Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/36322e332e32302e302f32342d3234203d3e20323132393830.roa
File: 36322e332e32302e302f32342d3234203d3e20323132393830.roa (raw, json)
Hash identifier: f/GL2G2QMX1DeHxo/IzFzuj9b3uiMiTDtg1wGwI4Lb8=
Subject key identifier: 68:16:A8:80:AD:86:F6:BD:B0:F8:58:33:2C:90:4A:2F:06:B9:DE:F6
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 46696DF6E40A02A51196FEC6C8B2ADA54662F1B5
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/36322e332e32302e302f32342d3234203d3e20323132393830.roa
Signing time: Tue 05 May 2026 09:44:12 +0000
ROA not before: Tue 05 May 2026 09:39:12 +0000
ROA not after: Tue 04 May 2027 09:44:12 +0000
asID: 212980
IP address blocks: 62.3.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:69:6d:f6:e4:0a:02:a5:11:96:fe:c6:c8:b2:ad:a5:46:62:f1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: May 5 09:39:12 2026 GMT
Not After : May 4 09:44:12 2027 GMT
Subject: CN=6816A880AD86F6BDB0F858332C904A2F06B9DEF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:24:e0:7f:5d:60:c9:48:a0:68:63:ff:a1:57:
c5:c0:91:42:3b:0c:6a:ae:85:10:f1:80:45:f8:c2:
b5:73:fb:a8:1a:b5:5f:55:e4:88:ac:c0:1d:c6:e4:
5a:db:35:4f:aa:74:aa:36:30:43:82:28:68:4f:a1:
c1:d9:f0:1b:7a:04:31:8b:3c:46:93:a4:cb:bf:95:
38:78:25:61:46:e0:11:f3:ff:7c:0d:3f:c2:0a:0e:
25:c5:7f:bb:8a:49:2d:4f:45:65:8c:e6:a4:11:a9:
09:78:76:02:b6:b2:fe:9d:ac:f9:fa:2a:63:01:d2:
fd:fc:52:ea:5b:12:f4:6a:9f:a9:66:d4:76:17:0b:
87:4e:9d:db:3a:a6:de:19:aa:be:d8:f8:e4:f3:f8:
99:a5:bb:b1:5c:cf:e6:5b:9d:7c:cf:4f:46:c1:2c:
d4:c8:40:fe:98:b1:fc:47:e8:f9:cc:52:d3:f2:9e:
f6:c4:48:e2:12:00:31:1c:c9:54:0f:4b:b8:c0:78:
4e:cc:1d:1c:c3:a6:21:9e:f3:b2:76:e6:a9:d3:c5:
fe:d6:8d:7b:7e:85:bb:70:7f:9e:78:f1:7e:9d:ca:
e9:20:1a:22:95:65:52:43:22:f8:28:b4:c1:c6:f1:
37:37:2b:88:36:b7:b9:68:e1:7e:a9:b1:1d:ea:a8:
0e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:16:A8:80:AD:86:F6:BD:B0:F8:58:33:2C:90:4A:2F:06:B9:DE:F6
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/36322e332e32302e302f32342d3234203d3e20323132393830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.20.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:3d:ea:9c:9d:3b:85:44:34:f7:04:ff:a3:75:98:fe:9e:e4:
06:17:6e:7a:2f:5b:fd:39:7f:83:ca:a5:05:af:b6:2f:27:ea:
56:db:3a:db:11:79:c6:61:36:7a:dc:63:a5:a7:25:4e:ff:38:
c3:f4:ed:78:cb:57:9f:e8:03:d2:6c:eb:7f:58:1d:31:d2:65:
35:50:3b:7d:70:2c:cd:61:29:82:97:42:7e:2a:65:c8:a3:0c:
94:7e:5e:ed:67:ca:81:91:6e:c4:c2:ba:9a:fa:7e:49:cc:d1:
91:c1:93:33:a6:8d:96:60:2b:d6:8a:f7:95:c5:49:17:a1:16:
f5:f8:af:0c:69:2e:14:51:43:db:33:c6:7e:b5:ba:80:94:17:
61:d7:21:d6:fb:e2:e4:94:e3:fc:40:11:30:37:54:97:5e:91:
69:c1:38:78:85:44:e1:f0:52:4d:a5:9f:ac:96:40:8a:8e:b1:
75:21:10:63:cd:f3:64:92:42:4c:db:e0:d1:30:7b:8b:24:02:
91:57:cb:4e:61:d4:41:15:41:58:db:39:14:61:e8:87:95:c5:
d0:c1:97:4c:5a:ab:98:4b:fa:ad:e0:73:d3:1e:61:16:d7:94:
1d:d8:b6:e7:4a:8a:68:7f:96:67:bf:91:d9:fb:a4:29:5f:41:
a5:e3:e9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 07:14:46 2026 by rpki-client