Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3232342e302f32342d3234203d3e203631333137.roa
File: 3139342e35302e3232342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: WSiHOTFFPuzIwiI2LWhjblg/9Vv6C7o1LCtLb9TLrQc=
Subject key identifier: 52:82:BA:2B:2D:D2:8B:F6:03:3E:8D:C3:19:08:27:A7:B5:BE:20:57
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 601F4040B090F90EC92916CD7DEDF109A0E45433
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3232342e302f32342d3234203d3e203631333137.roa
Signing time: Wed 22 Oct 2025 07:55:09 +0000
ROA not before: Wed 22 Oct 2025 07:50:09 +0000
ROA not after: Wed 21 Oct 2026 07:55:09 +0000
asID: 61317
IP address blocks: 194.50.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 19:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:1f:40:40:b0:90:f9:0e:c9:29:16:cd:7d:ed:f1:09:a0:e4:54:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Oct 22 07:50:09 2025 GMT
Not After : Oct 21 07:55:09 2026 GMT
Subject: CN=5282BA2B2DD28BF6033E8DC3190827A7B5BE2057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b5:d9:c8:27:95:b5:00:86:95:3c:4e:fc:02:
59:d1:4d:f5:c3:d0:43:4c:33:1f:95:75:cc:b3:3d:
21:ae:26:2c:7d:91:ea:e1:e9:7c:77:2e:58:05:e7:
33:bb:31:fc:bf:c2:65:65:e1:ec:cf:20:fb:a3:07:
8d:b1:3b:fd:8d:34:0e:8d:c2:6e:c9:3c:b3:c8:d2:
ec:6c:14:b3:ab:18:4c:b7:ed:b1:d7:e3:be:17:69:
8f:e2:68:af:a9:ae:f0:58:3a:0d:8f:d2:b1:d1:9e:
6c:36:15:6e:99:42:d1:a3:04:db:ea:3e:e0:74:2d:
1d:4e:59:d1:61:db:3a:cd:12:87:e6:39:59:f2:41:
a6:bc:36:28:09:d9:76:41:83:e1:12:40:a1:a0:e1:
68:c9:e3:ea:f9:49:c2:6c:c2:3f:4e:2e:e0:bd:bb:
03:31:a6:79:9e:05:b1:e2:fa:04:7b:a4:93:91:1a:
fc:a5:21:72:1f:40:2f:57:8d:ce:7c:6a:c1:5a:de:
38:67:a9:50:cc:8f:8a:16:af:c2:45:de:9a:83:a0:
0f:10:ad:5d:30:61:f3:b8:b9:75:94:20:b3:20:30:
c0:e3:20:35:3c:f6:a9:be:16:bd:6b:ff:08:e2:29:
b3:3a:17:8e:92:a9:f2:ff:8e:84:5f:3e:7d:29:f1:
94:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:82:BA:2B:2D:D2:8B:F6:03:3E:8D:C3:19:08:27:A7:B5:BE:20:57
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3232342e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.224.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:02:25:64:f0:03:26:e4:95:20:fd:d4:0b:b5:da:ee:7b:d8:
30:e1:9f:67:d5:09:6c:11:98:50:a8:b0:95:69:72:8b:c6:29:
c9:8c:dc:a4:32:53:15:e3:14:ca:54:87:10:16:76:e6:95:48:
e1:57:0f:9e:6b:2a:42:59:45:51:12:1a:9b:9f:a8:05:44:49:
90:38:3d:ba:eb:1d:cc:d4:95:a7:5a:8a:0e:8b:c7:ce:fe:b7:
3a:70:5f:6d:a2:0f:62:cd:bf:3c:dd:6e:fb:f5:8e:33:2e:17:
7e:88:77:79:53:a4:5c:8c:54:b6:5e:75:f6:48:ed:42:a7:65:
01:01:2e:98:52:1d:12:15:cd:bb:da:45:68:ce:f1:b0:91:af:
b4:9e:36:91:ef:09:a2:ef:38:6b:d4:53:5c:bb:c9:12:b2:01:
93:4b:62:24:d9:56:f8:89:82:c5:0e:37:7e:20:f3:90:6b:3b:
b0:a0:a4:85:38:d1:fe:02:35:4f:64:72:7a:b4:8a:39:82:8c:
56:a6:ed:e1:6b:5b:09:ef:f0:39:7e:4f:e3:6d:e9:15:7c:19:
4b:5f:24:7f:f0:9c:2e:e3:e1:61:d4:cf:3b:a0:eb:4b:90:1c:
55:15:36:52:12:77:6c:2c:e0:3a:8e:7d:03:28:d7:58:0c:e6:
00:82:cb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:05:54 2025 by rpki-client