Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3232332e302f32342d3234203d3e203631333137.roa
File: 3139342e35302e3232332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: ASy8/Gr51IEdAokvDQclHjaAKZd0qyC1A9TmoFPbj9c=
Subject key identifier: B9:B1:3F:9C:AC:53:83:2B:24:D1:86:12:B6:3D:69:A3:29:A7:E1:A9
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 504B3ADDBFE6B5241DFB5F15F5311BDC8EDC37F8
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3232332e302f32342d3234203d3e203631333137.roa
Signing time: Wed 23 Sep 2026 08:49:35 +0000
ROA not before: Wed 23 Sep 2026 08:44:35 +0000
ROA not after: Wed 22 Sep 2027 08:49:35 +0000
asID: 61317
IP address blocks: 194.50.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:4b:3a:dd:bf:e6:b5:24:1d:fb:5f:15:f5:31:1b:dc:8e:dc:37:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Sep 23 08:44:35 2026 GMT
Not After : Sep 22 08:49:35 2027 GMT
Subject: CN=B9B13F9CAC53832B24D18612B63D69A329A7E1A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:b5:dd:29:a4:72:66:50:9e:44:92:36:44:
f7:8f:8f:cc:58:d4:f4:fe:8f:dc:3a:b9:69:c6:15:
87:e1:d2:63:e4:47:26:51:43:58:47:7d:d2:1d:69:
d6:72:42:9d:42:8a:f3:a0:46:3e:2c:3e:dd:a3:0a:
8f:cc:0e:36:c0:ee:48:dc:50:6e:4f:25:15:9d:75:
fc:4c:21:6a:0d:33:b2:a4:62:55:a7:27:02:09:c2:
46:8c:82:03:ee:cc:06:15:6f:87:a6:c3:15:2e:79:
cf:d8:38:b0:20:21:16:e7:94:11:0a:38:8b:5a:d4:
4f:7b:c8:7c:c9:c5:0b:92:f5:18:3f:49:57:5c:b1:
83:45:87:cc:37:4e:fd:8f:ae:44:18:2a:8e:25:ba:
a3:b6:c4:82:74:7d:1f:db:53:55:2c:c1:36:ad:0d:
b6:bf:bd:ba:c5:23:f0:84:98:32:f3:eb:4f:97:d3:
b5:77:d0:d2:6d:9a:31:b3:74:bc:29:9b:17:1f:77:
57:74:f5:54:f3:36:2a:a0:ca:e0:3c:2d:32:87:c7:
00:f6:8b:7e:39:7f:9b:19:4f:5d:2d:03:fe:d0:1e:
e9:c3:8d:0e:c9:bb:77:2c:7c:71:a1:e6:3f:87:b2:
a5:1e:95:23:ef:e3:f9:06:67:31:07:a5:13:f0:e4:
a3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B1:3F:9C:AC:53:83:2B:24:D1:86:12:B6:3D:69:A3:29:A7:E1:A9
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3232332e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.223.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:20:18:c7:54:61:90:13:cc:2c:4d:a5:82:fb:d9:93:83:03:
c4:5f:a6:f1:65:e9:2b:f1:d7:64:de:83:4e:f5:83:1d:b2:38:
7d:c7:d9:b1:2b:f0:ba:81:67:6b:c7:e3:35:a9:bd:d0:61:03:
c1:05:ef:96:88:8f:7a:9b:ac:4c:14:fa:13:ed:6c:90:c0:13:
15:98:c9:5b:26:44:de:25:71:fd:85:d6:94:a4:ca:60:26:dc:
60:cf:bc:4d:7e:d7:ac:e8:00:89:a0:89:11:8e:b1:b2:e6:91:
36:23:32:78:fe:b8:ca:20:f1:f3:a9:2a:ac:9d:32:05:8c:0c:
d8:89:5f:6d:51:e5:83:4c:6f:0a:55:fa:8c:a7:7c:d2:1a:50:
c4:c6:46:e4:fc:20:f1:9d:0d:da:43:9a:b7:cf:f5:ea:52:f0:
61:f0:be:26:76:9b:a5:04:99:5c:3c:62:3f:d9:9b:ee:72:a8:
5a:44:0d:fb:76:aa:5c:aa:ea:67:88:95:bd:2e:7c:5e:4f:4b:
a9:9f:79:fc:5e:4d:b6:c7:9b:00:df:7a:38:87:78:19:fe:34:
98:d5:1a:21:f9:38:61:53:8f:4b:b0:4c:b5:70:b3:ab:b0:df:
dc:53:3f:86:74:f8:c0:29:4a:4c:6d:56:62:96:a0:18:56:e8:
19:8e:c2:e3
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUUEs63b/mtSQd+18V9TEb3I7cN/gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJmYmQyY2MwMDEyZmIyZjg2ZGI0MGI1ODliZDFhYzRl
OTczMjY2ZDAeFw0yNjA5MjMwODQ0MzVaFw0yNzA5MjIwODQ5MzVaMDMxMTAvBgNV
BAMTKEI5QjEzRjlDQUM1MzgzMkIyNEQxODYxMkI2M0Q2OUEzMjlBN0UxQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClsLXdKaRyZlCeRJI2RPePj8xY
1PT+j9w6uWnGFYfh0mPkRyZRQ1hHfdIdadZyQp1CivOgRj4sPt2jCo/MDjbA7kjc
UG5PJRWddfxMIWoNM7KkYlWnJwIJwkaMggPuzAYVb4emwxUuec/YOLAgIRbnlBEK
OIta1E97yHzJxQuS9Rg/SVdcsYNFh8w3Tv2PrkQYKo4luqO2xIJ0fR/bU1UswTat
Dba/vbrFI/CEmDLz60+X07V30NJtmjGzdLwpmxcfd1d09VTzNiqgyuA8LTKHxwD2
i345f5sZT10tA/7QHunDjQ7Ju3csfHGh5j+HsqUelSPv4/kGZzEHpRPw5KNrAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUubE/nKxTgysk0YYStj1poymn4akwHwYDVR0j
BBgwFoAUYvvSzAAS+y+G20C1ib0axOlzJm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAtYWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4
MzYyLzAvNjJGQkQyQ0MwMDEyRkIyRjg2REI0MEI1ODlCRDFBQzRFOTczMjY2RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l2dlN6QUFTLXktRzIwQzFpYjBheE9s
ekptMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAt
YWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4MzYyLzAvMzEzOTM0MmUzNTMwMmUzMjMy
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
wjLfMA0GCSqGSIb3DQEBCwUAA4IBAQA9IBjHVGGQE8wsTaWC+9mTgwPEX6bxZekr
8ddk3oNO9YMdsjh9x9mxK/C6gWdrx+M1qb3QYQPBBe+WiI96m6xMFPoT7WyQwBMV
mMlbJkTeJXH9hdaUpMpgJtxgz7xNftes6ACJoIkRjrGy5pE2IzJ4/rjKIPHzqSqs
nTIFjAzYiV9tUeWDTG8KVfqMp3zSGlDExkbk/CDxnQ3aQ5q3z/XqUvBh8L4mdpul
BJlcPGI/2ZvucqhaRA37dqpcqupniJW9LnxeT0upn3n8Xk22x5sA33o4h3gZ/jSY
1Roh+ThhU49LsEy1cLOrsN/cUz+GdPjAKUpMbVZilqAYVugZjsLj
-----END CERTIFICATE-----
Generated at Fri Sep 25 09:13:17 2026 by rpki-client