Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137332e302f32342d3234203d3e2038313030.roa
File: 36322e3139322e3137332e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier: KdtoWFKZmupxeYv8ZtH2UnlJsLJFh2Np3sbeCuilvNs=
Subject key identifier: 56:14:A1:2E:98:3C:2E:49:18:AB:B6:19:DF:51:F6:B7:FB:03:D7:7A
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 118E0DD60B4134A021618CC3EBC667F59FBFBF0C
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137332e302f32342d3234203d3e2038313030.roa
Signing time: Sun 21 Jun 2026 06:47:47 +0000
ROA not before: Sun 21 Jun 2026 06:42:47 +0000
ROA not after: Sun 20 Jun 2027 06:47:47 +0000
asID: 8100
IP address blocks: 62.192.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:8e:0d:d6:0b:41:34:a0:21:61:8c:c3:eb:c6:67:f5:9f:bf:bf:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Jun 21 06:42:47 2026 GMT
Not After : Jun 20 06:47:47 2027 GMT
Subject: CN=5614A12E983C2E4918ABB619DF51F6B7FB03D77A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0e:42:92:0c:8e:24:5f:66:03:da:42:d9:ae:
e2:e7:93:71:40:4b:c4:7b:75:f9:a7:d7:ae:32:82:
9a:d8:e1:e0:e4:82:fe:f0:9a:10:49:2e:2a:a9:30:
65:f0:79:38:c0:cf:60:dc:68:b5:7b:4a:93:37:b0:
be:53:0f:8c:1a:5b:a1:07:81:4a:fd:ee:b3:01:22:
98:b8:12:a8:e8:8e:d9:9c:67:08:ee:60:24:06:2d:
ba:79:a1:97:26:0e:9f:c6:3e:3f:67:ea:2c:dc:74:
2e:4a:40:83:f0:a9:2e:77:de:dd:b0:f3:ab:05:dd:
be:a0:5f:1c:08:fc:ee:04:d9:96:7a:df:59:2b:98:
49:11:8b:dd:3f:5e:a0:fd:98:02:f9:09:5f:4f:fb:
39:eb:ac:9a:75:f1:ca:ac:74:b7:69:b8:b5:21:97:
38:16:18:b2:06:0e:e0:8b:77:f6:9b:cf:a3:a9:cd:
4a:97:da:aa:3c:28:8a:1c:fe:d1:a6:a9:d1:e6:e8:
54:dd:cc:61:48:22:9c:43:29:30:9d:52:03:45:df:
4b:49:3b:93:a4:2a:0e:d9:3a:1c:3d:b3:8c:dc:fa:
b8:df:e9:f4:45:e2:b2:b4:07:e8:78:d8:3c:9f:df:
1d:cb:08:ae:04:73:c2:04:da:da:53:01:61:45:ee:
ab:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:14:A1:2E:98:3C:2E:49:18:AB:B6:19:DF:51:F6:B7:FB:03:D7:7A
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137332e302f32342d3234203d3e2038313030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.173.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:b1:82:e0:28:1e:af:1c:e1:d6:b7:44:d3:c3:7b:66:8c:a3:
6b:4f:11:3e:7c:e2:02:05:27:ea:be:bc:04:6d:c6:94:96:e2:
2b:3d:cb:ef:22:e1:b2:cd:61:4d:75:27:22:a5:f9:30:d9:43:
c8:a9:42:fd:9f:fe:87:f5:ea:66:72:8a:78:44:51:7e:9e:22:
da:7d:20:0e:c4:98:63:2b:8a:be:43:31:95:c0:5f:8b:76:ab:
c9:d9:29:40:38:b8:36:10:78:50:e1:d1:ee:26:c4:0f:2c:db:
f5:46:0b:08:36:b9:54:8b:65:49:10:96:38:42:85:6f:a1:22:
e3:dc:02:9a:2f:ad:5f:8b:66:d9:15:32:01:47:22:c6:6f:5c:
32:db:4e:48:cf:b8:a9:02:fe:84:fb:b8:72:28:4b:bc:92:20:
b5:c5:d3:b3:b4:e6:e8:4d:45:bf:90:25:0f:9d:5f:ba:e9:65:
8d:3c:85:f4:37:46:f2:11:bf:f8:46:62:d1:87:8c:69:bf:32:
9a:0a:8e:ce:a0:47:84:6f:8a:95:f6:33:66:a3:96:21:e7:93:
0e:ba:9a:eb:a8:ab:9a:63:35:55:41:0c:bd:99:90:c1:22:fb:
e1:22:a7:0e:ea:d6:b4:98:83:70:75:28:70:4c:0b:bf:19:44:
56:ca:89:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:41:16 2026 by rpki-client