Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS49581.roa
File: AS49581.roa (raw, json)
Hash identifier: V+oB3nwI+Qc4etFpur7HxsUo8XwiwugUMCDaGtEEtIc=
Subject key identifier: 39:66:70:46:2F:00:EC:4B:89:AD:ED:7F:82:B4:45:CF:98:E8:B0:56
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 60451FA3D3DE9D94D737199131130B13890248A0
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS49581.roa
Signing time: Fri 29 May 2026 18:49:59 +0000
ROA not before: Fri 29 May 2026 18:44:59 +0000
ROA not after: Fri 28 May 2027 18:49:59 +0000
asID: 49581
IP address blocks: 82.47.101.0/24 maxlen: 24
2a13:9500:7d::/48 maxlen: 48
2a13:9500:b3::/48 maxlen: 48
2a13:9500:d5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:45:1f:a3:d3:de:9d:94:d7:37:19:91:31:13:0b:13:89:02:48:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 29 18:44:59 2026 GMT
Not After : May 28 18:49:59 2027 GMT
Subject: CN=396670462F00EC4B89ADED7F82B445CF98E8B056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c2:49:c1:39:39:5a:da:e3:e4:72:4f:f0:8e:
45:9c:63:a4:10:86:ec:8a:fd:3d:97:5f:b2:2f:73:
e6:be:e5:a9:40:d6:da:25:61:ef:ef:23:e6:f9:40:
60:d4:4d:49:1f:1e:d6:e5:2c:d2:a3:61:a2:6c:21:
fd:0c:8c:62:14:d7:e2:0f:1c:f1:1b:60:e0:7c:83:
c0:83:66:9d:ef:e8:91:91:4e:97:cc:61:c4:c0:d9:
1c:eb:27:1d:06:cd:20:3b:01:c1:68:90:c6:34:49:
b3:5d:42:40:6a:46:11:97:77:a2:52:06:15:45:9d:
a3:66:3c:a6:f9:c2:85:30:ab:20:fe:a0:d2:df:a7:
b4:d6:a4:ec:a3:1f:ba:3b:6e:bd:ea:5d:d0:b8:a1:
2a:99:ca:36:50:39:3c:e8:3f:4b:6e:da:ba:11:91:
25:ae:22:8c:0b:fa:65:45:bf:f6:26:0e:e9:5d:d5:
45:8d:5a:ab:df:f8:81:e8:e6:df:bc:bb:b6:f0:03:
eb:d9:69:30:56:df:ff:0c:25:d6:79:59:af:e5:29:
a5:a1:07:ae:c9:85:cf:0f:93:61:c7:53:67:18:41:
ce:b8:2b:09:7e:69:c8:56:2b:c1:76:76:99:b7:c1:
a0:00:06:42:95:31:60:7c:a2:a0:20:ca:8a:c1:e9:
11:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:66:70:46:2F:00:EC:4B:89:AD:ED:7F:82:B4:45:CF:98:E8:B0:56
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS49581.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.101.0/24
IPv6:
2a13:9500:7d::/48
2a13:9500:b3::/48
2a13:9500:d5::/48
Signature Algorithm: sha256WithRSAEncryption
99:ed:e9:26:0d:36:4b:07:31:5f:01:97:3c:23:54:b1:47:de:
0d:f1:58:72:2b:65:f6:c7:11:d8:c1:f4:40:79:08:96:63:a4:
a7:01:c9:6b:65:38:ca:b0:ed:1f:30:e5:1f:ce:94:fe:08:2d:
4d:a3:f0:f5:21:8d:39:be:8a:59:95:09:77:6d:ac:a4:6d:82:
99:47:bc:93:48:73:18:78:bc:36:e7:31:b3:5e:ff:6e:44:7b:
0f:22:0f:f9:c9:5d:91:a9:fa:da:ff:90:0f:e6:30:9e:85:d7:
5d:17:ca:a4:23:23:a2:61:39:e9:48:41:65:72:d4:10:72:c6:
8a:bf:38:b6:42:9e:9b:33:e1:8b:24:c5:f9:e0:bd:bd:3b:d7:
c0:e9:9e:8a:fb:f0:73:32:a5:bb:e9:10:22:07:a2:a5:ec:24:
ab:78:b1:e8:80:f5:40:62:9b:13:ab:8a:c4:10:1d:20:17:d1:
a5:56:6f:04:05:c0:6f:e1:0e:71:64:c0:17:36:ca:57:cc:46:
bd:97:04:dd:32:04:a2:9b:ba:6c:c6:9b:07:e8:99:22:ad:45:
d7:3b:fa:23:24:17:cd:4b:ae:99:a2:6a:ac:bb:d9:f9:b2:c3:
b7:2d:52:fe:b3:9f:96:75:21:c1:fe:73:3d:ab:e5:9c:db:a5:
d9:17:e6:f2
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUYEUfo9PenZTXNxmRMRMLE4kCSKAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA1MjkxODQ0NTlaFw0yNzA1MjgxODQ5NTlaMDMxMTAvBgNV
BAMTKDM5NjY3MDQ2MkYwMEVDNEI4OUFERUQ3RjgyQjQ0NUNGOThFOEIwNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3wknBOTla2uPkck/wjkWcY6QQ
huyK/T2XX7Ivc+a+5alA1tolYe/vI+b5QGDUTUkfHtblLNKjYaJsIf0MjGIU1+IP
HPEbYOB8g8CDZp3v6JGRTpfMYcTA2RzrJx0GzSA7AcFokMY0SbNdQkBqRhGXd6JS
BhVFnaNmPKb5woUwqyD+oNLfp7TWpOyjH7o7br3qXdC4oSqZyjZQOTzoP0tu2roR
kSWuIowL+mVFv/YmDuld1UWNWqvf+IHo5t+8u7bwA+vZaTBW3/8MJdZ5Wa/lKaWh
B67Jhc8Pk2HHU2cYQc64Kwl+achWK8F2dpm3waAABkKVMWB8oqAgyorB6RGFAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUOWZwRi8A7EuJre1/grRFz5josFYwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDk1ODEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwQgYIKwYBBQUHAQcBAf8EMzAxMAwEAgABMAYDBABSL2Uw
IQQCAAIwGwMHACoTlQAAfQMHACoTlQAAswMHACoTlQAA1TANBgkqhkiG9w0BAQsF
AAOCAQEAme3pJg02SwcxXwGXPCNUsUfeDfFYcitl9scR2MH0QHkIlmOkpwHJa2U4
yrDtHzDlH86U/ggtTaPw9SGNOb6KWZUJd22spG2CmUe8k0hzGHi8Nucxs17/bkR7
DyIP+cldkan62v+QD+YwnoXXXRfKpCMjomE56UhBZXLUEHLGir84tkKemzPhiyTF
+eC9vTvXwOmeivvwczKlu+kQIgeipewkq3ix6ID1QGKbE6uKxBAdIBfRpVZvBAXA
b+EOcWTAFzbKV8xGvZcE3TIEopu6bMabB+iZIq1F1zv6IyQXzUuumaJqrLvZ+bLD
ty1S/rOflnUhwf5zPavlnNul2Rfm8g==
-----END CERTIFICATE-----
Generated at Sat Jun 6 05:24:44 2026 by rpki-client