Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3230352e302f32342d3234203d3e20333939363431.roa
File: 3139342e3135302e3230352e302f32342d3234203d3e20333939363431.roa (raw, json)
Hash identifier: nZdJFcLx8lqA+xI/mNqH+qrUyFUGDPhelxeREKpNptU=
Subject key identifier: 4D:25:20:A8:D2:9A:DA:D4:5B:D2:A0:AC:56:49:C4:6E:02:95:D9:7F
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 791FF0B988EBB4684335708338965522DAC21045
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3230352e302f32342d3234203d3e20333939363431.roa
Signing time: Fri 07 Aug 2026 21:49:21 +0000
ROA not before: Fri 07 Aug 2026 21:44:21 +0000
ROA not after: Fri 06 Aug 2027 21:49:21 +0000
asID: 399641
IP address blocks: 194.150.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 02:23:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:1f:f0:b9:88:eb:b4:68:43:35:70:83:38:96:55:22:da:c2:10:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Aug 7 21:44:21 2026 GMT
Not After : Aug 6 21:49:21 2027 GMT
Subject: CN=4D2520A8D29ADAD45BD2A0AC5649C46E0295D97F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:df:67:67:47:a0:bc:df:9a:a9:1e:a0:03:a3:
d6:de:5b:e1:9f:af:f5:73:02:91:78:1c:44:c4:cb:
49:fc:7e:59:5f:2b:bc:08:24:15:7c:56:5e:be:a6:
49:e8:9d:87:72:c2:92:69:ad:3e:5b:ad:53:e0:67:
59:b8:44:d4:1f:be:0a:dc:a9:07:ec:e7:af:2b:1c:
21:8a:c8:d9:cc:cf:54:93:fb:2c:25:06:5d:b3:30:
87:3c:da:9d:91:fa:8b:29:ef:5a:ae:98:53:bf:6e:
56:ad:65:e8:08:bb:59:72:b7:1e:1e:48:52:23:e2:
a4:01:50:b4:80:11:37:7d:8e:bc:b9:69:0b:3c:0b:
11:b9:a0:2b:3b:98:30:a0:06:5d:2f:74:e6:50:00:
8e:8b:50:56:6c:c0:86:d8:7a:18:34:49:9d:2e:99:
71:92:c3:0e:51:fb:43:57:4e:24:2b:5e:bb:7c:fd:
b3:52:71:5c:81:0e:a8:f6:95:b9:5a:39:49:cf:64:
ae:e4:de:2a:f0:2f:28:6e:23:87:a6:21:55:e8:5a:
62:db:40:b8:b9:e9:99:c9:1e:a7:29:bf:57:40:c8:
0f:86:4b:76:78:3b:e8:53:63:a6:9c:1c:64:8b:41:
c0:31:8a:dd:d4:e4:fa:43:a2:5f:43:7c:aa:d9:9e:
ff:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:25:20:A8:D2:9A:DA:D4:5B:D2:A0:AC:56:49:C4:6E:02:95:D9:7F
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3230352e302f32342d3234203d3e20333939363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.205.0/24
Signature Algorithm: sha256WithRSAEncryption
af:af:b4:54:69:49:4b:06:80:4c:c1:df:f5:00:a7:55:5d:da:
43:85:03:9e:43:a7:6b:14:61:0c:db:98:fc:57:ff:91:d7:1f:
b2:7c:8a:ed:50:30:0d:b6:fc:32:b1:a3:a2:63:18:0a:52:c9:
87:7b:16:44:58:29:13:af:95:a6:e4:07:2e:34:7e:b4:9f:b7:
42:d2:4a:8e:2b:93:49:f3:c9:a0:84:be:ae:4b:d4:bd:14:4a:
ad:21:c0:83:24:d1:28:67:30:5f:85:7a:55:ae:ff:84:e3:9a:
f2:03:f4:6e:a6:46:f2:64:30:6a:b8:93:2b:29:32:26:51:68:
75:ce:6e:5a:a1:a0:5c:57:d2:7e:84:90:f3:bd:2b:a8:0a:60:
39:6d:b4:6d:1c:1d:db:3c:64:a3:6b:1a:df:de:f9:ab:76:e9:
5d:01:56:0e:eb:29:48:66:7b:48:17:5c:ad:93:dd:bb:13:26:
87:d7:62:22:32:57:3e:16:f5:4f:8a:b0:69:99:74:3d:f0:46:
3e:9a:96:41:fc:b0:65:bd:98:9f:13:ae:a2:20:b3:95:7b:f7:
91:70:96:fb:b5:ee:9b:48:b6:dc:6d:c1:34:4b:4a:7a:0d:98:
a0:81:88:32:ce:71:3b:a0:28:a4:17:e5:2e:0f:45:ed:a5:b7:
bf:f7:56:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:04:49 2026 by rpki-client