Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS48529.roa
File: AS48529.roa (raw, json)
Hash identifier: YHc8kX3s9VuWP3zWPsvSs6TOgXBtpSbvM4pRiDBpOCg=
Subject key identifier: 7A:7E:49:7C:71:7A:7F:B6:EC:C0:74:F8:70:2D:58:48:A7:B2:0B:0B
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 3E348EEC7372A2F102D7F2B52830F8BF65A226ED
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS48529.roa
Signing time: Tue 08 Sep 2026 13:49:33 +0000
ROA not before: Tue 08 Sep 2026 13:44:33 +0000
ROA not after: Tue 07 Sep 2027 13:49:33 +0000
asID: 48529
IP address blocks: 45.135.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:34:8e:ec:73:72:a2:f1:02:d7:f2:b5:28:30:f8:bf:65:a2:26:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Sep 8 13:44:33 2026 GMT
Not After : Sep 7 13:49:33 2027 GMT
Subject: CN=7A7E497C717A7FB6ECC074F8702D5848A7B20B0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8e:ae:0e:b2:1b:d2:ab:0b:d1:5e:a0:e0:6d:
ac:66:80:23:ab:0c:5c:5a:c0:5d:f7:55:b3:d4:6a:
a6:3d:f4:e8:3c:17:ed:db:e9:a0:77:59:1a:60:1b:
a7:48:b5:86:7e:b9:fe:ab:50:8b:f1:a6:48:ff:19:
1d:c4:df:5c:13:ec:8b:0a:50:35:ee:0c:46:70:fa:
97:f9:7c:7f:5c:de:68:74:e3:93:ce:57:42:0d:f4:
48:12:91:de:3d:f8:57:65:49:80:fc:f0:4d:36:99:
d8:29:fa:ae:07:17:f5:e9:34:a2:f6:18:b3:a1:ef:
fe:28:f6:2e:5d:ce:81:51:3b:ea:21:aa:69:08:42:
9e:ff:04:a4:89:a1:30:07:e0:a2:13:aa:77:9b:63:
6e:b2:f4:00:78:b0:10:a2:85:9e:ac:00:49:ce:d2:
f2:d5:2b:b4:84:82:0d:d4:c6:d8:16:76:94:c8:76:
22:09:73:09:01:5a:84:58:15:ed:c8:a3:dd:b1:8b:
93:3d:b2:e9:79:f4:37:15:89:4a:6b:2b:4c:b3:bd:
76:41:dd:34:3f:20:8d:1e:9b:9c:c8:14:66:e6:33:
2c:da:22:1f:57:61:2d:65:30:48:03:fa:f0:ac:17:
25:08:51:4d:df:51:b1:f3:99:14:d4:de:3f:d2:20:
19:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7E:49:7C:71:7A:7F:B6:EC:C0:74:F8:70:2D:58:48:A7:B2:0B:0B
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS48529.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.248.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:43:8a:52:64:3c:98:cc:6e:ea:8b:e4:47:6e:3a:4e:98:e7:
a1:1e:02:df:6c:86:6b:a6:31:a9:62:98:83:4d:47:5b:0a:a6:
6a:7c:95:1e:0d:f1:b8:bd:73:94:9c:98:fa:81:ec:dc:da:75:
59:ab:98:12:c2:47:47:1a:ab:cc:aa:b4:97:8c:d8:8b:36:bd:
19:aa:a5:32:22:24:fc:a8:7c:4e:a6:32:77:0c:3e:f8:fe:42:
5a:fa:fa:98:cc:aa:83:03:3b:7f:75:24:95:b8:68:7c:a1:a0:
9c:06:69:9a:63:de:e1:06:4f:a1:a7:03:47:52:ff:43:8b:e7:
f1:45:7a:75:87:d7:29:08:fa:c3:03:33:55:7f:71:db:15:c1:
2d:e8:1e:3f:ab:50:84:62:06:2e:88:43:a0:e5:2d:25:b2:98:
ab:90:bb:18:a1:62:01:fd:ba:a4:16:81:e7:90:a1:2d:2e:7c:
58:59:08:b2:7d:f4:98:68:14:79:10:49:36:d4:b2:3f:43:cb:
ca:63:51:93:59:43:a4:0b:a1:4b:91:99:dd:03:04:1a:6f:f3:
0a:b3:e8:6e:2a:c7:d9:01:eb:a6:df:49:a1:d8:a5:6c:0d:2d:
17:2c:65:3c:36:7c:47:ed:0a:23:aa:1a:2e:3f:ce:62:4a:c9:
60:31:2b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:14:27 2026 by rpki-client