba:
32:82:d2:b5:f5:95:58:d9:b0:c7:cf:5c:ae:cf:d3:
ef:b5:69:13:0c:c1:2e:80:d6:39:22:01:48:ee:7a:
4e:2c:67:b3:46:a4:06:98:69:ed:8e:e5:aa:b9:8b:
70:54:93:bb:dc:d3:c2:e5:cf:c5:08:a0:97:71:e9:
98:18:cc:80:65:19:77:f5:df:73:75:90:9a:f2:d1:
74:29:df:84:10:6b:65:7e:3e:58:a8:e2:ec:d5:e6:
fd:f9:cd:f9:df:5a:9d:1a:b5:fe:62:37:e5:da:76:
05:ac:5e:16:f1:f2:f9:4d:e6:50:06:fd:e5:26:8e:
f6:bf:f0:cd:a0:99:37:a6:3a:a7:34:01:c8:f3:0e:
d3:34:51:dc:2d:1e:87:7f:f2:7f:ab:3f:e8:ac:6e:
03:47:55:04:da:8f:df:06:f0:b6:5a:cb:1e:a0:12:
ac:01:5f:cd:3d:8e:86:7a:10:c5:8b:83:e3:51:27:
62:19:24:78:04:fc:45:ca:5b:51:0e:08:14:18:4d:
c9:e6:37:1c:1b:3f:80:ed:07:03:43:99:0b:d2:82:
d8:3f:28:8c:26:27:23:4b:f4:0d:8b:87:4c:89:76:
5f:7d:e6:7b:39:55:2c:71:a7:d8:5c:13:a5:d6:4b:
5e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:46:82:10:30:C3:EC:26:4F:14:D6:45:2D:38:E2:52:7E:CC:17:8A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS48529.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.172.0/24
82.26.163.0/24
Signature Algorithm: sha256WithRSAEncryption
37:07:db:96:de:b7:bb:99:a4:61:c4:71:44:43:03:9f:0a:ec:
93:1e:af:6a:ff:cf:00:1c:98:84:18:cc:75:a6:45:05:92:33:
8e:85:46:43:0e:d1:29:94:a3:ba:b2:83:e1:51:b2:56:a8:d0:
18:aa:8e:f7:ba:13:95:1a:e7:7a:44:ce:8e:b8:7e:ae:cf:a5:
98:68:c3:04:53:69:11:04:d6:a4:63:4d:1a:0b:1d:12:7d:80:
d4:00:87:d1:a6:06:99:eb:f7:73:92:d4:3d:54:bf:8e:2e:24:
10:61:32:5d:e4:88:2b:27:9d:6e:3e:56:19:cf:02:cc:73:25:
42:f2:86:e8:ad:14:5e:dd:2f:40:18:df:5f:f9:b0:6c:fc:80:
49:05:cf:49:2a:7f:b5:0d:86:59:4e:72:8d:b9:77:b2:11:85:
a6:d1:15:bc:b8:e6:0b:76:f6:f7:12:17:b2:24:e7:71:ca:1b:
98:02:8e:4c:fa:8b:69:00:69:62:46:56:a4:1d:29:ec:20:a8:
2b:a0:f7:6c:7b:20:26:82:38:db:23:f2:dc:b5:5d:e5:66:09:
f6:c3:46:27:20:ea:3d:df:e9:b4:32:06:f8:e9:66:59:15:52:
12:53:2d:3c:24:10:4a:ef:1e:73:ea:b9:8d:c0:25:60:7b:0a:
f3:03:8c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:46:59 2026 by rpki-client