Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3233332e302f32342d3234203d3e203535323836.roa
File: 3139342e35302e3233332e302f32342d3234203d3e203535323836.roa (raw, json)
Hash identifier: Cyplz/yGvJiNaYaGOpIMmVAgK7YvywzxyEE3GRN/jac=
Subject key identifier: 71:6E:16:12:6F:8D:DF:F2:8A:19:9F:61:B6:EC:8B:07:20:AD:85:3B
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 6AE73983D8EC9CE94278E5E0503BA1FED37D5E3E
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3233332e302f32342d3234203d3e203535323836.roa
Signing time: Wed 23 Sep 2026 08:49:35 +0000
ROA not before: Wed 23 Sep 2026 08:44:35 +0000
ROA not after: Wed 22 Sep 2027 08:49:35 +0000
asID: 55286
IP address blocks: 194.50.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:e7:39:83:d8:ec:9c:e9:42:78:e5:e0:50:3b:a1:fe:d3:7d:5e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Sep 23 08:44:35 2026 GMT
Not After : Sep 22 08:49:35 2027 GMT
Subject: CN=716E16126F8DDFF28A199F61B6EC8B0720AD853B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:95:26:ef:e1:89:7e:d0:80:ad:f4:6b:ec:db:
ba:aa:fe:a4:97:49:7e:c1:c9:b5:dc:45:06:ac:31:
3c:96:c2:0b:19:56:0d:05:7a:12:ba:77:5d:bb:5c:
c2:73:f3:7e:59:5d:e6:fb:4f:36:f8:3e:c5:e2:75:
9c:a1:81:cf:f1:f6:68:a1:1f:6b:0a:a2:d7:c7:65:
5c:7a:45:ad:eb:6a:60:47:a0:ae:cf:0a:1c:9f:f0:
0b:72:ee:e1:a6:76:0b:6f:86:d6:48:42:a5:fb:a7:
c2:70:f9:b6:5c:e3:d5:30:10:52:7e:1a:1a:1c:5a:
1d:05:ef:63:af:eb:8b:35:c3:c8:1c:1b:bb:c5:17:
d1:e0:41:91:c4:f2:39:8c:b8:a5:37:d2:89:46:49:
47:82:da:8a:d1:8c:e5:95:38:9c:2d:4c:5b:3d:b8:
d0:28:78:9b:97:74:dd:d0:cd:84:d7:44:2a:ca:1d:
23:37:b9:c1:14:a6:de:2d:2e:61:12:0c:44:67:d0:
0c:23:26:00:d9:df:84:f0:47:89:40:9e:fc:e7:ee:
3e:79:4f:43:0d:ee:23:f4:d1:3c:41:1b:33:f0:3f:
c3:74:73:26:33:78:9d:dc:3c:b0:2a:5b:fc:3f:12:
eb:48:7c:82:49:3a:78:39:59:c6:43:93:51:9b:fd:
ab:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6E:16:12:6F:8D:DF:F2:8A:19:9F:61:B6:EC:8B:07:20:AD:85:3B
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3233332e302f32342d3234203d3e203535323836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.233.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:54:89:db:c9:3a:99:5d:13:d6:4e:fc:f8:a4:5b:86:e9:36:
6d:89:3a:de:25:f2:8c:e9:64:76:f0:de:77:07:b5:c6:37:5b:
a1:24:c1:aa:e9:63:e5:af:3b:3e:7a:00:1b:31:89:45:cb:cb:
f8:5c:a8:6b:f9:ad:cc:dd:be:fc:ef:9e:76:cf:84:66:42:89:
df:6f:76:3f:de:3d:e0:e6:55:2c:c5:0a:d5:96:a2:bf:b9:3e:
7d:00:c4:a8:49:05:9b:52:70:ee:76:66:03:e8:70:8c:2f:08:
4a:ff:26:9b:26:7c:94:e4:cf:91:f7:a0:9b:29:1e:97:0b:67:
7f:c0:2c:ef:51:a0:e8:88:cf:04:37:61:96:0d:bd:de:f7:d1:
38:7d:e4:14:d9:f5:a7:8a:2a:d1:39:87:a9:8d:b0:d1:2d:0c:
b8:5b:42:13:33:21:95:99:d8:4f:7c:58:63:7d:b5:7e:3a:cd:
0e:60:99:85:19:5f:9b:4f:2e:ef:7b:e7:f7:1b:80:b9:eb:60:
1b:be:ed:62:86:17:69:0c:dd:a6:99:27:2d:e3:bb:dc:c4:45:
37:fc:52:39:60:ea:8c:6a:97:09:e6:fe:e9:75:75:25:26:cf:
4a:98:f9:7f:e5:72:aa:f9:da:63:f2:c8:8f:9a:0d:14:b4:a0:
51:b9:c4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:05:05 2026 by rpki-client