Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137352e302f32342d3234203d3e2039303039.roa
File: 36322e3139322e3137352e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: tnNyChr4oxUcnojqJuMajG3DuagFZQP9gO2VaWpCSS0=
Subject key identifier: F4:A9:13:47:AC:C5:16:0F:5F:9D:5B:DA:D8:A9:39:6B:DE:38:28:88
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 0EE95FEDE2264C67912885C115EAE424E995D48C
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137352e302f32342d3234203d3e2039303039.roa
Signing time: Fri 03 Apr 2026 10:35:41 +0000
ROA not before: Fri 03 Apr 2026 10:30:41 +0000
ROA not after: Fri 02 Apr 2027 10:35:41 +0000
asID: 9009
IP address blocks: 62.192.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:e9:5f:ed:e2:26:4c:67:91:28:85:c1:15:ea:e4:24:e9:95:d4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Apr 3 10:30:41 2026 GMT
Not After : Apr 2 10:35:41 2027 GMT
Subject: CN=F4A91347ACC5160F5F9D5BDAD8A9396BDE382888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:60:48:e5:01:cc:29:ea:5a:b2:f7:cc:41:6d:
03:83:ee:4f:a9:72:4d:88:4e:b2:35:3f:ad:fb:2c:
d3:3a:bd:b3:d2:84:d8:37:21:78:cb:77:6a:6f:0e:
c6:c8:ce:c1:79:55:7f:25:27:4a:41:b4:c7:14:b5:
28:f3:56:99:57:d1:00:8e:80:ca:bb:01:2a:c6:b7:
ff:03:94:88:29:49:a8:93:83:37:4b:3c:7c:c9:09:
5d:75:bd:59:4c:ed:6e:b6:db:ca:f4:4a:52:5b:2d:
fd:53:78:26:9d:2e:00:af:e6:0f:95:57:88:1e:be:
c9:d1:b5:29:88:61:da:18:ea:72:eb:d7:12:be:a4:
97:ee:16:24:2a:68:60:f5:84:4e:47:af:19:1b:c4:
f5:a9:fe:47:7a:5a:7f:d4:d2:9b:9f:cd:b6:f1:64:
7a:6e:3a:44:bd:50:00:2a:c1:20:1f:2d:b6:bd:39:
0b:c6:50:43:cf:47:23:3a:95:57:de:62:cb:0e:cb:
f9:71:b7:9a:0d:75:09:c1:1b:0d:b2:2a:6b:0c:9c:
50:6c:a0:a2:a4:e2:0f:14:9e:9c:2d:d1:a0:33:41:
cf:fa:bd:1d:83:12:2f:8f:ab:1d:e3:4f:64:0f:49:
45:bf:a5:9e:cd:13:9a:1e:df:ba:59:ca:5d:24:64:
e1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A9:13:47:AC:C5:16:0F:5F:9D:5B:DA:D8:A9:39:6B:DE:38:28:88
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137352e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.175.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:24:e9:5f:3e:4c:00:16:55:88:fb:cc:d7:07:60:bc:4d:29:
32:02:ff:82:cc:f8:77:c0:cb:6a:4c:71:62:59:d0:4d:86:6b:
70:12:e8:87:88:f3:96:31:cd:1f:ef:f7:c6:d8:2a:bf:01:76:
6b:5e:c7:0f:0d:81:b1:c2:24:89:a0:f6:cd:e3:25:49:5a:4e:
4c:1b:39:46:86:7f:69:fd:ad:56:c4:1e:08:2d:0b:2b:c5:07:
6b:9d:13:87:97:ef:6e:92:82:d7:0a:40:5e:e8:ef:8c:4d:71:
a9:43:42:60:27:47:68:e9:05:c8:f1:e1:27:d4:87:8c:de:5e:
0c:36:19:33:5f:da:3b:97:ba:e3:48:b8:75:0d:8c:68:d1:9b:
4c:f1:25:7c:a1:20:ec:7d:08:fb:51:50:c0:38:43:fb:c4:3b:
2a:3b:4f:7c:6c:88:c4:cd:cc:7a:7c:bd:45:0c:15:fa:33:9e:
17:29:dd:9e:bc:85:60:a1:cc:84:a0:15:23:12:be:35:cd:e6:
fd:ec:66:0d:2b:c6:01:44:2d:57:f4:f2:16:e4:e5:d3:58:29:
ca:be:62:4e:c5:7b:8c:16:dd:0c:99:a2:6b:3a:bf:ce:0f:ca:
34:f8:e0:d3:30:41:33:e2:a0:a2:8c:8b:e4:fc:ea:30:be:d4:
78:10:0d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:48:20 2026 by rpki-client