Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3232342e302f32342d3234203d3e203631333137.roa
File: 3139342e35302e3232342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: YMV7lmoLLDgqXeLXz7LDJjKMAVAddKYUHyn18IdfuUk=
Subject key identifier: 6F:4A:DD:A8:E4:A5:DA:28:B5:3C:C6:A8:91:5B:3C:48:60:49:C4:81
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 2819076E5B9F23EFE9A556786448AEFC117368BC
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3232342e302f32342d3234203d3e203631333137.roa
Signing time: Wed 23 Sep 2026 08:49:35 +0000
ROA not before: Wed 23 Sep 2026 08:44:35 +0000
ROA not after: Wed 22 Sep 2027 08:49:35 +0000
asID: 61317
IP address blocks: 194.50.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:42:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:19:07:6e:5b:9f:23:ef:e9:a5:56:78:64:48:ae:fc:11:73:68:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Sep 23 08:44:35 2026 GMT
Not After : Sep 22 08:49:35 2027 GMT
Subject: CN=6F4ADDA8E4A5DA28B53CC6A8915B3C486049C481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:30:54:35:1b:33:94:40:3a:8a:53:a0:c9:9e:
9f:42:e8:6d:8a:ab:47:de:2c:68:c5:4c:f2:8d:ec:
4c:fa:03:15:cc:11:e7:05:6e:7a:43:06:90:e8:69:
2a:42:23:5b:85:55:60:f9:a3:1d:9f:ea:81:25:be:
77:29:56:28:3c:7d:fe:b2:45:92:94:c1:2f:00:9a:
10:50:7c:ed:fe:a1:04:3d:a6:9b:39:05:fe:c6:cc:
0e:2f:53:2d:fb:f4:af:ef:dd:bd:9d:e0:3f:80:90:
1a:20:07:91:f4:f6:68:aa:4c:79:57:0a:ea:26:55:
c8:65:dc:93:08:3e:3c:23:77:58:84:ca:82:81:89:
d8:1e:f7:e5:c3:f3:a8:c3:ef:f3:a9:9e:51:83:be:
b2:35:8c:5d:38:a1:e5:89:61:ba:16:15:44:9a:60:
43:c2:1e:81:32:ec:d9:b3:c7:93:17:25:69:3e:15:
6d:8b:a1:26:72:02:d5:0b:ee:63:dd:05:e4:99:b1:
70:5e:41:8e:4f:35:c5:02:1f:00:e0:68:28:b7:4c:
1b:64:99:77:79:fe:b3:54:f6:23:ce:0e:08:9d:e8:
0e:54:0c:55:85:53:b0:3d:78:32:4d:b1:fa:20:1f:
6d:c4:91:9b:97:84:84:58:e5:ce:fc:35:ab:a1:f1:
4f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4A:DD:A8:E4:A5:DA:28:B5:3C:C6:A8:91:5B:3C:48:60:49:C4:81
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3232342e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.224.0/24
Signature Algorithm: sha256WithRSAEncryption
72:01:45:9e:91:d0:c3:d9:9b:88:5f:cd:51:e3:cc:5e:d7:a9:
81:dd:e5:c0:54:8f:3c:40:14:da:f8:5f:d4:8b:ff:ca:54:aa:
80:b2:bd:e4:90:16:47:5a:dc:a2:68:76:2d:41:94:05:81:37:
69:06:51:1a:e8:f4:33:2b:51:eb:43:d6:52:af:4c:8d:8e:4d:
47:4c:39:a5:ac:f5:fb:27:61:87:ca:85:63:ff:22:2b:e7:23:
a3:51:42:12:21:7c:81:b9:ee:1e:e6:75:fb:c7:fa:2d:9d:39:
28:45:08:3d:d9:18:5c:81:b7:c8:81:62:b8:c7:5f:a1:c5:32:
72:2a:fd:67:45:42:70:ec:4f:54:d5:9c:0a:68:ab:99:37:11:
d4:c9:e0:7e:f9:9d:0f:e2:38:e2:3b:09:a2:c8:44:5f:9a:cb:
d4:0c:1b:f5:8b:52:b7:d1:e0:12:ff:69:99:d9:43:d9:9e:11:
24:d8:8a:16:1e:57:64:0e:81:30:1c:c5:62:0e:91:ca:bb:81:
6c:a6:26:03:86:69:0d:25:07:f8:8f:7d:5f:e1:62:e9:31:e9:
8a:db:3e:1a:01:54:17:6c:58:d6:af:ed:8d:11:e6:ee:0a:29:
56:17:bc:21:9d:f7:ed:78:aa:de:ea:d3:4d:c7:f8:d9:28:91:
42:88:2c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:48:32 2026 by rpki-client