Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa
File: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (raw, json)
Hash identifier: xE+Kag7RYYIC/6Gdcunr8SGE54x+vaEZMv3MSSvdWDk=
Subject key identifier: 9E:24:7C:DA:2D:7E:9B:77:EA:A1:6A:07:9F:F2:8A:46:C5:89:0A:7E
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 42DDA43183530297CCF28BCCE14E5F250FC74B7C
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa
Signing time: Tue 29 Jul 2025 02:54:13 +0000
ROA not before: Tue 29 Jul 2025 02:49:13 +0000
ROA not after: Tue 28 Jul 2026 02:54:13 +0000
asID: 397423
IP address blocks: 62.122.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:dd:a4:31:83:53:02:97:cc:f2:8b:cc:e1:4e:5f:25:0f:c7:4b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Jul 29 02:49:13 2025 GMT
Not After : Jul 28 02:54:13 2026 GMT
Subject: CN=9E247CDA2D7E9B77EAA16A079FF28A46C5890A7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d2:6c:d9:48:d2:c5:c3:34:a8:a6:36:1a:56:
05:01:17:bd:d0:ab:ae:89:28:8d:3e:43:77:9d:3e:
22:6c:a9:95:ba:d8:3e:18:eb:fe:69:16:3b:94:92:
b8:76:0a:1c:6e:9b:de:41:e8:ce:49:63:b6:bf:02:
7c:dd:20:fb:2e:42:6e:6b:ca:91:4a:cc:2b:27:b9:
ac:60:b0:49:81:c2:cd:fc:23:7f:2c:85:af:b5:b1:
09:85:92:a2:04:64:49:00:95:0f:34:28:c4:3c:28:
90:b8:30:60:1f:d2:be:d0:bc:90:5c:74:93:0a:b6:
00:67:07:b2:a8:f8:a8:47:d0:30:23:5d:a9:34:6e:
d7:43:ff:9b:97:17:24:2b:51:dd:03:85:3d:f9:22:
c4:14:b1:27:f2:37:45:b1:88:27:ec:84:aa:fb:8d:
3f:17:f9:94:4d:67:b9:61:8f:3e:0a:ce:e6:9a:bb:
5f:7e:84:c2:69:70:90:e5:0b:87:86:88:24:3e:df:
97:b0:73:40:ee:43:0e:fd:67:96:48:38:0c:6d:f5:
4a:ab:b9:d9:52:93:60:f4:8b:ac:8a:fd:7c:6c:aa:
cc:50:e1:a8:3a:5f:ec:24:52:ac:71:95:9c:b1:76:
d0:c2:d1:6c:7d:be:90:91:f6:01:1f:28:84:c5:38:
1b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:24:7C:DA:2D:7E:9B:77:EA:A1:6A:07:9F:F2:8A:46:C5:89:0A:7E
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.185.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:f8:71:22:a2:3b:b4:81:b5:23:e7:07:3b:db:2e:5d:59:f8:
97:f2:0e:1c:1d:c4:02:63:bd:0b:c0:e1:ab:bd:8c:7d:6a:88:
96:c9:3a:a0:9b:73:99:f3:a1:73:df:93:49:97:75:7d:ef:45:
8e:e1:2e:fa:d6:c8:6b:31:25:d5:13:a0:92:66:c2:3a:01:33:
a2:81:1c:f1:1a:b1:9c:db:99:91:60:dc:31:16:ad:f7:7e:52:
80:99:4d:48:71:53:6a:ea:a2:a7:e2:ad:e6:05:ed:2c:d4:c5:
4c:ef:dc:3c:1b:18:5b:18:46:2f:74:8a:45:84:67:98:ca:1f:
78:fc:e3:17:78:58:9e:ed:1e:14:57:fb:1f:6c:c4:84:8d:f2:
00:a5:8a:fd:fb:7d:3e:08:1e:ee:e7:96:a4:cf:da:93:f2:56:
4d:9a:0c:73:85:a8:1e:75:56:81:17:ed:37:c6:13:18:f7:26:
ee:7f:c7:18:ff:2e:68:25:a6:95:a5:aa:02:de:8a:3c:4a:e2:
39:cc:62:9e:67:ba:18:f0:d0:e6:05:27:7d:b0:1e:9d:23:b3:
4c:f9:6e:fd:ce:45:4a:87:cd:cd:ee:9c:c7:6e:d1:64:59:3a:
42:8f:8d:d4:c7:2b:48:99:be:08:68:c1:59:9b:74:6b:63:2f:
03:c3:61:49
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUQt2kMYNTApfM8ovM4U5fJQ/HS3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm
NTg3M2RjNDAeFw0yNTA3MjkwMjQ5MTNaFw0yNjA3MjgwMjU0MTNaMDMxMTAvBgNV
BAMTKDlFMjQ3Q0RBMkQ3RTlCNzdFQUExNkEwNzlGRjI4QTQ2QzU4OTBBN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC80mzZSNLFwzSopjYaVgUBF73Q
q66JKI0+Q3edPiJsqZW62D4Y6/5pFjuUkrh2Chxum95B6M5JY7a/AnzdIPsuQm5r
ypFKzCsnuaxgsEmBws38I38sha+1sQmFkqIEZEkAlQ80KMQ8KJC4MGAf0r7QvJBc
dJMKtgBnB7Ko+KhH0DAjXak0btdD/5uXFyQrUd0DhT35IsQUsSfyN0WxiCfshKr7
jT8X+ZRNZ7lhjz4Kzuaau19+hMJpcJDlC4eGiCQ+35ewc0DuQw79Z5ZIOAxt9Uqr
udlSk2D0i6yK/XxsqsxQ4ag6X+wkUqxxlZyxdtDC0Wx9vpCR9gEfKITFOBtdAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUniR82i1+m3fqoWoHn/KKRsWJCn4wHwYDVR0j
BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj
ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX
SFBjUS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDFiMzVmOGIt
NmY0OC00YmFkLWIxODUtNWMxZGFhOGFjZGE5LzAvMzYzMjJlMzEzMjMyMmUzMTM4
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM5MzczNDMyMzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAA+erkwDQYJKoZIhvcNAQELBQADggEBAMf4cSKiO7SBtSPnBzvbLl1Z+JfyDhwd
xAJjvQvA4au9jH1qiJbJOqCbc5nzoXPfk0mXdX3vRY7hLvrWyGsxJdUToJJmwjoB
M6KBHPEasZzbmZFg3DEWrfd+UoCZTUhxU2rqoqfireYF7SzUxUzv3DwbGFsYRi90
ikWEZ5jKH3j84xd4WJ7tHhRX+x9sxISN8gCliv37fT4IHu7nlqTP2pPyVk2aDHOF
qB51VoEX7TfGExj3Ju5/xxj/LmglppWlqgLeijxK4jnMYp5nuhjw0OYFJ32wHp0j
s0z5bv3ORUqHzc3unMdu0WRZOkKPjdTHK0iZvghowVmbdGtjLwPDYUk=
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:37:35 2025 by rpki-client