Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3232332e302f32342d3234203d3e203631333137.roa
File: 3139342e35302e3232332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: 1Z4zrEYo8/zD+rJWrObOhUVhxVPxhe8FurgIvn2Ox1c=
Subject key identifier: 76:E6:3F:19:30:3C:62:17:62:DD:C6:9B:F3:8D:78:E9:C3:F4:34:14
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 2E3321F52B2D438566F39D216E052C19954BD9E8
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3232332e302f32342d3234203d3e203631333137.roa
Signing time: Wed 22 Oct 2025 07:55:09 +0000
ROA not before: Wed 22 Oct 2025 07:50:09 +0000
ROA not after: Wed 21 Oct 2026 07:55:09 +0000
asID: 61317
IP address blocks: 194.50.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:33:21:f5:2b:2d:43:85:66:f3:9d:21:6e:05:2c:19:95:4b:d9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Oct 22 07:50:09 2025 GMT
Not After : Oct 21 07:55:09 2026 GMT
Subject: CN=76E63F19303C621762DDC69BF38D78E9C3F43414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e2:aa:dc:6d:72:02:78:4b:31:4d:60:a6:b2:
01:47:0a:b6:51:0f:60:22:5c:84:b7:6a:74:18:50:
8d:19:d1:db:6e:8d:ae:ef:5b:4f:1b:3f:02:80:1d:
19:1f:fc:ad:ac:18:45:7d:70:49:81:43:77:a9:3b:
06:21:a7:de:e5:16:6a:b2:0a:e3:72:56:09:28:0c:
d2:ce:11:80:b3:69:b2:38:29:c2:ec:8b:e6:d8:92:
45:9b:1e:c6:3f:f7:79:58:ec:9e:78:15:ae:78:c2:
47:c7:35:39:a6:52:f7:25:d0:26:e8:96:60:2c:1f:
bc:cc:c1:19:5c:fa:c2:9f:2c:c7:f1:12:ad:22:0a:
cb:69:31:23:b9:83:3a:e4:0d:13:c9:85:34:0b:11:
cc:1b:80:4d:66:af:ba:8b:eb:80:c8:eb:7a:12:59:
23:8c:e4:d0:ee:f6:bd:fd:68:11:8f:61:b0:a3:b9:
1d:6a:5c:a5:e5:51:f3:5f:ed:17:82:87:c3:8f:f6:
48:c0:8f:5f:16:8b:f6:43:9a:c8:6a:8b:a4:07:19:
84:c8:52:89:70:22:b2:6d:80:12:17:66:f0:75:72:
8a:b3:18:cc:be:09:da:c2:74:82:f6:07:a3:bb:8e:
3b:c6:91:0e:32:11:7a:ce:9f:6b:bf:df:4c:87:8e:
e3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E6:3F:19:30:3C:62:17:62:DD:C6:9B:F3:8D:78:E9:C3:F4:34:14
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3232332e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.223.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:c7:13:e4:16:33:be:17:9c:72:92:b4:bf:43:69:e3:6e:be:
d8:75:9b:ae:b3:a9:0f:91:7b:18:de:48:67:48:d0:7e:84:0b:
cb:9f:3b:17:60:82:16:37:f1:2d:db:bd:f1:b9:31:33:bd:f1:
2b:c8:16:a6:da:33:e0:5f:06:09:fe:f2:f1:5e:f9:a0:53:42:
c1:0b:d8:4b:77:d2:d2:9e:69:b5:00:c7:6f:35:81:ad:b6:8b:
d5:89:7d:06:e9:fd:36:23:08:7d:b8:6c:0c:a1:ce:0a:53:36:
51:32:6f:e9:b7:04:75:b8:88:9d:39:8a:10:e0:c1:4d:c2:49:
6b:e7:9f:f4:0d:d9:08:d1:f1:c6:c1:d2:9a:a1:e2:b6:05:ae:
24:19:6f:15:45:5e:dd:71:2e:74:ca:f4:cc:bd:98:60:cc:49:
65:64:80:af:7b:03:14:12:bd:fe:d7:30:10:be:a4:44:64:43:
20:71:0c:2a:a3:d0:f1:e6:ab:95:3b:42:57:1b:21:ec:28:aa:
04:c9:ce:66:f3:d1:1f:f7:1e:ed:a5:16:69:3a:09:a2:ee:9d:
26:7b:27:57:05:e1:0b:66:2b:e0:8c:2c:90:e7:4e:3c:a6:38:
68:dc:3d:a2:6f:33:b3:89:db:e9:c7:69:d2:44:90:bb:9c:82:
ef:fc:1c:fa
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIULjMh9SstQ4Vm850hbgUsGZVL2egwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJmYmQyY2MwMDEyZmIyZjg2ZGI0MGI1ODliZDFhYzRl
OTczMjY2ZDAeFw0yNTEwMjIwNzUwMDlaFw0yNjEwMjEwNzU1MDlaMDMxMTAvBgNV
BAMTKDc2RTYzRjE5MzAzQzYyMTc2MkREQzY5QkYzOEQ3OEU5QzNGNDM0MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC4qrcbXICeEsxTWCmsgFHCrZR
D2AiXIS3anQYUI0Z0dtuja7vW08bPwKAHRkf/K2sGEV9cEmBQ3epOwYhp97lFmqy
CuNyVgkoDNLOEYCzabI4KcLsi+bYkkWbHsY/93lY7J54Fa54wkfHNTmmUvcl0Cbo
lmAsH7zMwRlc+sKfLMfxEq0iCstpMSO5gzrkDRPJhTQLEcwbgE1mr7qL64DI63oS
WSOM5NDu9r39aBGPYbCjuR1qXKXlUfNf7ReCh8OP9kjAj18Wi/ZDmshqi6QHGYTI
UolwIrJtgBIXZvB1coqzGMy+CdrCdIL2B6O7jjvGkQ4yEXrOn2u/30yHjuOhAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUduY/GTA8Yhdi3cab84146cP0NBQwHwYDVR0j
BBgwFoAUYvvSzAAS+y+G20C1ib0axOlzJm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAtYWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4
MzYyLzAvNjJGQkQyQ0MwMDEyRkIyRjg2REI0MEI1ODlCRDFBQzRFOTczMjY2RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l2dlN6QUFTLXktRzIwQzFpYjBheE9s
ekptMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAt
YWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4MzYyLzAvMzEzOTM0MmUzNTMwMmUzMjMy
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
wjLfMA0GCSqGSIb3DQEBCwUAA4IBAQDcxxPkFjO+F5xykrS/Q2njbr7YdZuus6kP
kXsY3khnSNB+hAvLnzsXYIIWN/Et273xuTEzvfEryBam2jPgXwYJ/vLxXvmgU0LB
C9hLd9LSnmm1AMdvNYGttovViX0G6f02Iwh9uGwMoc4KUzZRMm/ptwR1uIidOYoQ
4MFNwklr55/0DdkI0fHGwdKaoeK2Ba4kGW8VRV7dcS50yvTMvZhgzEllZICvewMU
Er3+1zAQvqREZEMgcQwqo9Dx5quVO0JXGyHsKKoEyc5m89Ef9x7tpRZpOgmi7p0m
eydXBeELZivgjCyQ5048pjho3D2ibzOzidvpx2nSRJC7nILv/Bz6
-----END CERTIFICATE-----
Generated at Tue Nov 4 16:08:52 2025 by rpki-client