Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS46829.roa
File: AS46829.roa (raw, json)
Hash identifier: kxwYLSyvEjLkh6KNneNgVQUaEtWlz4FZrtH38hTU7PI=
Subject key identifier: 28:6D:DF:BC:AA:1F:85:FD:CA:FA:25:09:FD:43:78:4F:20:8F:E7:55
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 56AE52F754EF4C9F852627F19FF144C9CF03BF3B
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS46829.roa
Signing time: Mon 06 Apr 2026 06:47:00 +0000
ROA not before: Mon 06 Apr 2026 06:42:00 +0000
ROA not after: Mon 05 Apr 2027 06:47:00 +0000
asID: 46829
IP address blocks: 141.11.50.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ae:52:f7:54:ef:4c:9f:85:26:27:f1:9f:f1:44:c9:cf:03:bf:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Apr 6 06:42:00 2026 GMT
Not After : Apr 5 06:47:00 2027 GMT
Subject: CN=286DDFBCAA1F85FDCAFA2509FD43784F208FE755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f0:47:0a:29:d5:c6:b9:98:2b:3e:b0:31:40:
1c:12:6e:bf:31:6c:d9:16:d5:9f:72:9b:3a:a1:7b:
6d:8d:a3:11:29:94:b6:83:2d:a7:41:0d:5c:2a:da:
3c:ce:7a:65:0e:33:d9:ad:08:27:c7:d4:3a:ef:ea:
49:18:e6:55:79:b4:2e:9a:33:15:c1:34:21:96:54:
12:69:4f:13:2a:c2:31:6a:36:b2:c9:81:24:71:bf:
2c:e0:b2:83:4d:73:59:d3:40:cf:2c:88:08:5c:bf:
13:8e:02:57:21:f4:02:30:eb:9e:a9:d1:9b:8c:25:
e5:4f:f5:df:dc:38:61:dd:bf:0a:05:c7:a1:f0:e7:
10:ba:7a:82:1d:9d:ac:aa:50:48:da:67:54:e1:b1:
42:5e:91:4d:da:c2:5b:98:f2:8d:18:9d:ab:2f:f3:
4e:f0:d1:e0:d5:ce:14:e9:e1:f9:1a:fa:55:de:99:
48:43:af:24:42:a2:29:98:c2:d5:f5:ef:e0:2e:8b:
94:9d:45:23:96:f4:13:61:7a:3b:d7:d9:70:3d:5a:
8a:b7:73:7e:34:2b:14:6d:49:48:ef:c9:6b:7c:fc:
32:8d:c2:7a:e2:4f:28:6a:db:a0:eb:56:54:65:d8:
4b:27:91:02:c5:28:7a:ca:59:d1:9f:4e:aa:30:4a:
e1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6D:DF:BC:AA:1F:85:FD:CA:FA:25:09:FD:43:78:4F:20:8F:E7:55
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS46829.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.50.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:49:ed:2b:f5:b3:96:c2:c9:d7:51:5d:39:95:58:51:42:d4:
bb:b8:90:fe:5d:ee:78:42:4e:20:a7:da:c6:d4:f7:07:33:82:
da:39:14:58:1c:e9:03:93:93:69:ee:12:0b:f9:17:cf:af:06:
fb:60:a9:3c:28:c0:ad:25:0c:51:c1:70:70:0e:d4:ac:25:06:
62:62:cf:23:ad:4f:a3:05:8a:0f:a9:66:fd:bc:c4:b2:54:5d:
4e:d6:0b:d0:d0:14:2f:7a:8b:d7:38:1f:36:92:19:ae:41:f5:
5d:01:3d:89:9b:8c:34:dd:e9:c0:9c:9d:3b:bb:f4:83:4d:c2:
30:47:e4:12:1e:42:4d:cb:d8:b8:be:48:d1:35:e0:23:92:79:
36:5f:7f:d6:b1:1e:4a:cc:c4:2d:3d:83:ed:2c:6f:b1:79:ed:
54:0c:6f:0a:84:94:c9:cd:b7:c8:1e:02:5a:74:d5:e0:8d:b1:
68:41:65:bb:df:24:52:b1:2f:ea:6b:34:85:76:a3:80:4b:82:
1f:7a:f3:2d:d3:e4:2e:dc:e0:7b:92:fc:ce:51:73:10:42:cc:
2a:3c:e3:d3:e8:7b:14:0b:dd:d5:a4:d0:47:0d:33:d3:e1:bd:
54:25:1a:79:fa:8b:dd:ab:c9:5a:24:af:2d:22:4b:23:77:2d:
0d:09:f1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:35:26 2026 by rpki-client