Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/36322e3134312e36322e302f32342d3234203d3e203136323736.roa
File: 36322e3134312e36322e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: kK0Kj3RrwBfjRddxRkWNqDl+BI/cVmP9VgkySujZ2ic=
Subject key identifier: 13:40:17:AF:36:34:85:3F:AC:01:7C:07:44:19:39:32:E3:44:BD:97
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 25C52B5C1313D1918C28237012E865E173888184
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/36322e3134312e36322e302f32342d3234203d3e203136323736.roa
Signing time: Tue 08 Jul 2025 12:18:03 +0000
ROA not before: Tue 08 Jul 2025 12:13:03 +0000
ROA not after: Tue 07 Jul 2026 12:18:03 +0000
asID: 16276
IP address blocks: 62.141.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:c5:2b:5c:13:13:d1:91:8c:28:23:70:12:e8:65:e1:73:88:81:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Jul 8 12:13:03 2025 GMT
Not After : Jul 7 12:18:03 2026 GMT
Subject: CN=134017AF3634853FAC017C0744193932E344BD97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ef:1d:0f:10:54:3d:10:34:32:51:11:55:9f:
bc:f1:4a:1c:69:7a:19:0c:6e:82:29:9c:36:13:d2:
b7:62:d3:f7:1e:28:dc:96:b4:50:66:79:a3:88:b5:
4c:1d:6c:b3:ce:02:53:0b:fa:78:60:8a:ca:41:6d:
33:f1:49:56:b7:a2:4b:92:30:34:3f:c7:d9:81:0f:
2d:ba:14:b4:f7:9d:34:a1:cd:07:29:ad:c5:da:05:
fd:35:08:1d:cb:df:9e:fe:dd:06:84:ed:9f:57:bf:
b1:58:34:6b:49:a0:6b:ab:3f:b4:84:78:20:8d:3d:
09:be:99:13:e3:27:e7:e0:e1:39:f6:e8:ad:3d:ed:
29:44:fa:54:28:0f:3e:ab:94:eb:39:26:14:3c:38:
04:56:ac:52:7c:ab:29:c0:e4:77:78:79:1d:b3:ea:
6c:a6:0d:f0:75:f7:02:8b:37:52:1e:58:09:13:76:
3c:cc:1f:78:30:08:fb:39:50:d6:04:bc:ff:68:35:
c3:5e:fd:7a:d3:02:aa:1e:3b:94:aa:b9:88:b5:20:
6c:26:e5:5a:44:d6:66:6f:9b:a9:1b:b1:f2:32:14:
4f:39:20:5a:2a:6d:60:51:a3:4f:c0:4a:1b:64:69:
48:f8:66:08:80:26:25:10:37:7c:a1:9f:fe:2e:a0:
c0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:40:17:AF:36:34:85:3F:AC:01:7C:07:44:19:39:32:E3:44:BD:97
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/36322e3134312e36322e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.141.62.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:99:ee:47:dd:bb:de:6a:21:02:74:87:8f:82:ab:cc:88:8f:
cf:16:dd:1e:69:1f:da:3a:7e:13:a8:6d:48:2a:4c:e1:10:59:
bf:02:93:59:33:8c:b4:89:f7:73:65:62:a9:fd:41:fa:1a:0a:
3c:31:ff:e7:ee:cb:6e:66:8f:17:0b:7a:57:64:16:48:1f:42:
67:ed:76:4b:3a:61:e4:06:31:20:89:b4:35:63:75:7d:70:cb:
13:4c:79:9b:ef:02:cd:3f:d4:6d:88:10:af:e9:f0:ef:9c:4d:
6b:16:80:52:4a:02:86:61:70:b8:33:9c:98:12:49:1d:02:3b:
ae:bc:d0:d6:1c:fa:e3:47:50:ca:f9:87:dd:e1:0e:f6:49:c7:
61:16:5b:21:c5:b8:80:2d:f3:8e:a6:20:50:1b:6a:7f:28:0a:
5b:e0:87:41:a4:e1:21:ab:3e:ac:d7:e8:58:0b:53:54:48:84:
28:be:37:00:a9:5e:3d:7f:91:22:19:75:4b:86:fe:8f:26:2b:
75:6a:43:c4:2a:81:83:80:80:b2:0d:4f:e3:fc:a4:30:11:31:
7f:70:5c:69:a7:df:65:0c:a5:c7:f0:a2:15:47:81:f1:db:96:
97:a1:5f:96:2a:71:7b:9f:ee:4f:1a:0c:0d:c4:2c:b4:f2:f2:
ed:19:71:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:13:53 2025 by rpki-client