Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS49981.roa
File: AS49981.roa (raw, json)
Hash identifier: ZYcRrfKU51BaWKxc9Rgv34YS7cnkEj+6/q/OvbMytus=
Subject key identifier: A8:DF:22:F9:89:D9:02:7C:D7:54:70:19:95:A6:0D:F4:46:41:4B:93
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0FF467FCFA03E3FFE650C68335E6990D0E73CDFA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS49981.roa
Signing time: Sat 14 Nov 2026 00:02:21 +0000
ROA not before: Fri 13 Nov 2026 23:57:21 +0000
ROA not after: Sat 13 Nov 2027 00:02:21 +0000
asID: 49981
IP address blocks: 82.25.43.0/24 maxlen: 24
82.29.108.0/24 maxlen: 24
82.39.154.0/24 maxlen: 24
82.41.131.0/24 maxlen: 24
2a13:9500:ac::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:f4:67:fc:fa:03:e3:ff:e6:50:c6:83:35:e6:99:0d:0e:73:cd:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 13 23:57:21 2026 GMT
Not After : Nov 13 00:02:21 2027 GMT
Subject: CN=A8DF22F989D9027CD754701995A60DF446414B93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4d:0a:97:de:2a:fd:8b:2b:98:ad:6c:ac:ab:
df:09:1e:5c:53:cb:ed:30:6e:ad:38:af:d9:3d:27:
6b:e7:1d:17:71:9a:0c:8a:aa:64:61:36:3f:cf:63:
41:96:a0:3b:42:24:de:7e:0c:44:45:b2:5c:f5:aa:
29:7e:c3:0e:dd:8c:f3:4c:4b:19:50:f3:a9:22:c4:
7f:93:69:b8:b1:bb:bb:d5:33:d3:14:1c:e6:d5:3c:
d8:31:ba:a1:73:d2:5d:83:aa:0f:00:51:49:84:ad:
2c:a4:03:e8:bf:0d:4e:5b:b1:69:c1:71:a5:88:3e:
c2:ca:a8:4a:84:f4:54:bf:2f:65:11:a6:cb:94:08:
e6:10:27:30:88:3a:1e:bb:e4:0d:f3:b6:58:50:52:
64:bf:ea:fe:d1:7e:8f:99:93:17:be:57:7b:d7:16:
d0:6e:62:5b:1f:cc:e5:b2:dc:fd:94:6f:78:2e:cd:
36:86:40:a9:37:30:ae:9e:4e:bf:30:1e:f3:8b:9c:
26:09:d0:e7:b6:e5:1f:ff:2a:22:9f:6d:20:02:50:
b3:c0:72:61:6c:2a:9f:e5:a3:79:85:32:71:a3:18:
14:74:b8:ad:b8:4c:7c:16:e3:22:cb:8e:4e:32:c0:
50:0b:d8:9c:10:f3:98:1a:3e:90:dd:3c:69:ee:c2:
cb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DF:22:F9:89:D9:02:7C:D7:54:70:19:95:A6:0D:F4:46:41:4B:93
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS49981.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.43.0/24
82.29.108.0/24
82.39.154.0/24
82.41.131.0/24
IPv6:
2a13:9500:ac::/48
Signature Algorithm: sha256WithRSAEncryption
2b:11:33:10:16:c3:bc:4b:be:a8:bc:e5:58:ce:75:9a:9b:2e:
e0:67:3a:4f:4a:88:04:b3:33:9c:c0:39:9b:81:3b:0a:b1:ef:
50:c0:f7:30:59:48:f2:b6:05:27:9a:f7:02:b7:fe:36:79:e0:
5e:89:cc:d8:81:e1:a5:42:dc:19:60:ad:22:92:24:07:41:76:
1f:c1:36:a6:37:06:2a:c0:48:9f:6f:ce:61:ed:b3:cb:8f:90:
38:d5:3e:59:af:25:8b:b5:0e:29:9b:75:e5:b3:a5:9d:91:39:
17:a3:4f:60:04:a3:12:61:e6:1d:2b:44:fc:ad:02:3e:e5:20:
18:9a:c3:c7:c7:9f:14:7b:69:86:32:44:78:02:20:72:70:a7:
b1:1b:06:5e:fb:97:9f:7a:d4:05:59:2c:bb:20:af:4c:16:c4:
c2:9d:62:7d:8a:dd:dc:68:67:1a:5d:8e:cd:1f:9a:81:02:a9:
61:96:f8:56:90:42:b9:b9:b1:08:32:c6:6a:9b:4e:86:5e:ff:
9d:5e:0d:3a:01:ba:a3:ea:90:7f:7a:4b:c4:94:da:41:55:3d:
74:93:b7:94:c6:ca:17:5b:6f:c0:c4:7c:7a:aa:44:c0:b8:d6:
4e:a1:b7:6d:0d:d0:d0:1c:a3:b8:2d:90:30:2d:a2:db:5c:04:
8f:43:14:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:31:37 2026 by rpki-client