Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/36322e3138322e3139322e302f32312d3234203d3e203432353332.roa
File: 36322e3138322e3139322e302f32312d3234203d3e203432353332.roa (raw, json)
Hash identifier: k22wzf+MNF3rdZwWDi2NJmXkW92pMk1IiR0y5N9dN8c=
Subject key identifier: B3:C7:89:48:19:25:EC:80:A7:21:1B:2B:64:1E:B9:F1:1C:9E:B7:02
Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057
Certificate serial: 64726E7983E30FD728E37895F36A31CD3C9F831D
Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/36322e3138322e3139322e302f32312d3234203d3e203432353332.roa
Signing time: Mon 06 Apr 2026 19:21:20 +0000
ROA not before: Mon 06 Apr 2026 19:16:20 +0000
ROA not after: Mon 05 Apr 2027 19:21:20 +0000
asID: 42532
IP address blocks: 62.182.192.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:17:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:72:6e:79:83:e3:0f:d7:28:e3:78:95:f3:6a:31:cd:3c:9f:83:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057
Validity
Not Before: Apr 6 19:16:20 2026 GMT
Not After : Apr 5 19:21:20 2027 GMT
Subject: CN=B3C789481925EC80A7211B2B641EB9F11C9EB702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6d:fe:64:37:60:0b:ee:a0:01:d0:23:4e:5b:
fb:d5:54:81:79:f6:5b:52:25:c4:74:54:6b:40:6e:
b1:d3:3d:8b:6c:7e:91:f8:85:80:a0:22:8d:3e:82:
7a:ab:ab:12:7d:f0:c2:0f:69:95:d8:06:5a:c9:33:
2d:4c:47:d8:0b:3d:f4:9d:72:82:6e:0e:d5:6c:16:
7c:89:38:ee:d8:52:bf:2c:f8:38:21:01:cd:21:4f:
ef:43:bc:f9:15:6f:5f:b2:bd:24:2b:65:06:1d:e4:
b2:56:3f:6a:69:23:cf:70:fe:55:aa:2e:8b:93:6e:
6e:83:64:63:a9:0f:44:0f:bc:9a:5e:ea:1c:f7:1a:
e2:53:eb:be:c4:85:12:31:dd:af:19:f9:27:4a:60:
00:8d:9a:d8:b0:10:bf:a7:e8:17:e5:33:55:77:74:
5f:fa:6e:62:6e:4a:0d:22:90:a9:30:3f:e6:58:f2:
45:82:9b:78:08:23:70:ab:fe:e8:dd:62:e7:d5:07:
9e:8e:c8:b8:6b:8e:57:bd:35:c0:bd:73:a5:f3:b7:
43:fe:82:a5:b6:80:66:f3:b9:42:1a:75:65:c4:cf:
75:19:df:7d:1e:48:6d:c3:84:7a:45:ca:c0:99:d9:
02:5b:94:7d:4e:4d:99:e6:dd:d4:a6:cd:e2:9a:54:
65:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C7:89:48:19:25:EC:80:A7:21:1B:2B:64:1E:B9:F1:1C:9E:B7:02
X509v3 Authority Key Identifier:
keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/36322e3138322e3139322e302f32312d3234203d3e203432353332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.192.0/21
Signature Algorithm: sha256WithRSAEncryption
41:36:56:a1:95:cb:99:e5:1b:5d:d9:d2:97:e1:09:e3:09:46:
76:d8:3f:2e:2b:5a:ad:53:71:5e:73:51:c2:42:4e:ae:35:d6:
61:80:af:9c:c4:fb:90:e6:ca:5d:e5:8a:eb:b4:bc:65:97:2c:
28:d6:e7:9a:ed:d8:3e:39:94:9b:20:45:a5:5f:6a:a5:a8:a3:
5b:34:7d:75:92:c4:9a:95:4b:8f:db:94:fe:63:fb:e9:52:5e:
12:b8:ff:a8:bc:88:31:6b:76:82:24:14:e3:e9:7a:76:7d:42:
d7:4c:03:c3:20:9d:12:b6:ff:d8:70:ae:46:20:d1:d0:01:bb:
4a:40:f1:2b:b9:78:ba:2c:a8:cd:00:2f:90:47:b4:95:fb:9f:
4c:6c:8c:9d:78:22:d2:20:05:3c:03:e3:9e:f3:3f:f3:c1:f2:
21:df:01:9c:1d:66:fd:67:b5:5c:e6:ab:f8:4e:4b:8f:be:d6:
2a:df:7a:5b:9b:7d:cb:08:ee:8d:b0:3b:8f:34:ee:37:8b:47:
1c:37:7e:dd:2d:13:2c:ca:7a:eb:f4:45:a7:f1:e8:d3:aa:95:
20:7b:8f:72:fa:bd:15:6c:cd:5e:c0:23:2e:3f:dc:f4:9f:9d:
60:ed:a4:b7:53:ed:81:6b:c9:1e:a1:e5:f2:b4:b6:7a:c7:53:
a9:ab:69:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:06:23 2026 by rpki-client