Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS49192.roa
File: AS49192.roa (raw, json)
Hash identifier: NNZvyu2pKHxf6NcfCJkXc7aXiYWbsCgDv2AcH+j2pik=
Subject key identifier: 3B:49:B0:13:93:0B:5C:69:29:F9:55:87:70:63:7C:2A:65:D3:92:6C
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 4E858DF8D29C171C2489045BCF771C34BB098CEC
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS49192.roa
Signing time: Wed 04 Nov 2026 20:32:46 +0000
ROA not before: Wed 04 Nov 2026 20:27:46 +0000
ROA not after: Wed 03 Nov 2027 20:32:46 +0000
asID: 49192
IP address blocks: 185.86.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:85:8d:f8:d2:9c:17:1c:24:89:04:5b:cf:77:1c:34:bb:09:8c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:46 2026 GMT
Not After : Nov 3 20:32:46 2027 GMT
Subject: CN=3B49B013930B5C6929F9558770637C2A65D3926C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:84:24:1f:61:01:fa:0e:08:40:5f:36:41:34:
75:e3:37:29:a8:3c:1e:a1:ed:d8:e6:00:0f:05:2e:
5e:29:5f:9a:10:6e:5a:50:47:23:cb:2f:21:b3:d3:
fc:81:bb:3d:f5:25:c2:7a:2e:27:e6:bc:d7:f1:26:
56:d5:ff:b9:e3:fb:79:8b:e7:15:1d:7c:7c:2c:6f:
08:f4:08:c9:71:8c:d0:0a:bc:86:16:a8:8d:3f:37:
53:3f:f7:cf:f7:f1:07:ce:65:3e:b3:12:57:09:8e:
5f:29:c5:3e:e3:30:10:3b:88:99:be:01:9b:4c:76:
a9:5a:82:6c:94:bd:67:5f:02:8e:d9:b3:2e:e5:79:
2f:bc:f0:8f:ad:be:7c:84:9b:fa:64:b0:08:35:62:
06:5e:32:01:c9:a8:48:9d:01:b5:d3:32:ec:04:1a:
84:f5:ac:5f:fd:5d:0f:7f:03:d7:9e:f8:b8:7b:1b:
cf:c3:11:ad:60:1d:a3:d8:19:d8:99:07:71:2c:02:
9d:b3:19:57:57:f6:67:f9:58:b9:7c:2f:f0:7b:0b:
de:7e:8d:cb:70:da:48:9c:dc:b8:f3:5b:56:e1:e6:
79:ff:ce:fe:37:22:48:75:53:77:fb:f4:45:60:54:
89:42:4c:9b:07:d2:25:48:31:af:1c:4e:e9:86:bf:
b7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:49:B0:13:93:0B:5C:69:29:F9:55:87:70:63:7C:2A:65:D3:92:6C
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS49192.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.224.0/24
Signature Algorithm: sha256WithRSAEncryption
67:77:f6:cf:32:4b:9d:90:4c:1a:14:17:71:2a:50:e3:b5:84:
b5:9b:7d:23:d3:96:2d:e4:97:82:e8:1b:f3:db:61:b2:ec:6f:
c4:d7:34:c7:d8:01:6a:de:b0:23:96:42:1b:2d:e0:f0:7b:7d:
49:57:c6:cf:40:50:c0:03:8d:17:6a:ff:38:b5:40:af:bd:a2:
4c:28:f4:75:04:27:59:9d:f2:84:46:f8:62:97:d2:eb:4b:f3:
f0:40:63:9e:c8:dd:51:94:c7:64:e6:63:85:a8:4a:cf:e7:0f:
09:ab:fe:c2:b7:f8:3f:99:b3:60:a4:f9:3a:5d:1a:68:15:02:
14:f6:97:0a:8e:bc:25:1d:0a:6d:7f:40:3a:92:6b:e5:fe:e8:
47:94:28:a3:b0:60:3d:83:75:e7:49:e4:83:9c:a0:08:76:2b:
2b:eb:f1:e5:45:f5:87:5e:f2:4c:c1:2b:9a:e3:5b:f8:a9:de:
28:09:b8:2a:88:2c:90:cf:a2:90:d2:e2:df:eb:11:3e:50:92:
54:b6:99:6c:a4:b2:c2:00:da:6c:5c:14:29:b8:fa:6b:38:52:
9f:f7:fa:22:21:4b:90:9f:4e:01:e8:73:b9:2b:31:b1:f8:9b:
31:7b:e8:59:2b:07:30:99:a1:ee:3b:19:28:32:4f:90:de:5c:
52:6b:ea:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:17:07 2026 by rpki-client