Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS49847.roa
File: AS49847.roa (raw, json)
Hash identifier: oHN0M8Xs+8432qtZ2/VKD0jeIPgEbtX3y5tXe/3lm58=
Subject key identifier: 9E:9F:22:70:9B:FD:F4:5C:7E:8B:4C:B8:B5:65:CA:37:AB:7C:16:E5
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 3131E108DBCCF795B09D13542515BC50EAB53E5D
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS49847.roa
Signing time: Sat 14 Nov 2026 01:54:31 +0000
ROA not before: Sat 14 Nov 2026 01:49:31 +0000
ROA not after: Sat 13 Nov 2027 01:54:31 +0000
asID: 49847
IP address blocks: 177.122.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:31:e1:08:db:cc:f7:95:b0:9d:13:54:25:15:bc:50:ea:b5:3e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Nov 14 01:49:31 2026 GMT
Not After : Nov 13 01:54:31 2027 GMT
Subject: CN=9E9F22709BFDF45C7E8B4CB8B565CA37AB7C16E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c7:88:f4:f5:64:2a:82:ef:65:d5:1d:cb:ff:
c3:cb:fa:cf:c7:87:de:1c:b5:57:2e:cd:3d:6b:2e:
fe:17:39:6b:61:86:af:dd:52:f0:bf:f0:83:be:81:
4b:4a:b9:04:fa:20:b0:b9:3c:18:0b:62:c1:a6:2d:
18:c1:27:b4:3d:76:6d:41:56:f8:94:93:b0:8c:4d:
9e:8a:c3:71:38:01:33:b9:fc:a3:2b:9f:b4:84:e8:
e6:51:2e:94:a2:9e:09:0d:a4:9d:dd:a6:77:17:e9:
f7:11:4d:37:57:95:9e:e0:21:54:64:36:88:93:65:
ef:3e:1d:c0:85:6d:dc:71:2a:44:0e:2d:30:73:04:
84:d2:e9:31:61:25:4a:9b:83:ad:89:1a:52:d6:8e:
66:73:c2:79:21:4b:85:20:61:42:98:31:5e:ef:29:
c9:2c:f8:3f:4c:6d:00:bb:78:ae:d5:cb:b7:1f:66:
1a:87:7a:1a:15:b5:82:d4:40:6c:76:ff:98:c1:97:
cb:8f:ca:80:79:54:33:ba:41:a1:23:86:a1:cf:44:
59:9f:2d:5c:2d:29:0e:c5:a3:c3:ba:fe:7b:ed:f3:
85:4e:10:9e:37:90:5d:0b:c0:63:13:58:d5:d5:c3:
fd:41:1b:18:8e:18:d2:34:61:49:15:ff:d6:72:ff:
70:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9F:22:70:9B:FD:F4:5C:7E:8B:4C:B8:B5:65:CA:37:AB:7C:16:E5
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS49847.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.122.207.0/24
Signature Algorithm: sha256WithRSAEncryption
59:58:3d:23:20:9c:d2:b2:04:60:cc:65:4b:a7:de:ae:c5:31:
d8:03:32:cd:7a:8e:e5:d8:8d:ea:63:e1:31:32:71:5c:7f:2e:
ae:f5:d2:e9:42:cf:93:4f:d9:a4:2a:48:5f:4f:e0:e0:84:dd:
24:eb:2a:29:55:f7:f9:e7:ea:e6:4d:d0:35:c3:77:18:a4:bc:
66:27:77:7d:42:84:9e:20:03:3a:ea:d2:d8:af:95:3b:4c:c8:
c5:3d:89:14:88:2a:38:30:75:7b:ed:b0:40:43:94:53:d3:6b:
49:b8:84:ff:55:f7:f4:83:f8:85:97:62:3a:f1:74:d8:58:e2:
40:4e:51:62:01:b3:24:93:ba:03:ad:b1:a9:69:93:fc:96:b4:
35:e4:a0:5a:cd:da:d3:27:6e:56:58:5a:bd:f1:70:1d:ae:3c:
62:44:02:a0:0d:ce:b5:dc:80:c6:2f:88:81:40:63:33:91:2a:
ae:7a:7c:f7:1b:92:a1:cb:ce:2a:a5:1c:b6:bb:7a:c3:26:43:
b2:88:e2:3d:68:b7:0e:33:11:03:37:9c:ec:96:18:27:b6:e4:
fe:dd:29:83:54:6f:72:90:1e:5e:83:af:eb:c8:cf:e3:31:67:
db:b0:d4:0a:46:25:b4:66:a4:a5:90:0b:b1:99:e4:70:7b:43:
2f:3b:2d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:02:45 2026 by rpki-client