Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32342d3234203d3e20323632323837.roa
File: 36322e3139322e3137322e302f32342d3234203d3e20323632323837.roa (raw, json)
Hash identifier: 2GimDrI+u19G9USJIxEoIwe+FIkjWzBTs+tdLgZWAyE=
Subject key identifier: 76:23:EB:E0:5F:9D:B1:7A:22:0D:C5:81:BE:86:E3:D2:B5:9E:56:4C
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 7EC42329E56354A9D9B4CD75FD6B9D2464E84925
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32342d3234203d3e20323632323837.roa
Signing time: Wed 13 Aug 2025 07:44:39 +0000
ROA not before: Wed 13 Aug 2025 07:39:39 +0000
ROA not after: Wed 12 Aug 2026 07:44:39 +0000
asID: 262287
IP address blocks: 62.192.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:17:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:c4:23:29:e5:63:54:a9:d9:b4:cd:75:fd:6b:9d:24:64:e8:49:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Aug 13 07:39:39 2025 GMT
Not After : Aug 12 07:44:39 2026 GMT
Subject: CN=7623EBE05F9DB17A220DC581BE86E3D2B59E564C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:3b:ee:6f:fb:c4:44:4c:38:81:cf:ab:47:
b9:c8:36:1a:34:f0:da:fa:36:ef:3a:2e:05:17:82:
dc:8c:ac:df:d7:ee:a3:7b:41:10:9f:66:ef:dd:f5:
8c:2d:80:f7:56:8f:8d:a2:9a:2e:76:5d:52:70:3d:
c9:d3:e7:27:71:e6:6f:1f:ff:0f:74:eb:fa:21:06:
77:d7:5d:bb:06:47:7a:fa:92:3b:d3:38:9c:fb:bb:
be:40:31:13:31:ce:c8:de:6e:2b:97:9b:8d:1f:fe:
54:be:52:0a:7c:83:db:8f:fc:09:e9:8d:ef:37:a5:
60:d7:35:ad:e3:e3:6d:7b:fe:9b:45:65:f2:00:53:
c9:bb:26:25:fe:90:ae:3d:de:09:ce:de:72:e4:e4:
43:00:44:4a:e1:8b:71:dc:9a:1f:c0:22:15:2b:92:
33:bb:d8:99:49:65:02:c5:ee:99:c9:47:67:97:8f:
94:a5:38:d6:36:7d:87:a6:a1:4c:8e:ae:9c:79:36:
29:2d:b8:d8:24:62:ed:8e:98:4b:79:99:82:30:76:
4a:97:99:7c:e4:96:79:fc:1c:27:03:e9:db:c9:21:
fa:73:40:75:b1:4b:83:b4:b0:25:a6:3d:ee:10:e1:
6a:55:98:87:44:65:16:d6:fe:ed:04:1d:c2:8d:74:
53:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:23:EB:E0:5F:9D:B1:7A:22:0D:C5:81:BE:86:E3:D2:B5:9E:56:4C
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137322e302f32342d3234203d3e20323632323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.172.0/24
Signature Algorithm: sha256WithRSAEncryption
03:f0:7b:58:02:59:4d:0d:06:d1:e7:cb:0d:fa:4d:49:95:c4:
04:aa:61:67:4a:85:f5:d2:04:e1:a1:03:1c:94:9f:65:78:9e:
af:8e:5c:88:2f:50:db:1e:d7:f1:b8:bf:49:f6:cd:0a:c5:67:
8c:a4:2e:d9:b2:0c:5f:88:73:bb:34:32:c9:cd:70:93:d0:a6:
5d:a0:c8:eb:16:1f:d2:dd:8e:00:07:77:9f:4b:bc:50:82:1e:
47:e7:57:6d:6f:5f:dc:6f:93:99:35:52:92:f8:f5:2c:6f:78:
f3:1f:ef:d0:be:30:9f:28:0f:cd:35:97:7f:6b:d8:22:8c:38:
78:a2:c2:a5:29:48:3f:1a:e0:0a:93:65:7d:40:7e:75:48:52:
45:12:70:41:87:8a:6d:de:99:4b:e2:a8:9d:8d:b2:be:3c:51:
24:df:ef:fe:fa:3b:c8:ad:fb:37:50:2c:03:45:96:e2:73:83:
3e:ad:f2:04:48:8b:12:cd:02:60:b3:09:7f:37:1f:b1:46:f4:
a5:4e:01:e9:2a:ea:93:c5:b8:44:9f:22:5e:b5:3a:e4:64:63:
9c:0b:11:a1:bc:f4:9c:e0:9f:e0:dc:64:01:8a:c1:32:19:2e:
48:86:55:11:5e:00:2f:f6:24:73:59:32:54:c8:9a:09:5f:8e:
da:d4:12:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:37:24 2025 by rpki-client