Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3233332e302f32342d3234203d3e2039303039.roa
File: 3139342e35302e3233332e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: 7oeItVUltFTl9x8F2oELEpXxlT4Ux6d7B3t/9/gc2Hk=
Subject key identifier: 09:67:E7:28:B4:88:77:17:A7:4C:28:38:A7:89:9E:A6:9A:D6:2D:B7
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 77C133CE1BA1046311A430E065141FE3A54E9190
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3233332e302f32342d3234203d3e2039303039.roa
Signing time: Wed 23 Sep 2026 08:49:35 +0000
ROA not before: Wed 23 Sep 2026 08:44:35 +0000
ROA not after: Wed 22 Sep 2027 08:49:35 +0000
asID: 9009
IP address blocks: 194.50.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:c1:33:ce:1b:a1:04:63:11:a4:30:e0:65:14:1f:e3:a5:4e:91:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Sep 23 08:44:35 2026 GMT
Not After : Sep 22 08:49:35 2027 GMT
Subject: CN=0967E728B4887717A74C2838A7899EA69AD62DB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:bc:50:01:78:69:9d:95:1f:5f:02:7d:d3:20:
fd:d4:c2:10:b5:fc:ad:84:6e:30:58:27:88:a6:df:
81:45:f1:0e:4a:18:52:0c:dd:5b:a4:2e:c1:48:47:
e8:e7:68:37:33:39:8c:6d:26:81:20:d2:fd:b2:fe:
69:76:20:3e:46:42:1c:3c:0f:11:d3:f6:55:65:9a:
89:2e:01:e3:fc:6e:01:70:16:be:d6:db:d1:65:63:
00:47:35:76:cb:6f:9a:a6:a2:cb:6f:48:13:3f:6f:
a9:90:d5:35:ef:da:67:8f:4b:83:75:9a:3f:5c:17:
5c:2a:ae:76:2e:30:40:e7:04:6e:57:9a:c8:49:50:
18:35:8c:eb:f3:fc:ae:5e:be:7f:a9:52:e0:72:da:
d5:6b:62:f0:ed:b4:7a:93:d2:30:26:b3:b8:35:8b:
af:5f:96:3e:68:5c:b7:0e:69:d0:bc:0d:03:4f:b5:
03:ae:7b:8f:f7:ee:40:4b:18:77:f2:67:67:6e:fc:
d8:a3:a5:39:66:78:a5:2d:69:df:25:52:c4:f8:fe:
0b:cd:d4:0f:d6:f9:2c:26:46:a9:15:84:78:30:5a:
fb:91:e0:64:f8:ee:3a:9b:f1:01:19:a9:dd:c0:5f:
b1:9f:56:c2:55:36:68:9e:88:4b:c8:88:10:8f:ae:
a1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:67:E7:28:B4:88:77:17:A7:4C:28:38:A7:89:9E:A6:9A:D6:2D:B7
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3233332e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.233.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:1a:4c:cc:51:79:7f:d1:d5:e2:63:96:08:48:c4:41:05:dd:
f5:c5:a2:27:b3:42:93:7c:30:f0:86:4d:82:e0:87:b7:22:1f:
91:d1:ae:54:e7:d9:ba:1a:38:55:df:a9:69:94:8c:2d:9c:11:
24:90:27:af:a7:33:70:3c:b3:ff:55:05:38:40:d4:bf:43:e2:
77:a3:32:85:08:bd:84:d0:ef:f6:44:ba:09:d6:c6:fc:35:80:
c8:08:10:c1:a0:36:5e:01:1c:12:12:b0:bf:eb:49:c8:43:c9:
3c:3e:30:ec:41:54:e5:69:2b:1f:c9:a3:35:23:4e:94:0b:2c:
10:65:6a:76:25:44:18:b1:71:c1:a3:6c:3d:f0:4e:29:1b:76:
06:05:e1:65:b8:cc:55:29:c2:ab:dc:4d:36:b9:c1:06:59:72:
11:e6:c5:68:ac:d5:9b:57:10:7e:9c:56:0d:cf:31:8b:1a:85:
c2:ba:57:bb:79:ac:c1:5a:ce:ea:b0:03:1b:49:0d:56:4e:81:
b2:92:6b:3d:34:f2:3e:ca:fb:b0:23:03:17:51:5b:a6:8d:7d:
53:8c:79:ed:85:16:79:33:ee:85:50:6a:8e:bb:b7:f6:de:bd:
5c:80:e6:63:aa:37:cb:93:1c:72:c3:77:05:0d:84:85:7e:3d:
ae:df:9c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:52:27 2026 by rpki-client