Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS49592.roa
File: AS49592.roa (raw, json)
Hash identifier: G0do6CSedYyq5TXxWpzDX7zsSVtU/etYUyX14tJsDKs=
Subject key identifier: 4C:A8:73:0D:4B:7A:A8:16:B9:40:C4:94:9F:09:22:0B:92:FF:F0:77
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4CCD2799A59516015EA6A77BA5830DC502DF57F2
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS49592.roa
Signing time: Tue 01 Sep 2026 00:09:46 +0000
ROA not before: Tue 01 Sep 2026 00:04:46 +0000
ROA not after: Tue 31 Aug 2027 00:09:46 +0000
asID: 49592
IP address blocks: 94.194.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 21:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:cd:27:99:a5:95:16:01:5e:a6:a7:7b:a5:83:0d:c5:02:df:57:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 1 00:04:46 2026 GMT
Not After : Aug 31 00:09:46 2027 GMT
Subject: CN=4CA8730D4B7AA816B940C4949F09220B92FFF077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:69:b1:0c:7b:a7:af:75:54:b3:65:5e:34:c7:
46:60:89:42:a0:8a:ef:83:5b:a0:b0:c8:08:4e:0f:
7a:81:90:84:44:bf:ea:e9:8b:0f:32:e6:ee:79:6b:
63:51:7b:b9:fc:23:ab:42:2c:9e:fe:3a:9a:8e:12:
f8:69:28:5e:ed:a6:94:47:f5:ed:61:2e:3d:e3:15:
e7:d5:16:34:78:20:07:33:1f:6b:de:de:67:d5:66:
bb:cb:5a:94:2f:be:92:86:fa:25:3a:7e:f9:6b:b9:
81:31:8e:5e:d4:0c:29:7a:ff:84:5a:b3:4d:2b:9a:
f1:93:36:cc:c7:c9:63:63:a5:ca:73:d1:7d:8f:8f:
75:cc:26:5a:0a:c7:93:9b:eb:3d:f9:2e:ef:f6:6b:
85:a4:a1:7d:c6:44:1a:4d:9f:c9:1a:34:2c:e7:97:
24:74:61:aa:2a:15:d6:82:cc:04:28:d2:79:a3:85:
73:61:d1:59:98:33:e7:fd:6b:7d:f6:fa:2b:b3:e9:
18:36:ce:ed:6d:e0:1e:af:a0:69:57:91:61:18:6b:
4a:54:a5:57:71:c3:36:8d:e2:2b:1b:ec:a2:7a:e9:
62:08:ba:75:1c:74:af:a0:e0:ab:96:0a:1a:e4:23:
d2:15:64:e8:2d:cc:8a:c4:77:b9:c6:88:ca:c8:32:
6a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A8:73:0D:4B:7A:A8:16:B9:40:C4:94:9F:09:22:0B:92:FF:F0:77
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS49592.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.194.128.0/22
Signature Algorithm: sha256WithRSAEncryption
03:b2:e9:1f:14:21:34:2d:4d:d8:34:f1:3b:81:13:b1:dd:23:
5a:c1:92:ba:93:40:71:34:63:d9:0c:bd:cb:55:66:09:8b:31:
a0:b3:f3:23:63:e8:2e:83:8c:01:4a:4f:0c:ad:3b:bb:91:3b:
60:83:ab:4f:77:54:6e:55:0f:38:63:62:00:42:71:0e:85:7a:
29:6a:df:de:81:63:17:1e:79:c1:ab:ef:33:4e:ff:f1:be:f5:
dd:70:ef:ce:87:11:2b:d7:47:c6:e4:05:e9:44:36:89:95:35:
99:cb:92:f0:b8:61:6d:8c:78:d9:9d:40:1f:b2:d4:4d:96:c2:
ea:7e:1b:b0:95:37:23:ab:cf:9c:23:16:ee:44:a1:ff:12:6c:
03:75:25:7f:7b:f8:64:0a:4d:79:cd:b4:c8:84:87:8f:a6:d5:
f9:61:c5:dc:67:ce:64:21:97:a7:99:1b:22:7b:9b:52:25:c8:
f1:24:e0:a0:ed:7a:e2:88:d0:ca:f2:88:d8:59:1d:9e:b8:97:
06:5e:12:54:5a:b6:08:80:8a:82:d4:63:7f:19:9c:6f:1e:56:
7e:e1:77:34:34:8a:36:9c:96:0f:1b:81:d8:07:fe:87:2f:13:
8d:70:7b:80:cc:15:63:a1:0a:61:d0:cb:e2:f7:c5:83:03:58:
54:80:20:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 07:13:08 2026 by rpki-client