Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS49592.roa
File: AS49592.roa (raw, json)
Hash identifier: j7jdtMJE9aej6WU9MqTg08coKO8vDCCZW9qLC6ZjsIA=
Subject key identifier: 0E:63:BF:AD:AD:5E:E9:59:00:26:B9:8E:5F:AC:EF:30:28:49:1A:0E
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 38B939BB7F79BF0AD9A6DDA627F63081C1A0ADBD
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS49592.roa
Signing time: Fri 25 Sep 2026 17:18:28 +0000
ROA not before: Fri 25 Sep 2026 17:13:28 +0000
ROA not after: Fri 24 Sep 2027 17:18:28 +0000
asID: 49592
IP address blocks: 94.194.84.0/22 maxlen: 24
94.194.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:b9:39:bb:7f:79:bf:0a:d9:a6:dd:a6:27:f6:30:81:c1:a0:ad:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 25 17:13:28 2026 GMT
Not After : Sep 24 17:18:28 2027 GMT
Subject: CN=0E63BFADAD5EE9590026B98E5FACEF3028491A0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:05:40:c0:c8:1d:73:41:68:e4:04:bf:0e:23:
d5:37:cf:96:e8:e6:2e:3b:69:c6:16:b6:21:26:2c:
68:b8:f0:be:24:e5:09:e6:63:79:0c:d6:18:37:12:
47:4c:dc:51:4e:d8:fa:38:ab:67:0c:2b:6c:a1:50:
d4:5e:4c:10:96:23:2a:3a:f3:4b:ce:8c:c0:72:d3:
38:c4:22:bd:87:b0:2f:11:d9:d8:d5:bd:bc:05:7f:
fd:82:62:6e:d5:21:d4:08:fa:03:69:fd:3a:ec:40:
c7:c3:0f:45:08:86:70:1b:6a:7f:4b:7c:a0:d7:e3:
7b:57:31:9c:6d:36:90:c1:da:7a:63:4b:56:68:a0:
d4:4a:a4:a5:75:cc:04:b2:73:f0:97:f1:e0:53:be:
bd:0f:d2:32:26:09:a4:db:62:a9:d2:76:8c:20:fb:
cd:cb:e7:9f:81:a4:88:c3:4f:5f:3b:29:dc:b6:ae:
72:47:37:1c:10:45:85:87:01:27:48:71:cb:89:1a:
9c:17:db:65:ab:43:58:b8:7c:05:31:23:94:77:3e:
df:73:5d:45:cf:b2:f9:8f:76:e3:77:fc:89:b7:6b:
d5:bc:3d:8a:38:67:a4:0b:06:4a:8e:23:c9:10:e2:
ac:ba:00:31:ff:18:d3:ab:5a:fd:51:f3:f0:3e:4c:
b4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:63:BF:AD:AD:5E:E9:59:00:26:B9:8E:5F:AC:EF:30:28:49:1A:0E
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS49592.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.194.84.0/22
94.194.168.0/22
Signature Algorithm: sha256WithRSAEncryption
84:91:f5:b7:b9:9d:d1:3e:da:f5:08:b0:53:0b:0e:16:8f:a7:
13:f6:99:d9:bc:12:68:13:db:35:72:a5:cd:23:0b:d0:8b:49:
0c:b1:25:11:a8:b7:cc:2e:d5:ca:01:e2:bb:dc:9a:81:1a:bb:
e9:b8:9e:f6:b0:56:48:cd:9f:eb:22:ca:7f:bc:e8:9c:0c:71:
ec:7b:b4:bc:0c:33:73:51:36:6d:b9:74:b8:c2:16:b7:35:39:
65:c2:dd:38:dd:68:91:b9:1c:b5:55:eb:be:52:fe:4d:2e:27:
33:2f:05:17:f7:af:48:bd:53:eb:4e:cd:48:0f:bd:07:08:b6:
c3:31:f5:45:2a:44:e8:b7:17:6c:b4:e0:0c:c8:3f:fd:92:bc:
50:ed:c8:7f:1e:04:ef:50:f7:00:35:b8:46:6b:2a:82:fe:39:
e6:a0:9c:95:da:e8:8e:92:25:37:cf:3a:7d:16:d8:4b:f8:6b:
be:69:1c:5e:6d:27:4f:65:b3:3b:81:7c:d1:19:4b:de:17:de:
0a:2d:67:b5:ca:e7:28:ca:d2:0a:34:b2:a3:7b:31:1c:00:43:
f5:67:05:ec:ae:2d:41:ac:d3:06:9e:4d:80:e8:df:24:46:71:
5e:05:fe:f7:a9:3e:fe:12:1d:f8:d5:59:78:d5:3c:66:83:fa:
16:92:70:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 14:54:12 2026 by rpki-client