Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/36322e3132322e3138362e302f32342d3234203d3e203631333137.roa
File: 36322e3132322e3138362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: gCbw4t50he127cuIH8e7X9edy5RGT/dSqPZYrNWwgUg=
Subject key identifier: C3:DD:8C:75:B9:A1:DC:7E:CF:AE:B7:51:AB:B0:50:AC:82:D5:5D:A3
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 7667A2C8340BE250E3CFF2F2FED1EFC5BE594B16
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/36322e3132322e3138362e302f32342d3234203d3e203631333137.roa
Signing time: Tue 29 Jul 2025 02:54:13 +0000
ROA not before: Tue 29 Jul 2025 02:49:13 +0000
ROA not after: Tue 28 Jul 2026 02:54:13 +0000
asID: 61317
IP address blocks: 62.122.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 Aug 2025 22:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:67:a2:c8:34:0b:e2:50:e3:cf:f2:f2:fe:d1:ef:c5:be:59:4b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Jul 29 02:49:13 2025 GMT
Not After : Jul 28 02:54:13 2026 GMT
Subject: CN=C3DD8C75B9A1DC7ECFAEB751ABB050AC82D55DA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a2:fb:46:e2:27:28:1a:86:2c:87:09:7d:db:
50:dc:1f:f0:0f:cb:e7:4f:82:4b:1c:1a:81:e3:b2:
09:93:d9:b6:ca:ce:1e:8d:24:f5:21:b0:97:ae:00:
0e:56:f6:b6:78:bc:94:cf:a2:21:fe:88:3d:e1:6f:
00:8c:94:76:90:44:e8:79:e5:6b:9f:70:4b:ab:a2:
4e:d9:10:94:f4:bd:bb:e6:96:e7:0d:80:b9:5b:a2:
c2:30:cb:db:e2:62:ce:95:c8:5c:fa:90:1b:c5:10:
bf:5e:9c:a3:eb:75:d3:70:18:29:95:6b:eb:88:a4:
0a:59:8a:94:4d:1d:6d:83:ce:5f:a4:f9:d7:80:84:
99:85:31:89:74:3a:74:72:65:61:a3:98:57:de:64:
9b:0e:fe:81:8f:24:13:0c:a4:9a:07:31:b9:0d:1c:
34:86:be:71:d8:8e:65:b8:d2:b6:00:4c:2b:4f:a9:
5c:29:e2:94:d8:0b:9d:69:41:e6:5d:78:35:21:0c:
0e:57:3b:13:79:f7:81:f4:c4:6b:6a:12:23:75:36:
e4:02:b3:67:c3:88:1a:27:c2:0f:17:33:5f:15:7c:
fe:9f:8a:bc:ff:82:f2:e5:8a:c9:e1:3f:bd:33:46:
71:48:ba:69:e8:41:d9:f4:5a:fd:4f:ab:92:c9:85:
fc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DD:8C:75:B9:A1:DC:7E:CF:AE:B7:51:AB:B0:50:AC:82:D5:5D:A3
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/36322e3132322e3138362e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.186.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:10:70:73:6a:02:90:62:aa:87:95:46:9f:63:13:6d:03:a7:
00:df:65:42:b5:c9:1d:07:ff:db:87:3a:09:ce:a6:34:b1:3e:
d3:a8:ee:d9:da:c1:1d:13:b5:76:52:24:62:99:4f:8f:4e:f2:
c8:1e:05:bb:c5:9b:25:c9:c9:3f:33:25:42:d0:e9:d1:e4:2d:
68:2e:56:24:cf:41:7c:81:78:c9:34:52:7c:c5:19:74:a3:2e:
e9:46:cd:af:fa:e3:ee:a5:a3:4c:81:76:66:9c:0c:61:02:30:
0f:1c:72:c2:a3:c8:c3:09:d3:34:99:bc:38:a0:ab:43:b4:d5:
13:99:b5:9a:08:b2:ca:d3:a1:3c:73:90:3a:f3:4b:96:d4:06:
51:b5:e5:cd:ce:6a:ba:f1:7c:7c:8a:be:a5:73:37:11:a7:f0:
4c:5c:3c:13:54:9e:3d:87:79:c5:75:20:68:56:6a:bd:f3:c0:
0f:f5:f3:f8:21:78:77:fb:24:27:60:b8:1d:79:6f:af:5e:2d:
87:28:15:f0:15:f6:57:d7:f6:3b:f8:a9:00:f5:04:9e:c0:0f:
94:0a:33:20:c8:7a:b1:40:c1:eb:87:44:bd:98:a0:a1:16:d6:
7e:eb:35:82:57:12:3c:02:41:45:b5:75:f9:85:3b:f7:78:7e:
f9:29:f7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:56:57 2025 by rpki-client