Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/36322e3132322e3138362e302f32342d3234203d3e20313432323430.roa
File: 36322e3132322e3138362e302f32342d3234203d3e20313432323430.roa (raw, json)
Hash identifier: hLdkJCCSarM8t8hdJBW5AzHGx76e/uRRevZUWJRwMR0=
Subject key identifier: 2B:3A:F0:77:A2:57:1A:AC:86:0C:74:FB:BD:2D:F1:C3:77:06:E8:63
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 1E06192B4BE945858AFE3044D83B22A9597D5983
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/36322e3132322e3138362e302f32342d3234203d3e20313432323430.roa
Signing time: Tue 11 Aug 2026 08:37:34 +0000
ROA not before: Tue 11 Aug 2026 08:32:34 +0000
ROA not after: Tue 10 Aug 2027 08:37:34 +0000
asID: 142240
IP address blocks: 62.122.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 07:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:06:19:2b:4b:e9:45:85:8a:fe:30:44:d8:3b:22:a9:59:7d:59:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Aug 11 08:32:34 2026 GMT
Not After : Aug 10 08:37:34 2027 GMT
Subject: CN=2B3AF077A2571AAC860C74FBBD2DF1C37706E863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:81:80:b1:7d:b3:be:d8:3f:a9:78:e0:a4:
5f:de:b8:8a:b9:15:81:f9:9f:21:ab:48:2f:a1:85:
3d:13:36:e1:61:58:14:74:07:c4:ea:73:01:b3:92:
6e:e4:fe:8b:a6:02:db:3b:46:0b:24:e9:78:c7:32:
f7:37:4d:25:d5:76:13:bd:61:12:13:7b:5f:7b:25:
84:e8:9a:eb:79:ec:97:0a:82:9b:74:86:5e:bc:36:
40:35:9e:dc:ed:4d:78:0a:2c:36:07:86:4e:18:a6:
12:1a:24:a5:4b:60:f0:44:68:96:43:8a:5b:c0:91:
38:77:db:ef:0f:4d:28:2f:98:6e:0d:65:56:41:26:
d8:4d:1e:d9:de:d1:c5:14:49:7b:37:5a:63:62:a6:
ed:36:63:50:ec:ce:b1:f1:0f:34:ce:bc:f4:85:4f:
39:9b:5f:87:5a:18:62:d0:53:b3:3b:51:65:cd:70:
a1:ce:2d:f5:45:ad:cf:7a:a4:19:b3:b3:e9:02:8c:
b1:64:a5:c9:2f:a4:66:7d:11:3f:31:8e:12:6f:6d:
f5:02:5f:7e:19:d7:57:c1:e5:ab:36:e3:43:c2:7c:
b1:e4:6c:be:9d:dc:60:c8:c2:63:23:f8:a5:4f:ba:
03:f8:74:d8:b0:2e:44:17:e4:cc:87:b3:ee:2a:6e:
63:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3A:F0:77:A2:57:1A:AC:86:0C:74:FB:BD:2D:F1:C3:77:06:E8:63
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/36322e3132322e3138362e302f32342d3234203d3e20313432323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.186.0/24
Signature Algorithm: sha256WithRSAEncryption
37:3e:36:f3:02:a5:f4:3d:f5:ac:d4:0c:09:41:4b:a6:a3:cf:
cf:af:73:d3:f7:06:79:a2:fe:87:e5:c0:65:a5:55:c9:ed:45:
9e:81:f9:81:0f:a4:a9:e3:73:db:0e:4e:01:0e:b3:58:33:48:
97:6e:0a:21:bc:1d:21:23:bd:db:cb:88:e5:1f:07:02:58:d9:
56:4a:3c:8a:86:7b:d5:b7:97:27:2a:f5:8e:07:df:8b:bf:91:
57:01:63:44:5c:1d:b9:7b:50:4f:72:37:5d:1f:4c:4e:40:ae:
b4:1c:be:8a:ca:c7:d5:5b:2b:c9:4e:5f:8f:e9:76:94:eb:7d:
e6:e9:e7:ab:0f:a2:1c:f5:68:32:2f:e4:70:f1:15:0d:af:6c:
88:53:35:cf:2e:72:ed:6c:8f:bc:02:e5:34:be:ab:46:3c:f6:
44:39:cb:5e:50:c8:ce:ff:54:09:07:bb:9a:97:7c:f5:e7:32:
dd:47:9f:0c:e4:80:87:ad:64:e3:87:4c:4d:46:85:4b:3d:0e:
76:9c:79:cb:4c:3d:3c:f8:9c:04:18:0a:aa:68:59:e4:2a:70:
ad:89:3e:55:0e:5d:e8:52:40:74:fc:59:4e:4a:70:ba:c2:db:
94:df:44:7a:33:28:12:e9:f8:8a:06:71:c5:42:d3:f3:0c:81:
f4:d0:26:89
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUHgYZK0vpRYWK/jBE2DsiqVl9WYMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm
NTg3M2RjNDAeFw0yNjA4MTEwODMyMzRaFw0yNzA4MTAwODM3MzRaMDMxMTAvBgNV
BAMTKDJCM0FGMDc3QTI1NzFBQUM4NjBDNzRGQkJEMkRGMUMzNzcwNkU4NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5VYGAsX2zvtg/qXjgpF/euIq5
FYH5nyGrSC+hhT0TNuFhWBR0B8TqcwGzkm7k/oumAts7Rgsk6XjHMvc3TSXVdhO9
YRITe197JYTomut57JcKgpt0hl68NkA1ntztTXgKLDYHhk4YphIaJKVLYPBEaJZD
ilvAkTh32+8PTSgvmG4NZVZBJthNHtne0cUUSXs3WmNipu02Y1DszrHxDzTOvPSF
TzmbX4daGGLQU7M7UWXNcKHOLfVFrc96pBmzs+kCjLFkpckvpGZ9ET8xjhJvbfUC
X34Z11fB5as240PCfLHkbL6d3GDIwmMj+KVPugP4dNiwLkQX5MyHs+4qbmOVAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUKzrwd6JXGqyGDHT7vS3xw3cG6GMwHwYDVR0j
BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj
ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX
SFBjUS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDFiMzVmOGIt
NmY0OC00YmFkLWIxODUtNWMxZGFhOGFjZGE5LzAvMzYzMjJlMzEzMjMyMmUzMTM4
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMjM0MzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAA+erowDQYJKoZIhvcNAQELBQADggEBADc+NvMCpfQ99azUDAlBS6ajz8+vc9P3
Bnmi/oflwGWlVcntRZ6B+YEPpKnjc9sOTgEOs1gzSJduCiG8HSEjvdvLiOUfBwJY
2VZKPIqGe9W3lycq9Y4H34u/kVcBY0RcHbl7UE9yN10fTE5ArrQcvorKx9VbK8lO
X4/pdpTrfebp56sPohz1aDIv5HDxFQ2vbIhTNc8ucu1sj7wC5TS+q0Y89kQ5y15Q
yM7/VAkHu5qXfPXnMt1HnwzkgIetZOOHTE1GhUs9DnacectMPTz4nAQYCqpoWeQq
cK2JPlUOXehSQHT8WU5KcLrC25TfRHozKBLp+IoGccVC0/MMgfTQJok=
-----END CERTIFICATE-----
Generated at Fri Aug 14 11:23:06 2026 by rpki-client