Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/36322e3132322e3138382e302f32342d3234203d3e203133333437.roa
File: 36322e3132322e3138382e302f32342d3234203d3e203133333437.roa (raw, json)
Hash identifier: R59heAM0isF102GrpYHgNSOZjt5TEoubWayGdTfPAFs=
Subject key identifier: FE:AD:D6:8F:DD:D3:3E:87:EA:90:04:D5:90:B8:98:E6:69:45:B7:62
Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial: 27EE87404D8CA9AE97A01981287A7515C35A615C
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/36322e3132322e3138382e302f32342d3234203d3e203133333437.roa
Signing time: Thu 26 Feb 2026 15:46:30 +0000
ROA not before: Thu 26 Feb 2026 15:41:30 +0000
ROA not after: Thu 25 Feb 2027 15:46:30 +0000
asID: 13347
IP address blocks: 62.122.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ee:87:40:4d:8c:a9:ae:97:a0:19:81:28:7a:75:15:c3:5a:61:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Validity
Not Before: Feb 26 15:41:30 2026 GMT
Not After : Feb 25 15:46:30 2027 GMT
Subject: CN=FEADD68FDDD33E87EA9004D590B898E66945B762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f5:bd:0d:13:21:36:c8:95:77:7c:be:a4:c3:
4c:0e:d2:b5:03:27:16:18:7c:4e:33:39:27:b0:d9:
d7:bc:c4:cd:b3:8a:55:fc:3e:d4:c4:18:0d:b3:c2:
57:40:78:24:88:8a:57:bf:a5:c4:a0:3a:1f:49:6b:
bb:55:56:9d:fd:ce:ca:be:79:d1:55:9a:3a:2a:6f:
59:d1:8b:6b:79:95:05:f1:41:b0:a0:93:9c:0a:89:
0f:1c:5e:f7:8f:9b:1d:d8:ae:a6:6b:60:73:d4:70:
8e:fe:ed:61:d7:62:45:ca:b6:4e:a7:29:f8:04:6f:
9e:a6:b5:26:4d:63:83:f8:7a:e6:39:9d:5a:9f:8c:
30:0c:e4:58:68:e2:5d:f8:e9:94:43:0d:4c:4d:10:
24:47:1b:e9:da:c4:9b:ca:53:05:99:25:9a:12:1e:
6e:73:4a:b7:59:3c:85:4d:ba:21:8c:d6:2b:45:89:
d6:3d:3d:ff:8a:3e:fe:8b:47:52:e3:bf:61:b8:c7:
98:eb:2f:86:8d:c2:66:4a:d6:9f:d5:ad:93:04:42:
d5:2f:21:3a:53:2c:c4:2a:48:b4:48:c1:a6:a0:0d:
50:26:a5:85:5e:0d:04:02:f7:14:6a:6c:db:31:84:
d0:e8:96:9a:51:d4:d9:1b:58:0d:fc:57:10:4b:c4:
ed:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AD:D6:8F:DD:D3:3E:87:EA:90:04:D5:90:B8:98:E6:69:45:B7:62
X509v3 Authority Key Identifier:
keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/36322e3132322e3138382e302f32342d3234203d3e203133333437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.188.0/24
Signature Algorithm: sha256WithRSAEncryption
71:20:0c:57:7b:85:ca:1f:66:49:6f:2c:d0:4b:2d:3e:b1:2d:
60:65:86:55:26:ce:9a:07:6a:de:bd:13:ef:3f:9d:73:d6:22:
29:e7:47:84:d1:71:f4:c3:2c:54:0e:b9:37:41:57:46:ed:15:
95:f2:2d:ec:6c:b6:8b:e7:e0:ed:7a:de:bc:a0:ba:10:d7:ba:
3e:ac:17:71:8b:58:b9:d5:c5:5a:6b:b2:88:c6:34:ec:2e:8c:
46:09:6e:8c:c4:6c:06:ad:51:22:63:67:ac:6f:60:21:01:02:
52:cd:03:47:98:87:bc:e8:13:de:10:f7:16:aa:21:a7:46:9a:
b3:72:aa:2b:f5:0e:1b:8c:a9:05:9a:e0:78:99:d7:2b:3c:c5:
ad:96:82:f9:db:55:58:b6:eb:50:e3:0d:0f:a5:88:78:00:55:
22:45:d1:02:6c:a0:9c:4a:79:17:0b:91:60:1b:f7:a2:a7:11:
c8:99:8d:6b:60:f2:c7:d0:d0:59:b6:7d:9e:62:ca:2f:d9:6f:
2d:6c:9d:7b:ab:47:ae:09:da:40:07:27:c2:10:e0:0f:dc:b2:
bb:bb:52:a4:5a:a7:92:74:b3:35:3d:d2:9c:5b:fe:7d:03:b8:
1f:fb:13:9c:c2:7c:ba:ac:7a:8c:e4:05:00:c3:22:7e:b7:4a:
44:85:70:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:52:17 2026 by rpki-client