Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/36322e332e31382e302f32342d3234203d3e20323136323232.roa
File: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (raw, json)
Hash identifier: ZeyolARCBdnsWHMtggmGQcHiKd280GfS1/j3/Bp8NX4=
Subject key identifier: 2D:61:8C:72:8C:60:47:75:22:09:AA:DA:0C:CB:CD:87:5E:F2:DC:AD
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 09F0063F6EF68693BDADB257E032A9BF1A9DF35E
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/36322e332e31382e302f32342d3234203d3e20323136323232.roa
Signing time: Wed 09 Sep 2026 08:49:33 +0000
ROA not before: Wed 09 Sep 2026 08:44:33 +0000
ROA not after: Wed 08 Sep 2027 08:49:33 +0000
asID: 216222
IP address blocks: 62.3.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:f0:06:3f:6e:f6:86:93:bd:ad:b2:57:e0:32:a9:bf:1a:9d:f3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Sep 9 08:44:33 2026 GMT
Not After : Sep 8 08:49:33 2027 GMT
Subject: CN=2D618C728C6047752209AADA0CCBCD875EF2DCAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:4c:23:c8:5a:23:84:3f:f1:43:52:d1:17:
1e:8d:d5:f0:53:1c:9f:67:82:97:de:50:ef:81:30:
32:cb:a8:6f:ef:11:b6:15:af:25:bf:58:20:57:1e:
6d:21:55:1a:a0:50:19:c7:51:d0:65:3c:e8:6b:cf:
30:24:60:e1:a5:2f:13:cf:9e:74:98:a5:1e:50:e0:
db:89:72:d6:2f:7a:1e:94:e6:c2:6a:48:ca:f3:ab:
a0:8b:a2:4f:9c:d5:ce:0f:d4:57:bc:9a:56:ac:4a:
c5:0e:e3:41:d6:38:67:1d:6a:fb:f4:61:c3:00:58:
2b:2e:9a:11:9a:58:a9:97:ea:21:f0:2c:0a:53:ac:
73:ec:a6:57:1d:84:61:b2:60:4a:a5:fe:11:16:d5:
92:75:fb:b1:93:74:9c:3c:b5:e0:dd:a3:d8:6d:42:
04:b5:ab:ae:93:0b:3c:27:ba:b8:4a:5b:0c:c9:e1:
e5:fe:55:b8:75:72:1a:f7:e2:64:e4:34:00:cb:6f:
fb:af:de:c9:5f:0c:54:f3:cc:07:07:60:89:71:89:
31:98:d9:57:e1:a7:84:8c:48:f0:3c:32:f7:ba:e2:
bc:35:04:38:8f:bb:ea:6f:a3:5d:cf:eb:c6:66:6a:
04:84:f7:88:79:6a:8e:11:0b:3e:61:e6:46:26:d8:
66:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:61:8C:72:8C:60:47:75:22:09:AA:DA:0C:CB:CD:87:5E:F2:DC:AD
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/36322e332e31382e302f32342d3234203d3e20323136323232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.18.0/24
Signature Algorithm: sha256WithRSAEncryption
36:77:6c:84:58:1b:0a:5d:58:9d:37:b8:a8:83:fb:37:fb:e0:
00:02:22:9a:62:a7:07:50:4d:a5:bf:65:7b:f6:b7:c0:2f:20:
6f:f9:90:d8:87:da:1b:cc:6e:eb:cb:d0:4a:86:a4:46:ae:83:
99:f1:56:74:d7:99:e9:ed:2d:48:a2:bb:74:54:11:9d:70:89:
16:05:fd:10:ae:18:fe:2a:f7:ab:94:05:31:4a:da:5f:73:5e:
9a:98:80:cd:09:c2:38:31:61:8a:53:d4:0b:11:b0:6f:35:c7:
c7:bb:ec:b3:a7:ea:15:10:29:85:47:90:b7:b7:c2:bf:60:74:
f5:15:55:e2:92:ed:ad:a1:a9:a2:2b:2b:70:88:e5:a9:9b:01:
52:bb:d3:05:74:76:ca:a2:00:ff:6f:b4:38:e9:4d:cf:43:b4:
52:d7:ac:e2:6e:f2:71:72:65:6c:70:17:86:85:88:b6:c4:f9:
be:ef:19:84:82:47:07:fe:50:3b:3d:11:22:b0:63:57:ae:3f:
0c:38:ba:1b:95:fd:18:8a:b0:da:9d:9e:f0:25:c5:ab:bf:27:
85:e3:30:c7:c3:57:d6:f6:53:e8:16:19:df:b1:40:bf:13:34:
cd:45:28:00:d9:eb:ee:24:8c:b9:90:76:37:0a:81:d3:84:a9:
ec:3e:55:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 17:48:33 2026 by rpki-client