Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32342d3234203d3e20323632323837.roa
File: 36322e3139322e3137322e302f32342d3234203d3e20323632323837.roa (raw, json)
Hash identifier: /DmT9jDgPBJnORjXPqoO2OikZb1TZUdRaJAnGGErjQc=
Subject key identifier: 13:15:3F:40:34:C4:CE:D7:21:B2:0F:83:89:C2:DC:16:01:6D:41:8E
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 0DFB7E8E79147DC9AEBC8867EF0AE36408B2197F
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32342d3234203d3e20323632323837.roa
Signing time: Wed 15 Jul 2026 07:49:11 +0000
ROA not before: Wed 15 Jul 2026 07:44:11 +0000
ROA not after: Wed 14 Jul 2027 07:49:11 +0000
asID: 262287
IP address blocks: 62.192.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:fb:7e:8e:79:14:7d:c9:ae:bc:88:67:ef:0a:e3:64:08:b2:19:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Jul 15 07:44:11 2026 GMT
Not After : Jul 14 07:49:11 2027 GMT
Subject: CN=13153F4034C4CED721B20F8389C2DC16016D418E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:09:ed:c7:0e:e7:23:4b:a6:10:c0:9a:fb:
ec:e4:2a:3a:db:a8:f2:d2:47:f8:f0:3a:b1:e0:70:
b1:e2:b9:da:27:44:77:28:80:52:bc:f2:c6:c1:a7:
46:b6:52:3c:48:8d:64:4f:82:12:97:e8:0c:95:8d:
b2:0e:e4:ed:39:af:0d:8c:b1:dd:3e:13:3d:b6:f5:
af:94:30:e4:60:8d:af:f4:85:be:d7:08:89:44:a2:
8c:60:75:7a:49:0c:bf:3c:d3:ae:93:b8:e0:38:d4:
e0:02:10:c8:b6:72:07:08:2a:92:fc:d8:51:56:52:
c9:ba:73:e0:f1:16:26:0c:38:13:66:78:55:b8:03:
ca:57:c4:a2:d7:54:10:09:93:0d:1b:95:fe:7a:44:
04:0e:83:d3:08:9f:d9:b8:4c:a8:a9:e0:08:50:49:
63:86:d6:bf:d9:1b:d5:3f:56:20:03:c3:96:cb:62:
08:4e:65:11:b4:dc:8e:b6:8e:a6:08:4f:04:f7:04:
96:88:fc:82:ec:3f:c7:66:b2:98:b8:02:c6:0d:98:
24:40:e5:ff:cb:3d:49:74:f2:d5:0f:3c:68:3b:7e:
e6:3e:6b:cd:fd:41:f3:96:ef:3e:0a:0d:b2:3f:b6:
7d:a4:9e:9c:2f:1a:5b:2e:22:72:06:6f:fa:d7:21:
83:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:15:3F:40:34:C4:CE:D7:21:B2:0F:83:89:C2:DC:16:01:6D:41:8E
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32342d3234203d3e20323632323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.172.0/24
Signature Algorithm: sha256WithRSAEncryption
74:88:1e:b8:7b:50:9a:82:e1:27:90:5d:ee:1c:bd:a6:9f:47:
7b:ff:d0:ee:93:2a:c1:6b:1b:32:01:95:d0:10:7c:9e:be:58:
49:40:7c:b9:fc:b0:05:d9:6b:4c:43:00:ae:a3:3e:78:5c:6a:
f1:9a:fa:3c:94:c8:49:be:51:4a:c6:bd:49:f3:7b:d8:e9:ba:
a1:c8:83:31:df:72:fc:eb:13:3f:4e:8e:58:5f:37:3b:38:56:
00:7a:7b:33:83:fa:f1:75:c7:8c:04:d4:94:28:8f:29:86:2a:
23:1f:db:0c:c0:55:22:ad:1c:8d:6a:c5:83:49:1c:97:ae:15:
0d:a9:93:40:e4:88:4b:21:9f:2f:08:ca:8b:c4:4d:77:17:80:
38:26:56:57:7a:ff:d9:aa:80:f1:d2:1c:03:30:97:8e:e1:b8:
72:46:74:5d:05:c7:d9:47:8f:aa:ed:00:ea:e8:10:95:0f:6b:
f0:1e:6b:75:7a:9d:0e:aa:8a:59:a6:62:99:d8:97:74:f8:22:
c7:a4:e3:0d:65:5f:e6:1e:2d:21:ee:d6:c8:75:ac:a8:ab:1b:
0a:42:ce:ad:55:ec:56:3b:aa:22:ec:66:bc:69:6a:1d:ab:9c:
91:af:81:25:10:c9:0d:13:a3:23:40:f2:8b:9c:f7:b9:a9:b3:
b5:94:a5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:59:31 2026 by rpki-client