Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3231302e302f32342d3234203d3e20313432323430.roa
File: 3139342e3135302e3231302e302f32342d3234203d3e20313432323430.roa (raw, json)
Hash identifier: V6r5PA4IHg0Due9YK12JKmzYbfCK75lMGTuGxku5TMk=
Subject key identifier: 19:86:6D:4C:66:5B:29:81:23:5F:C2:90:F8:FA:0D:55:1A:A7:54:18
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 6BBD43AC4A83265658FFB8623430F8483C22C5B4
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3231302e302f32342d3234203d3e20313432323430.roa
Signing time: Tue 11 Aug 2026 08:37:30 +0000
ROA not before: Tue 11 Aug 2026 08:32:30 +0000
ROA not after: Tue 10 Aug 2027 08:37:30 +0000
asID: 142240
IP address blocks: 194.150.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:bd:43:ac:4a:83:26:56:58:ff:b8:62:34:30:f8:48:3c:22:c5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Aug 11 08:32:30 2026 GMT
Not After : Aug 10 08:37:30 2027 GMT
Subject: CN=19866D4C665B2981235FC290F8FA0D551AA75418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f1:b6:b6:6a:9b:fe:94:80:62:a2:64:7f:a6:
ce:47:ed:c8:2e:99:dd:eb:5b:5f:a9:cf:7d:d1:2a:
5b:29:f2:6a:0c:0d:d9:e3:e3:3b:18:fc:ef:61:6c:
c2:6d:84:a0:7d:f8:a3:32:e3:4e:4c:ad:b3:a8:7d:
b8:ba:d9:da:fc:9b:0e:4e:48:d3:88:69:dc:7f:f5:
23:41:cd:01:44:cc:d7:d7:e2:02:32:d6:a8:5a:fe:
e3:6f:4d:ac:88:1f:a4:9c:bc:94:25:36:e0:d0:31:
6f:29:fa:00:da:ed:4f:c9:2d:69:13:01:8e:10:8d:
80:b3:7f:7e:10:7b:d9:5d:03:fb:24:e1:a5:84:d9:
ae:e9:21:6d:d3:14:82:3f:fe:a9:fe:a3:0a:f5:21:
0b:8c:a4:44:5c:ec:69:67:ba:4a:9d:29:b5:51:29:
18:b1:4e:56:94:8b:13:f7:94:0d:f0:13:61:c6:c3:
64:24:9f:48:f7:d3:c4:aa:c2:4e:71:03:8d:a3:3c:
26:ba:6a:d6:cc:77:13:c0:e2:ca:76:10:f9:3c:fe:
09:bf:43:d8:f6:ff:5d:c7:37:17:f0:be:45:67:e2:
40:9d:73:d7:09:28:e7:c2:b5:1d:5f:f6:97:d2:ff:
94:a0:da:90:d8:8b:0f:ab:57:e4:3f:40:62:1f:ed:
f4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:86:6D:4C:66:5B:29:81:23:5F:C2:90:F8:FA:0D:55:1A:A7:54:18
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3231302e302f32342d3234203d3e20313432323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.210.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:4d:51:85:cd:c5:82:32:fb:b1:95:a7:d2:04:e8:cd:29:d9:
c3:3d:02:0e:90:37:ab:d2:4e:df:df:fe:e8:45:3c:13:af:95:
ae:93:a1:59:77:32:eb:3b:4a:01:a1:cb:fc:5d:1c:ed:fb:2d:
0c:c9:3b:ae:73:4f:2d:63:79:45:d4:be:be:2d:93:4d:20:bf:
eb:22:8f:5b:96:7d:f0:a2:7c:d7:6e:73:fc:ba:db:67:60:93:
6b:40:2b:a5:1a:69:14:86:c7:92:89:29:b8:1c:cd:33:7d:ef:
0c:72:ab:8a:77:8e:ac:90:db:79:9c:98:ed:f2:35:1e:dc:6f:
50:9a:17:da:aa:bd:01:86:58:28:a6:a2:23:67:0d:95:d9:0c:
31:00:c7:57:ad:22:64:47:56:46:2c:3f:7a:f4:9d:31:77:60:
ef:af:db:71:3c:88:b9:37:40:46:fa:f8:e6:4e:07:f0:a3:ca:
26:07:fc:05:d0:21:25:42:70:b1:2b:f3:44:fc:1e:c4:39:8c:
d9:a2:d7:48:ef:04:e7:2f:a5:e9:8d:a3:1d:04:c8:37:e5:1f:
d7:a7:bf:81:95:c1:1a:ce:59:52:11:0b:1e:b1:87:8a:04:1b:
2d:f9:48:b7:85:91:4f:bf:30:58:09:00:31:c9:cf:4b:96:63:
94:05:d0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:34:22 2026 by rpki-client