Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/36322e3132322e3138362e302f32342d3234203d3e20343032383636.roa
File: 36322e3132322e3138362e302f32342d3234203d3e20343032383636.roa (raw, json)
Hash identifier: Gi/MFaHQEM/Dn6eXagj6hZsyESLpGovppu9NGfn557s=
Subject key identifier: F9:1F:D5:48:19:FA:2E:90:E2:8E:19:01:14:79:E5:0B:19:D1:09:29
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 2118E39F4C12ACF345F9C437856ADF7BF56BA630
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/36322e3132322e3138362e302f32342d3234203d3e20343032383636.roa
Signing time: Fri 18 Sep 2026 11:51:44 +0000
ROA not before: Fri 18 Sep 2026 11:46:44 +0000
ROA not after: Fri 17 Sep 2027 11:51:44 +0000
asID: 402866
IP address blocks: 62.122.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 11:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:18:e3:9f:4c:12:ac:f3:45:f9:c4:37:85:6a:df:7b:f5:6b:a6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Sep 18 11:46:44 2026 GMT
Not After : Sep 17 11:51:44 2027 GMT
Subject: CN=F91FD54819FA2E90E28E19011479E50B19D10929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cc:04:6f:c2:14:f7:36:5c:3f:6d:b7:a5:84:
a9:fa:f3:eb:b6:a6:c9:9d:68:61:8a:b9:ac:0e:7b:
a4:67:83:42:19:fa:15:0c:89:fb:48:b6:7b:c3:4e:
29:b5:cb:11:c3:6e:26:33:fb:62:70:e8:62:37:3a:
0f:53:85:69:2f:2e:a4:76:ee:fc:bc:4f:fb:5a:11:
6b:bd:1b:eb:31:5c:53:f5:79:3f:82:81:cb:cc:ad:
6a:cd:91:cf:e6:aa:c7:29:c5:64:2c:64:63:61:06:
46:a5:14:5d:8a:ae:26:95:91:82:c8:8e:76:5c:55:
f5:09:15:d8:9c:8c:09:55:89:a2:ea:be:2f:b6:3e:
c9:aa:ec:e8:44:f4:d1:95:95:a7:34:de:12:93:46:
b5:4f:83:53:df:1e:a8:fb:fc:6b:c4:35:bb:72:29:
78:0d:36:18:44:85:47:f0:62:6e:46:d9:c1:e8:fd:
a7:ee:0c:2a:a0:f5:a7:db:2c:42:1b:1b:90:87:37:
cf:95:55:7c:96:3c:c7:b7:c7:01:63:3f:db:ef:74:
7f:70:1a:69:49:6f:b5:ed:a8:da:08:9e:98:8a:3f:
b0:a4:cc:83:27:71:f0:d1:9e:b5:a8:db:5e:73:17:
13:0f:17:e5:f1:a1:33:a6:30:56:09:41:5d:96:f2:
88:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1F:D5:48:19:FA:2E:90:E2:8E:19:01:14:79:E5:0B:19:D1:09:29
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/36322e3132322e3138362e302f32342d3234203d3e20343032383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.186.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:89:ee:6e:d2:a1:d0:ce:ea:35:e2:ef:ae:c1:ae:b1:a0:22:
41:61:72:3a:6f:b4:c1:de:cd:e8:86:f9:2d:93:34:e2:29:71:
7f:51:ff:a5:74:f3:f9:a8:16:57:f9:76:a6:0c:92:fc:f4:45:
dc:11:ea:0a:d7:ea:95:eb:09:4a:1b:b7:ab:fd:f2:2b:60:45:
c2:e3:03:ed:40:fe:51:8e:34:e9:f5:6e:ed:9b:c5:e1:ac:55:
a5:b2:58:86:8f:fe:d4:a7:b1:27:84:12:e8:5c:66:92:6c:03:
7f:e9:36:3a:4d:5d:3e:83:91:be:a4:07:9f:ad:c6:58:a0:5b:
db:4a:fd:6d:51:c0:aa:f6:4d:48:7e:66:06:15:e8:22:83:a5:
22:32:70:e8:a2:03:f7:e3:d9:a7:67:3a:18:77:e3:bd:06:42:
1d:b7:93:b4:9d:5d:7a:49:ef:85:e4:d5:73:93:7a:1e:28:12:
de:3e:14:f4:48:37:42:26:d7:a1:7f:6a:7c:20:5d:79:df:56:
41:03:6e:48:c7:e2:12:5c:8a:46:7b:57:86:f4:bc:ad:bf:3c:
88:03:53:be:81:35:86:38:2f:27:bf:09:32:83:26:08:b9:1d:
92:c0:07:fe:4d:52:6f:3e:ea:f6:55:70:72:df:f6:aa:67:ba:
f5:fb:af:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 22:11:31 2026 by rpki-client