Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3231302e302f32342d3234203d3e20323138333232.roa
File: 3139342e3135302e3231302e302f32342d3234203d3e20323138333232.roa (raw, json)
Hash identifier: GppVhm/22mXtEq/eO97AMQ4j9cUYvCFZK9KKADDBZeI=
Subject key identifier: B8:76:41:9B:ED:BB:86:AA:47:20:DF:5E:D5:19:2C:34:4A:64:9A:EB
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 4E749FBA06CDF403CB994993C12CC651D0DEE0DC
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3231302e302f32342d3234203d3e20323138333232.roa
Signing time: Tue 03 Nov 2026 20:51:12 +0000
ROA not before: Tue 03 Nov 2026 20:46:12 +0000
ROA not after: Tue 02 Nov 2027 20:51:12 +0000
asID: 218322
IP address blocks: 194.150.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:29:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:74:9f:ba:06:cd:f4:03:cb:99:49:93:c1:2c:c6:51:d0:de:e0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Nov 3 20:46:12 2026 GMT
Not After : Nov 2 20:51:12 2027 GMT
Subject: CN=B876419BEDBB86AA4720DF5ED5192C344A649AEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fc:a7:a5:4d:50:0c:ea:26:fa:23:ff:3b:c7:
5c:da:7a:09:9e:f6:73:dc:6e:4e:b9:2c:f2:5b:cb:
93:45:09:df:4e:f4:04:c5:6d:7c:fc:1b:63:97:fc:
f7:0b:f3:74:b9:2e:a3:9b:c5:be:9b:d2:3c:69:96:
da:f4:8c:1b:72:44:11:30:fc:83:8b:96:32:d1:44:
a5:63:2a:b1:48:7d:ab:73:de:90:09:b5:04:a6:a8:
3e:6e:c8:2a:e8:1a:f9:ec:30:68:59:38:39:f6:44:
8d:09:85:c6:ee:40:76:bd:6b:30:bf:67:79:70:5f:
4a:38:27:1b:5f:3f:9e:d6:10:21:85:56:20:cf:67:
a6:70:14:12:6a:62:ca:d8:eb:44:7b:79:0c:ff:1f:
85:02:39:45:bc:63:70:d5:a7:0c:65:0e:cc:83:ee:
b0:4d:50:6d:b9:43:a6:7b:5f:cc:e8:07:e8:3b:42:
72:2d:62:b0:a2:b4:a0:56:00:f2:38:93:be:57:dd:
49:90:eb:f3:6e:5f:1d:44:73:22:98:f3:5e:17:f0:
2a:dd:69:4f:36:9e:fa:3a:63:d9:6a:6f:d2:42:7e:
92:62:76:fb:c9:da:61:ec:22:12:18:1f:c1:51:d2:
3f:62:f4:7b:7a:bd:5e:64:41:ad:bd:5a:40:d7:f1:
f3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:76:41:9B:ED:BB:86:AA:47:20:DF:5E:D5:19:2C:34:4A:64:9A:EB
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3231302e302f32342d3234203d3e20323138333232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.210.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ef:7c:0e:db:da:3c:ff:fa:6b:e7:f4:a3:f7:84:94:cc:84:
a9:21:43:7b:96:36:90:2b:6b:dc:cf:b3:f8:b9:db:af:bd:88:
68:04:f4:b7:d1:fa:33:06:5f:b9:06:5e:ee:b6:e4:fe:dd:6c:
1a:b4:2c:4a:f0:85:19:14:4f:7b:79:a2:b5:2f:37:5d:05:60:
50:d9:d1:a9:ae:a0:8c:c4:87:e3:2f:d3:88:92:db:70:83:ed:
c6:38:d7:3d:9a:50:03:0e:50:ed:99:5e:d0:38:2c:a6:56:51:
98:24:ec:d4:40:62:94:12:02:ac:0e:d9:71:5c:8d:0d:69:68:
a3:1b:25:46:de:48:8e:b6:9c:bd:47:c9:53:47:00:81:eb:17:
7b:fd:5f:b1:d1:ed:be:82:4a:0d:e5:8b:ab:3f:0e:68:ec:c3:
a1:5a:88:e4:b6:c0:f6:7b:9a:e9:d4:59:d9:f7:5b:29:62:52:
8d:84:9e:f7:d5:25:a8:d2:6b:e2:4e:b7:57:07:14:97:d7:68:
47:31:ec:ad:0f:c5:ef:98:2a:df:ad:5c:25:e7:90:8e:e7:2f:
3b:2b:cf:25:f0:48:15:99:9f:f9:2d:34:c6:2a:7e:96:98:5e:
6f:44:a0:f0:39:45:01:46:4a:95:17:1d:e7:f6:d5:9a:3b:8d:
f7:96:10:8e
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUTnSfugbN9APLmUmTwSzGUdDe4NwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJmYmQyY2MwMDEyZmIyZjg2ZGI0MGI1ODliZDFhYzRl
OTczMjY2ZDAeFw0yNjExMDMyMDQ2MTJaFw0yNzExMDIyMDUxMTJaMDMxMTAvBgNV
BAMTKEI4NzY0MTlCRURCQjg2QUE0NzIwREY1RUQ1MTkyQzM0NEE2NDlBRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5/KelTVAM6ib6I/87x1zaegme
9nPcbk65LPJby5NFCd9O9ATFbXz8G2OX/PcL83S5LqObxb6b0jxpltr0jBtyRBEw
/IOLljLRRKVjKrFIfatz3pAJtQSmqD5uyCroGvnsMGhZODn2RI0JhcbuQHa9azC/
Z3lwX0o4JxtfP57WECGFViDPZ6ZwFBJqYsrY60R7eQz/H4UCOUW8Y3DVpwxlDsyD
7rBNUG25Q6Z7X8zoB+g7QnItYrCitKBWAPI4k75X3UmQ6/NuXx1EcyKY814X8Crd
aU82nvo6Y9lqb9JCfpJidvvJ2mHsIhIYH8FR0j9i9Ht6vV5kQa29WkDX8fMZAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUuHZBm+27hqpHIN9e1RksNEpkmuswHwYDVR0j
BBgwFoAUYvvSzAAS+y+G20C1ib0axOlzJm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAtYWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4
MzYyLzAvNjJGQkQyQ0MwMDEyRkIyRjg2REI0MEI1ODlCRDFBQzRFOTczMjY2RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l2dlN6QUFTLXktRzIwQzFpYjBheE9s
ekptMC5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAt
YWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4MzYyLzAvMzEzOTM0MmUzMTM1MzAyZTMy
MzEzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzODMzMzIzMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMKW0jANBgkqhkiG9w0BAQsFAAOCAQEAdO98DtvaPP/6a+f0o/eElMyEqSFD
e5Y2kCtr3M+z+Lnbr72IaAT0t9H6MwZfuQZe7rbk/t1sGrQsSvCFGRRPe3mitS83
XQVgUNnRqa6gjMSH4y/TiJLbcIPtxjjXPZpQAw5Q7Zle0DgsplZRmCTs1EBilBIC
rA7ZcVyNDWlooxslRt5IjracvUfJU0cAgesXe/1fsdHtvoJKDeWLqz8OaOzDoVqI
5LbA9nua6dRZ2fdbKWJSjYSe99UlqNJr4k63VwcUl9doRzHsrQ/F75gq361cJeeQ
jucvOyvPJfBIFZmf+S00xip+lpheb0Sg8DlFAUZKlRcd5/bVmjuN95YQjg==
-----END CERTIFICATE-----
Generated at Thu Nov 5 07:39:37 2026 by rpki-client