Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3233332e302f32342d3234203d3e203336333532.roa
File: 3139342e35302e3233332e302f32342d3234203d3e203336333532.roa (raw, json)
Hash identifier: GJhwNxRbdbe5/1cB72hqo5BWvhDH/7zLW8KmCkn7xHo=
Subject key identifier: DF:3D:DD:C7:E3:23:CA:75:90:66:96:E1:CA:B5:26:26:45:36:C4:FA
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 2E64644FE66585ED5DE24B1BABD9666423F043DB
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3233332e302f32342d3234203d3e203336333532.roa
Signing time: Wed 23 Sep 2026 08:49:35 +0000
ROA not before: Wed 23 Sep 2026 08:44:35 +0000
ROA not after: Wed 22 Sep 2027 08:49:35 +0000
asID: 36352
IP address blocks: 194.50.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:57:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:64:64:4f:e6:65:85:ed:5d:e2:4b:1b:ab:d9:66:64:23:f0:43:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Sep 23 08:44:35 2026 GMT
Not After : Sep 22 08:49:35 2027 GMT
Subject: CN=DF3DDDC7E323CA75906696E1CAB526264536C4FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ea:84:77:b2:53:be:9f:c4:55:75:15:fd:f0:
d4:82:7e:89:e4:f4:c1:fb:c2:d7:79:47:21:d1:38:
f6:a9:55:99:f2:65:7b:ac:b3:0f:c4:26:88:ea:4a:
2e:78:ce:58:e0:31:c0:36:58:ed:f1:ea:c3:57:b3:
af:66:38:b4:81:48:f1:82:2b:e0:b7:58:ab:ba:c6:
ef:60:b1:6c:37:b4:4c:c5:79:b0:d8:c3:8a:83:13:
79:12:d5:5e:76:bd:50:13:fb:88:dd:7a:d0:00:c2:
af:fa:04:07:09:03:b5:49:86:94:b7:e0:f6:72:4e:
ae:cb:3e:2d:ab:59:7c:d6:ce:9a:f5:9c:f0:e3:a4:
d5:ca:a5:90:9b:c9:28:1f:da:59:83:df:31:e0:57:
41:c2:b4:ce:f6:7b:be:41:75:84:13:7d:ff:0f:17:
c0:c8:ef:5c:5e:29:96:c0:9f:a8:2e:b3:32:47:86:
90:a5:1a:fd:05:0e:ca:ed:3f:d0:37:ae:b4:a6:b0:
4d:2a:4d:bd:a0:cc:a2:15:59:33:c2:c8:f6:31:b4:
31:9e:d0:42:b2:02:c2:65:3d:2e:d9:be:0f:fd:95:
9e:e4:90:69:2a:1f:45:83:0a:3e:bc:22:bf:54:6f:
c3:4d:3f:bb:ad:5d:56:89:8f:58:0b:9c:13:e9:6c:
c2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3D:DD:C7:E3:23:CA:75:90:66:96:E1:CA:B5:26:26:45:36:C4:FA
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3233332e302f32342d3234203d3e203336333532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.233.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:23:f2:e6:46:71:84:cf:69:b4:f2:08:0f:6d:c0:ef:0e:48:
a8:72:80:2e:e6:41:44:cd:04:81:f4:28:38:50:6f:0a:ce:5f:
b5:34:88:bb:21:73:ac:19:66:72:04:cd:e3:50:c3:21:ff:98:
2a:b2:c4:0a:b8:6e:f6:20:6d:14:0e:24:20:79:c8:92:be:4d:
55:fb:90:bf:3f:52:50:74:7a:ef:2e:7a:cd:8a:e7:cc:53:36:
c7:70:22:8e:4a:06:3c:36:40:1b:9e:36:30:e0:19:f9:d6:03:
e0:29:3f:23:4b:42:60:d7:80:ad:8c:7d:62:58:50:e8:4c:33:
ef:81:84:27:7f:3b:ea:22:02:89:8e:8e:17:4a:d1:aa:55:6d:
47:ac:1a:45:ee:ac:c8:7d:56:69:7f:8c:ff:d1:8e:67:1a:68:
b9:c4:31:d9:c0:fc:de:82:ac:c5:19:97:74:b0:5c:4a:aa:06:
16:e5:07:06:33:0f:d0:80:06:ec:73:b4:7b:39:85:50:1a:cf:
db:85:59:55:66:3b:ce:07:41:f7:a9:df:39:63:91:86:a7:18:
a2:9e:45:db:0f:b6:92:09:98:4c:42:05:4b:09:a9:ab:10:9c:
3a:76:8e:7b:80:05:39:96:92:c4:89:a9:57:3e:c0:7f:52:5b:
5d:a9:ea:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:00:42 2026 by rpki-client