Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/36322e332e32302e302f32342d3234203d3e203633313939.roa
File: 36322e332e32302e302f32342d3234203d3e203633313939.roa (raw, json)
Hash identifier: kA6rLFNlx80Eesn7dN44PcjtBhqBSQbqVN30KxWFEiA=
Subject key identifier: 06:BA:B1:03:5F:18:FC:DC:17:9F:99:03:CC:8D:94:E4:04:D4:1A:F0
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 16357C2DBDC2C5EA7346E923194E16BFA076AFF7
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/36322e332e32302e302f32342d3234203d3e203633313939.roa
Signing time: Mon 09 Mar 2026 06:29:00 +0000
ROA not before: Mon 09 Mar 2026 06:24:00 +0000
ROA not after: Mon 08 Mar 2027 06:29:00 +0000
asID: 63199
IP address blocks: 62.3.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Mar 2026 14:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:35:7c:2d:bd:c2:c5:ea:73:46:e9:23:19:4e:16:bf:a0:76:af:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Mar 9 06:24:00 2026 GMT
Not After : Mar 8 06:29:00 2027 GMT
Subject: CN=06BAB1035F18FCDC179F9903CC8D94E404D41AF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d1:1c:3c:84:3a:cb:e8:c9:f8:94:da:1e:60:
ac:fb:28:de:f9:76:46:07:61:15:9c:28:20:2a:3b:
43:f1:07:ab:a1:19:20:eb:18:02:50:fc:e3:cc:a6:
56:07:ee:3e:29:48:58:cf:72:6f:2d:16:ce:23:3d:
3d:2b:ff:81:d2:50:da:a7:c4:6e:81:da:dc:a3:ee:
35:89:92:27:0d:10:66:03:ba:ec:10:19:28:94:48:
06:c2:6c:b1:54:46:00:39:5e:86:5c:51:ec:ef:77:
3c:93:c8:1a:2a:91:11:e2:e4:4b:cc:02:63:dd:41:
87:60:89:0e:3f:2d:7e:e3:26:53:5f:31:ba:4f:06:
08:20:0d:29:21:d8:0f:4d:b4:bd:b2:6e:1e:58:e8:
50:ce:81:b2:70:ba:f3:61:5f:a9:74:68:28:7a:14:
ac:ea:56:0d:c8:21:8f:c2:a1:08:79:3e:9f:f4:ef:
9d:45:17:6e:70:55:0d:a9:45:85:c3:7b:04:c5:51:
3d:7a:81:ab:8c:dc:56:47:51:54:7f:f6:9e:88:6e:
3d:2a:25:36:ef:1f:32:18:c5:fd:9f:25:9c:71:9d:
10:1c:f9:65:4c:1a:c3:83:f0:1b:1b:89:5b:c3:5e:
05:a7:87:ce:fa:28:d7:8c:69:51:4e:1b:eb:8e:93:
6c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BA:B1:03:5F:18:FC:DC:17:9F:99:03:CC:8D:94:E4:04:D4:1A:F0
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/36322e332e32302e302f32342d3234203d3e203633313939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.20.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:68:30:0b:28:c2:9f:3a:a6:6b:0e:3a:f8:0c:72:16:65:d7:
75:5b:49:c7:cb:3f:52:f5:d0:60:e7:75:78:e7:dc:4c:76:bd:
f6:cc:16:5f:dc:fd:ac:12:75:4e:57:05:78:c6:6f:e4:eb:89:
dc:8f:f8:af:9d:f6:51:65:df:10:ff:14:c6:71:58:a5:85:86:
32:2c:55:78:fb:6a:9a:d0:b6:c7:3a:17:a9:29:db:b7:4a:dc:
82:ec:fd:e7:5b:e2:95:b3:54:c7:b6:1f:a9:a3:f1:c1:41:a0:
7a:90:9d:ae:f0:a2:3c:83:f5:64:ce:c1:af:2b:ef:d3:7b:8b:
46:8a:e1:dd:bd:b7:7a:30:c5:40:a6:a1:2a:ff:60:4e:fc:ce:
aa:c4:85:2c:4a:78:e4:b6:b1:0d:8f:df:46:57:c0:4d:79:23:
0d:b3:1b:80:98:67:1a:62:54:59:e3:6e:44:ee:e8:67:c3:3d:
f9:bc:05:3a:70:56:d9:f4:e9:9c:22:51:3e:93:32:c9:52:a0:
ee:23:31:4b:14:a2:b8:31:3c:d3:8b:5b:c8:68:07:b6:16:3f:
d8:00:e7:d2:1b:85:40:13:2b:6a:d0:b9:78:1f:98:5b:85:95:
2c:e2:f4:ff:b2:85:71:b7:0f:17:1a:fb:de:9f:b9:87:1d:be:
85:1e:4a:0c
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUFjV8Lb3CxepzRukjGU4Wv6B2r/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz
NTRmNDVjNjAeFw0yNjAzMDkwNjI0MDBaFw0yNzAzMDgwNjI5MDBaMDMxMTAvBgNV
BAMTKDA2QkFCMTAzNUYxOEZDREMxNzlGOTkwM0NDOEQ5NEU0MDRENDFBRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA0Rw8hDrL6Mn4lNoeYKz7KN75
dkYHYRWcKCAqO0PxB6uhGSDrGAJQ/OPMplYH7j4pSFjPcm8tFs4jPT0r/4HSUNqn
xG6B2tyj7jWJkicNEGYDuuwQGSiUSAbCbLFURgA5XoZcUezvdzyTyBoqkRHi5EvM
AmPdQYdgiQ4/LX7jJlNfMbpPBgggDSkh2A9NtL2ybh5Y6FDOgbJwuvNhX6l0aCh6
FKzqVg3IIY/CoQh5Pp/0751FF25wVQ2pRYXDewTFUT16gauM3FZHUVR/9p6Ibj0q
JTbvHzIYxf2fJZxxnRAc+WVMGsOD8BsbiVvDXgWnh876KNeMaVFOG+uOk2wRAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUBrqxA18Y/NwXn5kDzI2U5ATUGvAwHwYDVR0j
BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh
NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW
UFJjWS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAt
MDg1NS00MWYyLWFjNDYtNTlhMmU5OGRhNzM2LzEvMzYzMjJlMzMyZTMyMzAyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMzMzEzOTM5LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgMUMA0G
CSqGSIb3DQEBCwUAA4IBAQAqaDALKMKfOqZrDjr4DHIWZdd1W0nHyz9S9dBg53V4
59xMdr32zBZf3P2sEnVOVwV4xm/k64ncj/ivnfZRZd8Q/xTGcVilhYYyLFV4+2qa
0LbHOhepKdu3StyC7P3nW+KVs1THth+po/HBQaB6kJ2u8KI8g/VkzsGvK+/Te4tG
iuHdvbd6MMVApqEq/2BO/M6qxIUsSnjktrENj99GV8BNeSMNsxuAmGcaYlRZ425E
7uhnwz35vAU6cFbZ9OmcIlE+kzLJUqDuIzFLFKK4MTzTi1vIaAe2Fj/YAOfSG4VA
Eytq0Ll4H5hbhZUs4vT/soVxtw8XGvven7mHHb6FHkoM
-----END CERTIFICATE-----
Generated at Tue Mar 10 01:29:09 2026 by rpki-client