Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/36322e332e382e302f32342d3234203d3e20323031333431.roa
File: 36322e332e382e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: NBYfQXm6FyH3NOxGe6RUlRWqvyAHkI33fGn/P0lL3pE=
Subject key identifier: AE:7E:0B:8A:06:77:1A:0A:68:52:0A:E2:4E:BC:F6:B9:41:F9:09:4E
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 38DA84A3280E3C6290EEFFD677E901277115BD00
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/36322e332e382e302f32342d3234203d3e20323031333431.roa
Signing time: Fri 30 Oct 2026 12:31:26 +0000
ROA not before: Fri 30 Oct 2026 12:26:26 +0000
ROA not after: Fri 29 Oct 2027 12:31:26 +0000
asID: 201341
IP address blocks: 62.3.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:da:84:a3:28:0e:3c:62:90:ee:ff:d6:77:e9:01:27:71:15:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 30 12:26:26 2026 GMT
Not After : Oct 29 12:31:26 2027 GMT
Subject: CN=AE7E0B8A06771A0A68520AE24EBCF6B941F9094E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f4:db:f7:eb:3c:82:6d:e8:f0:e6:90:37:50:
08:c4:9f:f0:6c:45:00:ae:6f:25:f3:c8:b9:7b:1e:
d2:b1:49:14:6d:97:b8:74:87:8b:e6:df:b3:4d:83:
7d:5b:2c:df:e0:69:f6:a5:a9:fc:53:dd:6d:3e:7e:
b2:48:7d:c2:33:4a:c2:13:b6:f5:4d:0d:7b:55:a5:
a9:95:8e:38:c7:5e:91:03:83:54:36:bf:11:4f:b7:
ce:d3:40:64:60:bc:ec:36:dd:21:44:9f:cb:bf:19:
e0:f7:c8:12:20:af:90:9d:1a:36:04:7b:d1:41:1c:
93:93:6c:cf:7c:bc:1c:f3:99:f1:54:25:af:47:57:
86:9c:e6:3d:33:ab:a3:0e:95:cc:de:49:af:9a:0c:
78:23:8e:52:33:0c:90:f6:76:62:91:96:76:d3:96:
6b:39:7a:b9:b7:17:ce:bc:fa:c8:16:a0:b1:d2:e1:
41:dd:d6:c0:4d:c6:b1:91:30:59:70:2b:a0:f3:52:
1b:45:be:f5:0a:e8:ac:4d:a2:82:8a:c9:c4:3c:74:
21:95:4d:6c:8d:c6:2a:7b:ff:66:88:f1:1d:d2:63:
71:0e:0b:2e:bc:d6:bf:88:cc:81:3c:3f:37:c6:f1:
1a:b6:a6:37:8f:c1:f1:a2:b4:4b:21:3a:9e:fb:bf:
8f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7E:0B:8A:06:77:1A:0A:68:52:0A:E2:4E:BC:F6:B9:41:F9:09:4E
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/36322e332e382e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.8.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:35:d8:4c:e0:17:b9:b3:9d:c1:98:a3:28:78:99:ba:7d:7f:
c7:dc:da:93:04:06:05:88:04:3f:71:8a:db:a7:ed:bb:e4:23:
eb:9a:de:31:c5:d8:b9:59:78:21:1f:dd:e2:8d:89:fa:6a:d6:
ae:73:9b:4d:d3:69:a6:39:21:bd:25:7d:03:04:54:ca:0f:97:
1b:4e:57:78:83:e7:7d:59:fb:4e:41:80:0f:71:a6:b4:e4:68:
2c:5b:61:98:3c:16:13:30:80:4b:17:7a:23:cb:86:40:df:27:
fb:e9:ae:87:c0:f4:49:e2:a5:a2:fb:a8:01:6a:56:75:c2:5c:
ce:e8:32:0c:85:aa:62:6b:16:6f:cb:9a:5f:31:1e:59:6c:1e:
f5:73:55:97:ca:68:9d:a2:33:20:b2:63:72:40:52:1b:4d:45:
8f:4f:09:eb:70:42:6a:27:74:77:69:6a:61:f7:db:f7:5a:54:
8c:65:56:ce:c7:c7:f5:7c:ff:6c:76:8b:e7:d3:c6:b8:b4:63:
24:ea:38:ce:b5:2e:86:c7:31:e9:51:ba:5d:75:9f:35:ce:2c:
e8:f1:8e:34:78:c5:aa:ad:e2:20:12:53:9b:22:86:de:ca:6d:
40:62:51:68:3c:d4:8e:f0:e4:7c:ee:70:6e:51:c6:2b:ac:bc:
58:f6:36:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:47:16 2026 by rpki-client