Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137342e302f32342d3234203d3e20313939303538.roa
File: 36322e3139322e3137342e302f32342d3234203d3e20313939303538.roa (raw, json)
Hash identifier: +/mIlEx3xxWoZl+krpHUaeIjRRfIayd7cektA0/iFpI=
Subject key identifier: 7A:72:B9:07:49:C4:58:25:8F:F0:98:9F:53:71:FC:72:EC:EA:E0:38
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 48D95BE9B26E8BA7BBE8F3064A795C60A3E6FAE8
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137342e302f32342d3234203d3e20313939303538.roa
Signing time: Thu 09 Jul 2026 08:49:06 +0000
ROA not before: Thu 09 Jul 2026 08:44:06 +0000
ROA not after: Thu 08 Jul 2027 08:49:06 +0000
asID: 199058
IP address blocks: 62.192.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:d9:5b:e9:b2:6e:8b:a7:bb:e8:f3:06:4a:79:5c:60:a3:e6:fa:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Jul 9 08:44:06 2026 GMT
Not After : Jul 8 08:49:06 2027 GMT
Subject: CN=7A72B90749C458258FF0989F5371FC72ECEAE038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:a2:fd:f2:54:ec:b0:65:d9:e0:8c:14:2a:
a8:ce:72:1a:fc:b0:26:46:fa:6d:e1:dc:5e:7d:49:
cf:b5:90:ab:10:e1:42:14:41:32:63:be:05:00:b4:
2d:ca:ff:71:f4:89:3a:11:26:29:41:29:d6:57:e3:
8a:e6:c6:07:3a:20:4b:42:20:7a:3f:a7:cb:d3:0d:
42:ed:86:81:19:fd:e4:b1:89:42:12:14:1c:53:52:
f3:0e:d3:a5:f8:63:6a:8d:33:b7:e1:b7:bb:aa:d3:
90:97:3e:80:b5:bf:b8:97:7f:77:bf:d2:6c:88:62:
37:6d:dd:c2:ae:23:a0:e5:c6:d7:69:5c:49:6d:ff:
9b:00:a3:90:65:6f:e5:b8:f8:27:a9:5a:83:07:42:
a3:af:aa:62:f5:46:16:03:70:bc:f3:53:58:01:e9:
13:92:bb:4a:24:c9:03:c7:1d:44:c2:e8:1a:8a:79:
96:06:48:90:c5:45:19:38:af:63:9f:f2:cb:2e:b3:
5d:ed:3f:c8:e6:9f:3c:e0:07:3b:78:2f:73:3c:ec:
fc:b3:df:89:03:e4:f0:76:d0:f5:f5:91:2b:07:1f:
a1:9c:99:0f:71:d9:21:72:fc:60:c7:98:79:9d:6e:
46:ed:82:bd:ab:5c:b9:ec:3d:e1:3d:60:d7:c5:b8:
5c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:72:B9:07:49:C4:58:25:8F:F0:98:9F:53:71:FC:72:EC:EA:E0:38
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/36322e3139322e3137342e302f32342d3234203d3e20313939303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.174.0/24
Signature Algorithm: sha256WithRSAEncryption
15:d7:ab:fb:e4:10:49:16:ae:d6:57:2c:22:1e:a4:18:a9:eb:
44:8c:32:6e:30:51:5a:a5:2b:5a:cf:a1:81:7d:51:a3:43:1b:
81:ab:a6:c2:95:6b:33:40:c8:60:7d:24:80:c0:d4:83:29:5f:
54:14:7f:71:84:62:99:26:53:5f:80:98:21:5e:ac:c3:de:14:
82:c0:09:f5:cf:4d:f5:8d:9f:57:50:53:51:2d:46:fc:46:ab:
19:2a:63:62:dd:fa:2c:29:2c:df:d3:11:3c:72:60:2b:97:52:
12:fe:20:61:72:f1:65:ac:08:93:dc:98:80:24:a8:2e:81:6b:
f7:c2:f1:7a:71:0c:4d:de:8a:14:3e:56:07:09:52:f1:0c:d4:
6a:5c:1d:12:70:76:6c:fb:44:ff:be:17:a5:5d:c7:9d:6b:9e:
fa:af:80:43:cd:27:4f:16:04:1b:c4:53:11:35:9a:67:4e:62:
2a:24:68:c7:bd:6c:bb:27:71:b1:70:c8:65:11:71:ec:db:76:
e4:f3:5c:f0:59:ea:8b:65:a9:6b:72:93:ad:2b:84:0c:83:35:
86:de:ee:ea:94:b5:8e:de:f7:35:c2:44:3a:2c:0d:c8:77:64:
df:f2:d8:e6:7b:87:69:db:02:94:2b:06:99:32:40:34:55:3b:
64:45:34:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:32:53 2026 by rpki-client