Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/36322e3132322e3138382e302f32342d3234203d3e20343032393337.roa
File: 36322e3132322e3138382e302f32342d3234203d3e20343032393337.roa (raw, json)
Hash identifier: HkdbLUX2uZYZy/KNrbxq5iTdLxcVgG97NieRy3Oc0hk=
Subject key identifier: 39:A0:60:84:15:D6:F0:16:04:8E:B2:C3:4C:D8:18:BD:83:02:75:AC
Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial: 18BF1E36A7B7BB4092B481CFA133D7B522B9D166
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/36322e3132322e3138382e302f32342d3234203d3e20343032393337.roa
Signing time: Wed 19 Aug 2026 20:05:26 +0000
ROA not before: Wed 19 Aug 2026 20:00:26 +0000
ROA not after: Wed 18 Aug 2027 20:05:26 +0000
asID: 402937
IP address blocks: 62.122.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:bf:1e:36:a7:b7:bb:40:92:b4:81:cf:a1:33:d7:b5:22:b9:d1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Validity
Not Before: Aug 19 20:00:26 2026 GMT
Not After : Aug 18 20:05:26 2027 GMT
Subject: CN=39A0608415D6F016048EB2C34CD818BD830275AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:06:f0:89:4a:e3:68:f2:88:97:af:af:d8:c7:
19:2f:88:07:34:e4:cb:d6:4f:50:e9:aa:d2:9b:3c:
4b:23:76:c5:ed:27:d0:17:4d:a5:60:0c:70:5c:05:
ee:36:83:78:55:21:1c:23:bf:2a:ec:bb:d3:f0:13:
4f:c7:2b:5e:bc:f7:61:d9:7c:6d:fa:e3:bf:61:37:
08:27:e4:2b:2a:e7:eb:aa:f6:0c:e4:a6:1b:45:e0:
c2:6e:d1:2c:51:89:10:15:a6:8c:ce:a1:d7:e5:aa:
f9:43:ab:e5:9b:08:89:bb:35:0d:43:87:88:bc:22:
10:a4:a6:19:41:34:12:a9:9c:54:96:d5:f2:19:7c:
b4:fa:30:a1:1f:e7:5e:28:b2:4b:e0:28:ea:85:3d:
ac:0e:51:05:5c:6f:aa:37:63:e6:f5:97:3c:39:3f:
ad:de:1a:50:73:f2:6e:4c:45:f7:78:9c:d7:b4:ae:
28:72:32:4d:e4:a8:2b:d0:77:f6:7c:20:9f:6f:47:
ac:da:fc:03:48:a4:d5:6d:5e:7a:03:38:02:48:5a:
06:d7:b2:94:ee:c0:2a:95:04:38:2f:71:46:49:d7:
d1:7d:cd:76:94:c6:26:cb:84:f6:b3:4f:64:6c:86:
b1:27:b8:cf:2e:8d:46:5f:2b:29:e8:20:9f:01:37:
46:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A0:60:84:15:D6:F0:16:04:8E:B2:C3:4C:D8:18:BD:83:02:75:AC
X509v3 Authority Key Identifier:
keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/36322e3132322e3138382e302f32342d3234203d3e20343032393337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.188.0/24
Signature Algorithm: sha256WithRSAEncryption
98:31:7c:f7:90:7b:59:1f:54:63:6d:f6:b7:c5:63:19:3b:d3:
69:cc:ad:79:1f:37:d0:1c:15:35:65:a2:cb:58:f1:96:81:0d:
c7:82:fd:f6:33:33:49:00:82:71:1a:19:8d:ae:9f:a9:20:f9:
4d:9c:08:fd:f4:3c:95:5e:be:8a:c3:cd:bd:94:37:4a:99:1b:
31:d7:0f:e1:6f:f5:38:df:9d:72:82:60:5b:8c:1e:8b:e8:fc:
a8:5f:db:0f:f7:f3:5d:7b:63:f6:fc:8a:97:73:a7:23:84:43:
4e:b9:6f:3f:20:29:0c:4d:05:c1:bf:09:54:4a:5c:62:c1:38:
9d:cf:e6:94:ea:50:52:54:52:db:e7:1a:22:36:cd:9e:a5:6e:
c2:0b:d9:90:31:78:57:1d:2c:49:51:c0:78:50:44:6d:ea:ea:
37:1e:96:bc:15:8c:17:a9:d0:b0:23:05:9b:ab:af:bb:1c:b5:
d4:51:8e:f3:f2:7e:76:2a:87:56:4f:90:d9:32:99:d2:e2:ea:
9b:85:c4:7f:46:a7:e0:61:06:98:af:52:ca:c1:a1:17:87:87:
26:61:e8:e8:37:6b:49:92:36:f8:13:62:7a:0a:6f:b0:06:14:
d9:7f:2c:58:3c:a8:ce:03:a3:5b:7f:63:ae:ce:2f:45:6a:e0:
ff:98:1b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:21:28 2026 by rpki-client