Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/36322e332e31382e302f32342d3234203d3e20323136323931.roa
File: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (raw, json)
Hash identifier: 39Ecrxd/FkCAGTvy7OXLB4dzwM2Ae3nIKwg+e1og5Lc=
Subject key identifier: 20:21:84:20:4E:5E:FB:60:F3:E2:E5:48:4E:9F:E0:6F:49:70:08:08
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 77CFF3CF7642CCE309218CD0450CE0CD4BB869E7
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/36322e332e31382e302f32342d3234203d3e20323136323931.roa
Signing time: Wed 09 Sep 2026 08:49:33 +0000
ROA not before: Wed 09 Sep 2026 08:44:33 +0000
ROA not after: Wed 08 Sep 2027 08:49:33 +0000
asID: 216291
IP address blocks: 62.3.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:cf:f3:cf:76:42:cc:e3:09:21:8c:d0:45:0c:e0:cd:4b:b8:69:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Sep 9 08:44:33 2026 GMT
Not After : Sep 8 08:49:33 2027 GMT
Subject: CN=202184204E5EFB60F3E2E5484E9FE06F49700808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:0e:b9:c7:a5:5b:aa:49:71:3c:34:2c:60:
4d:5e:52:8c:43:90:7e:bf:4e:61:21:86:54:24:41:
4b:24:f1:46:4c:19:15:28:52:e7:72:0e:bd:62:e9:
bf:ed:69:c2:1a:7a:db:1d:d2:b6:86:69:37:fa:97:
38:47:cd:69:2e:3a:e0:46:63:41:ef:d1:fc:74:cf:
2d:5d:9f:f0:5b:5b:2e:f9:b9:5c:9a:9f:37:b8:36:
86:98:30:e2:bb:a5:d4:b6:b0:ba:4b:1b:1c:1e:fe:
a4:a9:8b:4c:74:a7:24:3a:28:05:a6:16:81:55:8c:
52:b0:5f:94:fa:58:10:62:c6:d3:55:de:66:96:47:
37:7c:d3:4f:1a:b8:9c:b2:58:17:93:94:a7:2d:da:
b6:b4:93:7c:ed:db:b5:07:e8:78:f9:61:aa:dd:68:
d9:c4:7a:41:89:34:2c:4f:46:ce:5e:e2:06:f3:eb:
ce:7a:81:66:20:7d:a0:07:50:b1:e5:fb:57:7e:98:
dc:8a:4a:fe:6d:68:7b:86:02:97:1a:59:a9:25:84:
13:85:d5:98:03:e8:00:5c:1b:a0:2f:e0:c9:6e:cf:
27:f6:66:95:c4:78:c8:ed:90:37:64:fd:d7:0b:ed:
c9:28:79:1c:f1:66:57:1c:d4:d5:ed:14:8d:21:0a:
14:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:21:84:20:4E:5E:FB:60:F3:E2:E5:48:4E:9F:E0:6F:49:70:08:08
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/36322e332e31382e302f32342d3234203d3e20323136323931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.18.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:55:e6:ae:77:44:3d:3d:ad:4c:10:53:60:1a:b1:55:46:4b:
53:29:2f:1e:14:e7:d0:f1:e7:70:a8:91:d0:c1:3c:bd:26:9a:
bc:ce:2a:aa:c2:66:24:d8:f0:64:c1:a8:4a:75:63:9c:ae:03:
5d:95:36:83:a0:70:bf:b9:10:29:d2:7c:0f:8a:92:e8:af:65:
04:69:cc:27:38:f7:e5:68:ce:2b:cb:1d:49:87:a2:26:31:d9:
10:11:76:42:f2:58:fe:b3:fe:c0:87:f3:1b:59:8f:90:73:9a:
83:d0:58:8a:b5:cc:dd:c1:ad:92:46:1b:b9:4f:8a:eb:97:90:
10:7c:a8:7a:b0:90:da:46:b4:c8:5f:6a:c0:c5:55:84:69:7a:
17:e7:b5:47:51:f0:05:06:a8:3c:b8:84:b2:91:39:ca:a2:bb:
12:f8:cf:b8:c9:8a:64:1b:2f:55:ad:11:8a:51:ca:35:cb:99:
49:2a:e6:c6:dd:e6:97:23:52:98:a4:1d:ac:13:53:f1:20:70:
0d:11:37:9b:25:f9:eb:f7:6b:45:50:e4:7a:56:bc:29:0c:ec:
d8:6f:40:d1:f1:51:65:19:7a:37:a3:ed:ef:a6:5e:f8:4d:89:
f9:e1:e4:c3:a3:7d:76:fe:eb:b0:fa:27:f7:4c:52:66:86:f1:
27:62:73:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:49:33 2026 by rpki-client