Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS49981.roa
File: AS49981.roa (raw, json)
Hash identifier: 7y1T1jXJq3JxpHylunjz+qQKpDvC0Po5s9m5BwmMMN4=
Subject key identifier: E4:FB:96:88:D8:49:9F:02:4E:95:FF:01:37:92:7E:ED:88:09:3A:CB
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6125B4AA0368B93E9DC1CF6E92DB4FB3979C36CB
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS49981.roa
Signing time: Tue 25 Aug 2026 10:44:07 +0000
ROA not before: Tue 25 Aug 2026 10:39:07 +0000
ROA not after: Tue 24 Aug 2027 10:44:07 +0000
asID: 49981
IP address blocks: 91.124.209.0/24 maxlen: 24
95.135.200.0/24 maxlen: 24
178.95.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:25:b4:aa:03:68:b9:3e:9d:c1:cf:6e:92:db:4f:b3:97:9c:36:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 25 10:39:07 2026 GMT
Not After : Aug 24 10:44:07 2027 GMT
Subject: CN=E4FB9688D8499F024E95FF0137927EED88093ACB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:23:6e:dc:0d:07:5b:c7:bc:44:eb:34:3b:56:
ca:a4:b1:e7:80:f9:bf:6c:bb:56:1b:c3:ef:18:a4:
7f:1b:bb:33:10:79:8d:3b:2c:0e:0b:4a:23:43:16:
41:ec:09:2f:46:dd:6b:90:49:16:ec:2c:0c:43:91:
4d:0a:68:d0:69:f7:26:7e:f1:bb:dd:e8:57:fb:f6:
a8:98:6d:c8:38:fe:19:d1:90:0d:8a:02:34:7c:72:
ba:16:f8:62:7a:0f:40:d9:47:8f:2f:4b:92:11:f9:
aa:6f:54:c8:66:fc:96:8e:5d:04:97:d6:a0:40:bb:
74:a9:a6:83:1e:2c:af:13:93:10:c3:0f:4a:86:64:
69:b3:70:08:13:98:0c:b1:7a:f9:92:95:a9:53:80:
31:a2:f2:fe:24:3f:43:c2:c2:a3:47:fd:39:92:0d:
d5:fd:cb:23:60:59:03:b9:30:93:2f:96:c6:5a:8d:
84:66:e9:72:37:0e:8c:22:cc:e4:4b:77:12:41:f9:
94:ad:49:c0:f5:3e:eb:a3:13:ee:c9:eb:e6:39:42:
07:e5:ba:7b:9f:56:ad:a8:29:f3:44:10:4c:40:3f:
86:d1:89:ec:b7:1c:49:1e:5b:84:3a:9b:d7:d8:42:
1f:48:65:04:c4:e0:33:45:e2:d7:de:fe:94:41:dc:
9e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FB:96:88:D8:49:9F:02:4E:95:FF:01:37:92:7E:ED:88:09:3A:CB
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS49981.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.209.0/24
95.135.200.0/24
178.95.157.0/24
Signature Algorithm: sha256WithRSAEncryption
96:90:80:0e:da:84:3f:82:44:41:bd:78:d6:e2:ca:0d:5e:ec:
ed:d4:f7:b3:b6:84:ea:f7:e2:f4:cf:d8:dd:6a:f9:5d:fb:b3:
77:07:c5:73:e0:db:af:b8:f7:72:e1:97:30:b5:ae:12:bd:d3:
5b:c2:4f:c5:a1:3a:05:5e:1c:41:a2:2b:bb:54:e9:0e:3c:da:
55:ab:36:6e:2b:95:12:ea:77:cd:47:66:79:f1:55:44:55:ef:
26:7a:bf:d5:9a:fa:a7:33:49:d3:e3:42:e4:d6:b9:88:1d:07:
db:94:70:52:c9:32:f2:a0:bf:d3:1e:e9:6d:20:35:76:5b:06:
e8:e0:c4:f4:27:b6:a2:84:3b:2c:4c:41:51:af:ca:b5:87:e9:
c1:8a:b3:cf:18:7a:bc:ba:10:87:50:6e:e5:78:c9:3e:b9:e0:
95:cb:81:45:4d:e4:35:f2:08:af:4b:b0:9d:df:4a:91:dc:81:
71:27:2e:3b:23:a4:b7:11:d7:4f:30:75:e7:a7:6a:6c:70:c3:
f5:92:b3:00:49:ab:a4:2e:6e:c7:3d:b6:02:70:a1:97:97:ed:
82:29:b9:16:56:19:c9:8e:14:34:34:a7:21:38:49:b8:47:cc:
f6:eb:72:e3:69:50:89:c8:a8:9f:09:b8:52:fd:47:cd:ad:ad:
d6:92:51:45
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:34:48 2026 by rpki-client