Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS49901.roa
File: AS49901.roa (raw, json)
Hash identifier: t4SdRW6RiSE9T1sFcepY5TmFDDn8mjiUveFweOzx/xs=
Subject key identifier: A6:2B:9E:86:1C:74:DA:37:28:8D:FC:46:83:55:3A:80:6C:A2:1D:A8
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6E6F9BBBD205F8D133111779082B01DF67534127
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS49901.roa
Signing time: Fri 07 Aug 2026 14:49:21 +0000
ROA not before: Fri 07 Aug 2026 14:44:21 +0000
ROA not after: Fri 06 Aug 2027 14:49:21 +0000
asID: 49901
IP address blocks: 191.96.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:6f:9b:bb:d2:05:f8:d1:33:11:17:79:08:2b:01:df:67:53:41:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 7 14:44:21 2026 GMT
Not After : Aug 6 14:49:21 2027 GMT
Subject: CN=A62B9E861C74DA37288DFC4683553A806CA21DA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:81:48:18:7d:26:12:46:68:85:38:15:cc:c1:
a7:f3:81:85:17:16:64:37:f6:25:28:b8:76:c4:05:
50:7a:3f:f2:03:b0:bb:c0:78:0a:f5:7a:9c:98:1f:
be:95:ee:53:bf:55:c9:bd:5d:a3:61:9f:de:07:a7:
5f:0c:d6:ab:9e:82:77:da:8d:fd:bc:57:55:01:50:
68:fa:07:dc:bb:35:49:d8:7a:9f:c1:b9:2c:ce:ba:
2b:ec:9d:e0:e5:0d:9e:1b:78:1a:b9:14:e7:b1:a6:
0d:bf:8e:b5:0f:5d:36:b9:e8:cc:ed:fe:46:16:07:
7d:ea:d7:7d:18:52:b7:af:5f:8f:b4:7f:48:13:75:
98:d3:a3:fd:48:41:6a:aa:a2:c7:60:6f:a5:a5:a6:
5d:ef:9c:06:a5:b7:85:73:85:68:90:7d:d5:f6:e2:
b5:58:76:e2:c0:3f:7d:e0:1f:f5:0b:ad:08:bf:37:
45:95:c6:7b:e6:dc:f1:21:ee:ce:ce:39:c7:c1:ae:
4b:b5:e7:86:ce:a4:82:63:01:76:79:86:aa:61:6d:
99:8a:bd:df:1a:8e:33:dc:bf:c8:e0:28:2d:7c:af:
84:cb:7e:18:dc:7c:7f:f2:68:9f:1d:2a:5a:bc:72:
ba:bb:8c:bc:e1:7e:4b:d3:cc:86:dd:87:c5:c2:ab:
f2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2B:9E:86:1C:74:DA:37:28:8D:FC:46:83:55:3A:80:6C:A2:1D:A8
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS49901.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.29.0/24
Signature Algorithm: sha256WithRSAEncryption
74:78:2a:85:37:af:79:5d:68:93:82:5e:e5:29:bb:c6:23:be:
37:f4:eb:9c:fd:3b:85:fa:36:b8:ba:b3:1e:39:a8:e3:73:6f:
f1:99:58:25:af:91:f0:7c:8a:7d:b4:98:97:69:4f:35:3e:34:
29:29:ac:4b:16:8b:94:ab:c8:b2:42:30:f2:e7:ac:7f:6d:42:
b0:d4:ce:8b:9e:00:43:b4:03:bb:8b:ac:52:20:d0:53:6b:f8:
29:a1:0e:84:17:ef:b1:40:b1:b1:50:ff:8b:29:b6:c3:c1:a9:
9e:e7:19:44:ee:04:ca:56:74:0b:2f:c6:9e:bd:b1:b4:00:86:
0f:17:de:81:8b:db:85:d1:04:c4:68:1c:ae:e1:5f:ff:de:31:
b0:16:52:85:6e:ad:52:99:d5:8d:b8:dc:22:29:3a:0b:e8:8d:
04:00:af:05:71:a0:ff:18:48:f2:27:06:0c:68:88:ba:15:e6:
10:ec:28:3e:18:b4:20:d7:e7:b0:60:b1:fa:f4:d0:ec:f4:47:
f6:7e:18:15:9b:47:98:52:50:f0:b4:c3:5f:28:5b:95:9a:d1:
8e:ad:05:84:75:91:77:13:99:3d:76:1a:1f:64:2a:3c:dd:95:
b7:4a:b2:59:51:2d:ef:32:19:ea:eb:1f:6e:60:0f:8b:9e:98:
62:ef:e4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:56:41 2026 by rpki-client