Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS44803.roa
File: AS44803.roa (raw, json)
Hash identifier: E4lk0nSRzzfCkV3apS/9aKtuvvPeJ5F7jYih5iecWhg=
Subject key identifier: 69:06:EF:8D:34:64:D4:9D:DD:F0:2B:A0:2D:57:01:9F:2A:AC:CA:E8
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 01D36A6B4351E1A07147536E7FF1C6359BE06114
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS44803.roa
Signing time: Thu 17 Sep 2026 00:02:05 +0000
ROA not before: Wed 16 Sep 2026 23:57:05 +0000
ROA not after: Thu 16 Sep 2027 00:02:05 +0000
asID: 44803
IP address blocks: 51.146.4.0/24 maxlen: 24
51.146.13.0/24 maxlen: 24
51.146.21.0/24 maxlen: 24
51.146.233.0/24 maxlen: 24
51.194.129.0/24 maxlen: 24
51.241.0.0/24 maxlen: 24
51.241.115.0/24 maxlen: 24
51.241.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:d3:6a:6b:43:51:e1:a0:71:47:53:6e:7f:f1:c6:35:9b:e0:61:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 16 23:57:05 2026 GMT
Not After : Sep 16 00:02:05 2027 GMT
Subject: CN=6906EF8D3464D49DDDF02BA02D57019F2AACCAE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2d:ae:8f:0d:b3:f3:7b:67:9a:23:b2:c5:db:
19:87:c2:3d:46:58:9a:b8:0d:58:3d:50:b8:19:f3:
3f:a4:84:60:08:3e:7d:c3:b3:4a:36:30:ab:b7:0d:
68:3a:2c:cd:a4:61:7d:72:49:79:87:4f:81:3b:f3:
f5:69:3f:82:12:c5:68:47:22:c8:4e:22:61:59:1b:
c6:be:f2:7a:03:c6:ac:82:09:1a:c7:de:83:4f:ec:
bb:5e:2f:f6:c7:89:10:ae:7d:00:20:62:dd:8a:5a:
5d:c5:00:9a:18:f8:88:8c:cf:be:06:c6:ba:f1:3d:
10:24:59:af:ff:c1:51:cd:94:b4:43:f4:ce:d7:e4:
b5:b9:7f:10:5e:d6:c7:2d:cd:f2:7a:c1:79:9a:3c:
f7:97:aa:b7:e4:2d:83:3d:9d:ce:b7:12:a6:72:a7:
27:85:82:9a:ac:99:13:98:18:85:b1:41:74:77:1a:
d0:2f:8b:22:b7:ad:19:bf:27:30:c8:37:ae:63:e2:
b9:be:35:12:82:45:be:a3:71:02:f5:a0:e6:5c:9a:
a8:92:ef:59:90:00:c1:d8:50:8f:4f:b3:3d:70:2c:
90:f2:7a:71:3e:73:b6:75:c0:90:6e:8e:5b:0d:ce:
70:b7:f8:99:b9:17:4d:dc:06:04:9b:0a:4c:e1:96:
c1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:06:EF:8D:34:64:D4:9D:DD:F0:2B:A0:2D:57:01:9F:2A:AC:CA:E8
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS44803.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.4.0/24
51.146.13.0/24
51.146.21.0/24
51.146.233.0/24
51.194.129.0/24
51.241.0.0/24
51.241.115.0/24
51.241.119.0/24
Signature Algorithm: sha256WithRSAEncryption
84:bc:9b:35:d4:3f:ff:c4:03:00:4e:f2:4b:c3:d1:3d:68:31:
3b:82:24:1e:b8:29:9f:9e:b9:69:df:74:7c:35:cd:10:b0:f2:
74:07:70:ef:42:26:d1:4d:e8:fd:dd:dc:07:e2:2e:3f:84:5c:
42:02:dd:f2:4a:37:69:ff:95:b9:67:e3:12:5e:60:b9:03:fc:
53:aa:41:8b:b4:48:7c:54:d5:f7:2f:62:ca:3e:73:0d:ef:37:
c0:6e:fe:c4:7b:06:94:43:b8:30:25:ea:95:07:cf:85:fc:00:
5f:a1:5a:71:ff:0c:6b:1e:81:67:5c:11:ed:90:98:35:fa:8a:
ac:9f:8a:17:e8:d6:f5:e7:70:31:b9:14:a9:24:eb:d5:ec:13:
fe:c5:01:f0:bc:38:e9:c0:4c:d7:63:a1:33:2a:7d:ec:c7:db:
91:94:24:2a:2f:fd:e0:7c:f1:b6:34:80:db:0e:a7:11:51:8f:
0e:59:e8:e9:48:fb:13:2a:98:57:3c:26:17:80:a4:39:98:85:
45:c2:f8:1f:1c:ba:27:d3:24:f6:bd:c3:b5:7a:af:8d:45:a9:
55:55:14:80:45:0a:62:60:dc:58:4d:1f:7a:0c:3d:45:45:a1:
2e:eb:39:c9:a4:b9:1c:bb:2b:a3:94:d2:de:d3:f9:c4:e6:11:
ea:33:08:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:18:31 2026 by rpki-client