Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3231302e302f32342d3234203d3e203631333137.roa
File: 3139342e3135302e3231302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: VxZfu1utzRv0kh5tE9/89O9Iy7ekq1J3YpakQxAgpl4=
Subject key identifier: CF:0D:94:C2:91:26:58:53:E0:EB:2E:5E:EF:5A:CA:52:82:F6:DC:58
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 4D86F0CAF918EBA112E1FEBFDF66CC8D55B1F9DC
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3231302e302f32342d3234203d3e203631333137.roa
Signing time: Fri 19 Sep 2025 13:55:07 +0000
ROA not before: Fri 19 Sep 2025 13:50:07 +0000
ROA not after: Fri 18 Sep 2026 13:55:07 +0000
asID: 61317
IP address blocks: 194.150.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:18:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:86:f0:ca:f9:18:eb:a1:12:e1:fe:bf:df:66:cc:8d:55:b1:f9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Sep 19 13:50:07 2025 GMT
Not After : Sep 18 13:55:07 2026 GMT
Subject: CN=CF0D94C291265853E0EB2E5EEF5ACA5282F6DC58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e6:32:d1:4a:3a:a1:b2:40:52:bf:eb:bd:86:
e5:44:e4:e0:ea:a1:c5:2c:ad:c2:5d:a3:63:d1:f8:
b4:a4:d2:92:56:f4:d0:ef:dc:42:8c:49:78:a2:ce:
c5:03:6a:b5:c1:ea:29:06:20:12:d4:bf:7f:77:e1:
ed:96:ca:91:77:a3:0c:af:56:73:24:03:33:20:96:
45:81:30:b4:0c:2d:4f:0d:6b:de:64:5d:f7:38:3c:
a4:9a:bd:83:af:95:69:c5:5e:f7:3c:3e:b6:11:2c:
fd:0c:c9:67:52:83:0e:27:f1:93:c4:40:06:1b:05:
f6:2a:43:a5:fe:73:6e:91:35:7a:d1:04:3b:cc:cb:
d5:72:8f:0f:2b:d7:46:c5:8f:ec:0a:ab:ba:1c:d6:
cd:e4:8a:ed:f5:ab:9b:b7:2b:93:1a:3d:04:82:4c:
5f:e8:91:0f:26:fb:9e:9d:3f:b1:f4:f2:ed:0b:8a:
ab:26:b8:c9:b8:8d:84:be:3e:db:54:22:23:82:76:
d5:9f:f7:2f:f5:27:76:07:82:b5:a5:be:a3:92:4a:
76:c7:53:9e:da:f8:60:11:3d:95:12:d9:4a:0f:3f:
a6:6f:fb:74:bf:4e:92:c5:0c:6c:bb:c2:9e:ed:a8:
15:4f:9a:92:d8:23:f4:50:40:da:b8:29:47:bc:f2:
cf:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0D:94:C2:91:26:58:53:E0:EB:2E:5E:EF:5A:CA:52:82:F6:DC:58
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3231302e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.210.0/24
Signature Algorithm: sha256WithRSAEncryption
71:40:45:d9:b8:8c:4e:4e:59:d2:64:cb:6c:17:68:6e:61:d1:
0e:ca:bc:c4:5f:49:b5:df:e4:50:6c:f6:dc:b3:42:8c:c7:76:
cf:78:97:c2:fb:d3:4c:a0:1b:ce:02:2c:c1:94:f1:da:77:4d:
74:7e:7f:bb:62:e8:eb:38:6b:ff:8d:2f:df:bf:63:4e:e1:88:
5f:76:d3:dd:ab:4f:31:90:b2:c6:2e:1e:2e:ae:89:80:ac:c5:
39:c4:e9:b2:ab:61:38:c9:d5:b1:d7:b5:7e:72:78:1e:0b:d7:
ce:c0:80:1b:ce:cc:6e:6e:47:41:0e:2d:26:5b:81:91:be:41:
45:ee:3d:c5:09:5e:90:4e:30:d6:d7:f8:91:0c:92:9c:cd:d1:
10:7c:a4:2c:5f:cc:58:92:6c:ba:ce:61:54:72:56:48:18:08:
75:28:e7:5d:21:5e:fe:d3:40:ac:32:31:ea:68:39:85:68:3d:
fa:83:e3:1e:a9:20:c6:10:f5:56:be:ba:44:8e:92:94:8b:6c:
3f:25:9e:c1:47:c5:5a:07:98:c2:f1:a5:05:dd:68:c8:70:d3:
45:58:7f:9b:50:cc:bd:7b:a1:02:1d:12:b6:ad:65:8e:24:64:
9f:e3:08:bb:05:7c:2c:10:00:ca:63:1a:f3:9a:0a:2f:ec:f7:
6c:8d:8f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:53 2025 by rpki-client