Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS49592.roa
File: AS49592.roa (raw, json)
Hash identifier: dvFi2vzfaIBqxDS6eFhdiOSofJRhBArUlj5dQ8CxDG4=
Subject key identifier: B6:77:FE:08:0C:76:55:E1:87:41:99:E2:45:25:2D:5A:0F:86:C4:22
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4F06498B652A78AECDD81C3042F7CC3F78E71B1A
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS49592.roa
Signing time: Thu 03 Sep 2026 08:46:46 +0000
ROA not before: Thu 03 Sep 2026 08:41:46 +0000
ROA not after: Thu 02 Sep 2027 08:46:46 +0000
asID: 49592
IP address blocks: 94.194.84.0/22 maxlen: 24
94.194.128.0/22 maxlen: 24
94.194.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:06:49:8b:65:2a:78:ae:cd:d8:1c:30:42:f7:cc:3f:78:e7:1b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 3 08:41:46 2026 GMT
Not After : Sep 2 08:46:46 2027 GMT
Subject: CN=B677FE080C7655E1874199E245252D5A0F86C422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7e:2c:51:a3:3e:ef:16:61:51:e3:24:49:22:
3d:6e:a6:a1:fc:13:03:ca:4e:ce:1a:07:9f:c4:e3:
35:6a:ce:07:da:b8:11:ed:ae:8c:fc:1e:60:e3:f2:
5b:34:5e:f5:63:f1:15:5e:b2:01:4d:ae:37:dd:32:
1f:b4:63:b2:95:ef:12:e2:50:e6:7e:c4:93:09:de:
74:94:34:ef:50:ed:ee:59:a5:8d:0a:af:30:19:bd:
e8:35:bb:56:17:60:b4:d3:61:af:08:16:3e:81:98:
bf:55:c4:f8:0c:2d:39:eb:18:29:f2:84:c0:99:79:
7b:e6:50:90:c7:2a:eb:01:25:c5:71:20:bf:2d:a7:
2f:a0:19:06:42:30:5b:a1:a2:96:b6:dc:28:c6:9b:
70:4f:3d:d0:ec:47:20:4a:ce:c7:a0:a5:ed:b3:9e:
21:5e:b2:55:04:64:9f:f3:54:65:75:70:af:88:e0:
92:35:40:6e:27:77:13:1d:94:1d:21:47:4b:df:75:
b7:64:53:ec:7d:2c:21:1c:62:62:09:74:f3:4a:95:
13:6a:9d:66:94:78:68:6b:19:e8:a4:6f:e8:d9:7b:
00:c5:0c:1d:dc:4b:e4:c7:db:32:16:95:d1:3c:2d:
b2:c6:bb:e4:2f:5b:f8:db:f5:71:bf:e5:b7:49:23:
40:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:77:FE:08:0C:76:55:E1:87:41:99:E2:45:25:2D:5A:0F:86:C4:22
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS49592.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.194.84.0/22
94.194.128.0/22
94.194.168.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:06:b5:72:e2:38:8c:fc:a0:08:14:de:42:4b:d0:a2:bb:0b:
56:dc:2a:0b:bd:75:91:eb:4d:dc:6f:ce:23:8b:8d:3d:a3:7c:
e2:83:6b:c3:d9:2e:6b:21:42:0c:c2:6a:a9:74:bb:44:59:0e:
2e:5f:f6:3e:9c:4f:57:99:4f:6b:83:06:14:0e:d9:f5:c5:7e:
c4:5c:0d:87:33:15:5a:a4:c8:b8:ba:08:58:19:76:d2:cd:f4:
65:da:02:64:2f:17:be:27:5c:d3:82:22:2e:29:15:fa:18:be:
5e:e6:dd:02:96:c7:4f:22:17:44:74:48:88:63:2e:15:9e:51:
0a:f5:37:1e:4e:81:62:0a:43:bd:e3:02:99:07:41:50:cc:e4:
44:37:36:e6:96:bc:65:a6:44:52:1b:3d:fc:1f:c6:53:54:5e:
cd:14:8b:13:3c:dc:ac:f1:07:99:ce:ba:aa:f2:b4:e2:c3:1e:
7f:76:79:13:cf:15:63:1c:ac:c7:ec:c4:58:66:17:af:f8:66:
aa:2f:d6:a4:22:e3:c7:52:29:8b:cf:d3:50:e3:d9:60:d6:11:
37:73:20:ac:18:a6:69:ab:08:15:f5:d9:e0:ab:1d:e4:f8:cc:
51:d8:f2:3e:94:57:a3:8b:e1:12:96:d6:7e:9f:b2:3c:a2:fd:
04:14:83:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:04:08 2026 by rpki-client