Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS49592.roa
File: AS49592.roa (raw, json)
Hash identifier: ktcMIkUIiHG0hyJ5kA2tg6pnTt8u2aKtejPt0SPwBDE=
Subject key identifier: 44:45:E7:EC:E9:3D:DF:3A:7F:8E:DE:39:7A:5D:C1:A4:83:EE:31:66
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1218467975CC3BB3C0DF8068B8EAA1BE422D087B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS49592.roa
Signing time: Wed 28 Oct 2026 00:01:53 +0000
ROA not before: Tue 27 Oct 2026 23:56:53 +0000
ROA not after: Wed 27 Oct 2027 00:01:53 +0000
asID: 49592
IP address blocks: 94.194.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:24:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:18:46:79:75:cc:3b:b3:c0:df:80:68:b8:ea:a1:be:42:2d:08:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 27 23:56:53 2026 GMT
Not After : Oct 27 00:01:53 2027 GMT
Subject: CN=4445E7ECE93DDF3A7F8EDE397A5DC1A483EE3166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2c:d0:dd:65:ef:04:97:8c:68:d7:e8:e8:70:
1b:a5:fe:77:ea:38:e0:de:ae:2b:81:96:b3:40:42:
62:df:9f:cd:53:97:dc:03:23:03:8a:69:af:76:70:
99:d8:55:8a:7e:b9:08:5b:f7:9b:92:f6:24:75:9b:
66:48:45:74:cb:14:1c:6f:bd:f0:e3:bf:3b:35:3a:
3c:ef:35:14:16:bd:b9:b6:76:cc:ac:65:cd:d2:77:
9f:69:8a:39:8f:da:78:13:ae:cb:d6:84:a3:51:b2:
52:92:3b:0a:42:4d:1c:3a:22:68:fe:bc:f8:93:5f:
ff:39:87:d8:3a:6a:92:d2:65:64:e7:95:6c:f7:21:
22:26:a9:62:bd:df:24:00:59:18:51:e1:f6:b6:b3:
64:78:d7:3a:80:4e:34:88:0b:e2:57:a8:fb:61:16:
50:25:b5:b2:2d:fe:0d:6f:d8:b6:02:ce:0e:5f:c9:
ec:ad:a1:64:6c:04:62:22:0f:c0:17:bb:93:43:7a:
42:a8:fb:37:e2:21:6c:93:fb:e7:b8:6b:bb:e6:45:
c6:a0:3a:27:6d:10:0a:39:c2:f8:94:36:44:ae:27:
21:62:bc:fb:73:f5:97:e9:24:62:98:3b:44:70:d6:
66:d6:d0:8c:cb:ac:ed:4a:9d:83:78:eb:47:c5:ea:
6b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:45:E7:EC:E9:3D:DF:3A:7F:8E:DE:39:7A:5D:C1:A4:83:EE:31:66
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS49592.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.194.84.0/22
Signature Algorithm: sha256WithRSAEncryption
33:f9:08:4a:c5:28:66:37:c9:b9:7c:4d:7d:62:7f:c9:0b:71:
61:73:a0:5a:47:d6:7a:53:c5:8b:b0:51:54:76:85:f5:ac:7f:
df:66:4c:81:63:a4:ca:8f:15:5f:20:32:98:0c:66:68:dc:c1:
7c:1a:83:93:e3:dc:17:ac:b5:8b:0f:0b:72:79:fd:17:43:f3:
bc:34:d6:07:00:b3:4b:ef:07:f1:5b:86:db:b7:b9:9a:1a:29:
ef:83:ed:fa:69:96:a4:cc:60:ee:ec:e8:9b:ec:f7:45:76:58:
72:4d:e5:94:94:fa:f0:80:db:63:14:c6:a3:52:0d:4d:6b:91:
ad:d3:04:e0:db:16:7f:92:e8:23:a5:44:3f:1c:c7:e3:b5:f7:
f1:e8:db:e9:f0:ab:5d:5f:31:4c:bb:0c:e6:ef:d2:09:2b:d6:
b5:a9:f3:88:e6:8c:12:ab:26:70:c6:1c:2b:c9:8b:33:ce:a7:
f8:f2:2e:57:55:39:83:57:91:06:f5:8f:66:90:6b:7b:5f:e8:
53:bf:fa:05:d7:e4:46:d3:1b:35:83:fd:81:1f:b4:bc:74:8d:
19:fa:d8:6a:cf:78:6a:c4:11:70:0b:c3:8d:2b:cb:a8:34:b4:
b7:be:ae:df:3c:fa:8e:b1:c3:9e:8c:b9:36:bd:28:11:c6:66:
ca:ef:b0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:14:57 2026 by rpki-client