Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/36322e332e34352e302f32342d3234203d3e20313336373837.roa
File: 36322e332e34352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 5NQjaMAVNeBB7EhlPcl57iRnj4wX9Z0TnAXC+9h419o=
Subject key identifier: 93:DA:44:F3:7C:35:5E:A8:9D:60:CC:D3:44:27:18:59:B7:03:78:63
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 68C118AABE4E8FB85F72EAD73588E8177040AE72
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/36322e332e34352e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 02 Nov 2026 16:32:59 +0000
ROA not before: Mon 02 Nov 2026 16:27:59 +0000
ROA not after: Mon 01 Nov 2027 16:32:59 +0000
asID: 136787
IP address blocks: 62.3.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 22:05:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:c1:18:aa:be:4e:8f:b8:5f:72:ea:d7:35:88:e8:17:70:40:ae:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Nov 2 16:27:59 2026 GMT
Not After : Nov 1 16:32:59 2027 GMT
Subject: CN=93DA44F37C355EA89D60CCD344271859B7037863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9e:81:50:d9:e2:5e:e8:ad:3b:38:ad:08:dd:
35:35:cb:8e:88:bb:bd:42:54:07:b4:ca:86:c8:1e:
f1:bf:ee:3c:3f:ca:fd:9b:96:a8:32:c1:b0:8d:fb:
ba:f8:e2:34:61:7a:59:6d:8f:79:f2:49:f7:ca:1f:
0f:69:d4:ef:04:b2:0f:62:56:7d:ac:be:08:c3:3f:
2a:c1:00:d3:b7:10:16:02:af:cf:07:89:31:bf:e9:
63:ec:e3:82:73:c0:1a:74:8d:79:b2:db:d2:e1:e3:
86:70:92:cd:cb:b5:8b:a3:61:3f:8b:0f:9f:3f:f6:
5c:c1:4a:b0:a2:af:6e:d0:1c:d4:50:10:76:b7:79:
c8:7a:98:af:59:3d:64:aa:43:c8:b4:99:81:68:97:
3e:18:bc:24:02:7a:5e:78:a9:76:26:1c:0b:36:dd:
db:13:18:fd:a8:38:65:b5:61:59:3d:e5:c0:9d:64:
34:57:31:a4:b9:c4:6c:e3:80:c3:2a:f6:a6:88:3a:
a7:6b:9e:39:3e:73:05:2a:cc:b5:5e:2c:c7:42:8e:
51:a8:b5:03:ba:b9:72:b1:b0:b0:5c:f0:14:eb:52:
ba:64:7e:fa:e8:6e:0c:38:19:56:3a:c9:cb:bf:03:
75:b1:b6:cc:6c:03:d7:69:4e:9b:88:55:b9:75:0a:
23:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DA:44:F3:7C:35:5E:A8:9D:60:CC:D3:44:27:18:59:B7:03:78:63
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/36322e332e34352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.45.0/24
Signature Algorithm: sha256WithRSAEncryption
16:88:ed:a2:b2:30:1e:ab:c1:e8:a4:ad:9a:9e:30:fc:e0:6f:
5e:a4:a8:da:45:1d:1c:d9:a9:0e:e1:8c:3c:c0:46:4a:6f:c1:
47:47:d4:82:ad:cb:db:12:b4:23:3c:24:22:fb:8d:12:ec:de:
d2:cb:49:dc:01:29:ae:83:46:3b:f2:57:c8:59:b4:15:09:73:
5d:e2:92:ac:26:be:39:98:cd:94:bf:26:12:68:75:1c:32:44:
b9:75:71:ab:05:86:be:51:1a:38:e7:fa:95:9a:c5:1f:fb:e4:
4a:32:db:89:99:5e:c0:5d:7f:41:01:fd:d4:e5:e1:af:0c:be:
ee:f1:30:ea:cc:e9:74:d8:12:4b:01:06:8f:b1:78:6d:e7:be:
7d:f2:d2:ba:2d:80:d1:bb:49:75:6f:c5:be:ca:31:47:06:52:
5c:e5:3b:7d:b4:ff:84:c6:8b:34:af:0b:20:13:4a:e8:16:20:
7b:2d:b3:7c:31:14:5c:bd:08:67:6c:b9:63:dc:1d:0c:04:92:
e3:ef:68:68:91:37:be:72:b5:6f:6c:4a:ca:5e:c0:19:8c:26:
a5:32:fc:20:da:a1:a2:8f:dc:b5:af:36:47:20:69:74:b6:7b:
d6:84:3c:c9:c8:4c:58:9a:7c:26:9c:4f:ae:07:58:2d:c6:bf:
41:c8:57:76
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUaMEYqr5Oj7hfcurXNYjoF3BArnIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNjExMDIxNjI3NTlaFw0yNzExMDExNjMyNTlaMDMxMTAvBgNV
BAMTKDkzREE0NEYzN0MzNTVFQTg5RDYwQ0NEMzQ0MjcxODU5QjcwMzc4NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsnoFQ2eJe6K07OK0I3TU1y46I
u71CVAe0yobIHvG/7jw/yv2blqgywbCN+7r44jRhelltj3nySffKHw9p1O8Esg9i
Vn2svgjDPyrBANO3EBYCr88HiTG/6WPs44JzwBp0jXmy29Lh44Zwks3LtYujYT+L
D58/9lzBSrCir27QHNRQEHa3ech6mK9ZPWSqQ8i0mYFolz4YvCQCel54qXYmHAs2
3dsTGP2oOGW1YVk95cCdZDRXMaS5xGzjgMMq9qaIOqdrnjk+cwUqzLVeLMdCjlGo
tQO6uXKxsLBc8BTrUrpkfvrobgw4GVY6ycu/A3WxtsxsA9dpTpuIVbl1CiPRAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUk9pE83w1XqidYMzTRCcYWbcDeGMwHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzYzMjJlMzMyZTM0MzUyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA+Ay0w
DQYJKoZIhvcNAQELBQADggEBABaI7aKyMB6rweikrZqeMPzgb16kqNpFHRzZqQ7h
jDzARkpvwUdH1IKty9sStCM8JCL7jRLs3tLLSdwBKa6DRjvyV8hZtBUJc13ikqwm
vjmYzZS/JhJodRwyRLl1casFhr5RGjjn+pWaxR/75Eoy24mZXsBdf0EB/dTl4a8M
vu7xMOrM6XTYEksBBo+xeG3nvn3y0rotgNG7SXVvxb7KMUcGUlzlO320/4TGizSv
CyATSugWIHsts3wxFFy9CGdsuWPcHQwEkuPvaGiRN75ytW9sSspewBmMJqUy/CDa
oaKP3LWvNkcgaXS2e9aEPMnITFiafCacT64HWC3Gv0HIV3Y=
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:28:50 2026 by rpki-client