Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3234332e302f32342d3234203d3e20333939363431.roa
File: 3139342e35302e3234332e302f32342d3234203d3e20333939363431.roa (raw, json)
Hash identifier: H66dmh8EVheAAuv+6OggVDTQtILdQQUetslNXfOjxDo=
Subject key identifier: AB:08:73:41:BB:75:A6:B1:5D:2F:04:36:A1:D8:F5:46:B8:FD:23:B5
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 5014043C663E97E11EE9452EED245A3F388552A5
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3234332e302f32342d3234203d3e20333939363431.roa
Signing time: Fri 07 Aug 2026 21:49:21 +0000
ROA not before: Fri 07 Aug 2026 21:44:21 +0000
ROA not after: Fri 06 Aug 2027 21:49:21 +0000
asID: 399641
IP address blocks: 194.50.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 08:44:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:14:04:3c:66:3e:97:e1:1e:e9:45:2e:ed:24:5a:3f:38:85:52:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Aug 7 21:44:21 2026 GMT
Not After : Aug 6 21:49:21 2027 GMT
Subject: CN=AB087341BB75A6B15D2F0436A1D8F546B8FD23B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b2:a0:ba:ae:5b:88:21:db:64:07:f1:e6:7f:
2c:2a:e8:f0:b3:43:e8:74:05:de:a6:7e:86:23:3f:
9f:ad:fd:a5:f8:4c:d1:ee:92:7e:6a:27:58:2c:71:
6b:73:1e:03:bb:22:ec:d1:27:2a:1f:58:1c:2a:d4:
df:e2:ee:8f:a9:5d:d5:3b:ad:18:b2:c7:75:d1:7f:
21:e3:94:59:9c:2e:0f:8f:1c:6b:a6:b3:8d:90:86:
78:5f:7f:86:f5:4a:3c:cf:0b:57:05:a9:c8:4d:e3:
35:8c:81:10:a0:b1:5f:9b:19:d1:a0:3e:92:94:7d:
10:ce:97:15:e7:0c:70:6b:02:0e:60:2a:a3:23:a5:
54:84:39:a1:cc:4c:2d:44:7e:7b:2c:ff:f0:9a:a3:
dd:83:8c:02:5a:f0:fd:52:4e:50:27:28:9a:fb:50:
82:0a:2b:f0:16:04:bd:9c:95:30:01:02:62:3e:0a:
3b:4b:47:13:83:2b:68:d6:16:71:10:51:63:97:89:
46:1d:87:fd:2b:03:9e:47:2d:85:87:46:f8:0e:f6:
a0:0a:55:75:58:51:33:4c:b5:43:91:9d:a4:26:fc:
0c:94:8b:7b:0d:d6:4d:fc:a5:7e:03:d1:0d:11:a7:
e7:8d:c9:aa:72:1f:6d:c0:9e:ef:90:8a:ee:6e:4c:
d9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:08:73:41:BB:75:A6:B1:5D:2F:04:36:A1:D8:F5:46:B8:FD:23:B5
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3234332e302f32342d3234203d3e20333939363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.243.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ff:15:33:a4:06:91:b7:3a:7e:19:13:ef:54:2d:fd:c1:69:
f1:36:07:2f:d4:b2:62:e1:e9:0d:a3:cc:b7:6c:eb:6f:07:a7:
2e:7a:44:72:3d:5e:2a:4a:93:17:ff:b0:4e:c9:5b:19:15:2b:
ba:c4:34:11:16:e1:7b:6d:44:57:b8:2c:53:3f:89:ef:08:8b:
32:db:31:06:19:27:96:ee:5b:f4:d5:e6:fe:ea:78:0b:ce:52:
f9:cd:ee:41:90:e4:7b:eb:8d:0d:f9:e8:f1:c3:5f:7d:e0:ef:
27:63:64:2e:43:40:d5:81:d6:24:42:5e:f3:69:e6:f2:c8:21:
49:cb:66:57:79:e2:fb:55:8f:a7:5e:a6:d8:f8:b1:32:98:9a:
a4:13:e5:bd:5e:2c:17:4c:59:fb:b6:b5:bb:50:99:b3:b1:ce:
93:e3:a1:e0:be:d2:a8:e5:ff:9d:dd:80:5b:38:6c:7f:f3:8c:
3d:a1:2e:56:98:79:32:d0:1c:71:f7:28:d1:14:2c:45:67:e7:
c6:91:dd:e8:4b:03:bc:33:23:68:0c:e1:86:33:79:da:1b:3d:
b5:2c:6b:d7:62:d3:88:2d:06:95:dc:d7:f7:19:bd:a0:1d:1e:
16:e2:17:a6:c1:dd:8b:5a:bc:df:7f:a2:32:62:3a:70:36:d8:
f6:9d:f1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 23:29:54 2026 by rpki-client