Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/36322e3134312e36302e302f32332d3234203d3e203331313033.roa
File: 36322e3134312e36302e302f32332d3234203d3e203331313033.roa (raw, json)
Hash identifier: QrnvXx6i7km/KphPP37k4Bmi0GJV/aRgTI7F8KHu09g=
Subject key identifier: 02:DC:92:CD:FE:E2:53:CD:81:84:D7:B7:5A:12:57:03:79:B4:5D:60
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 6B92CE9490BABCEDEF0713FEB0ECD67D1EBFA166
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/36322e3134312e36302e302f32332d3234203d3e203331313033.roa
Signing time: Mon 20 Apr 2026 13:47:05 +0000
ROA not before: Mon 20 Apr 2026 13:42:05 +0000
ROA not after: Mon 19 Apr 2027 13:47:05 +0000
asID: 31103
IP address blocks: 62.141.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 10:08:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:92:ce:94:90:ba:bc:ed:ef:07:13:fe:b0:ec:d6:7d:1e:bf:a1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Apr 20 13:42:05 2026 GMT
Not After : Apr 19 13:47:05 2027 GMT
Subject: CN=02DC92CDFEE253CD8184D7B75A12570379B45D60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:51:5a:d1:72:38:07:c5:3b:70:3b:75:c0:
9b:36:4e:cb:da:82:96:fa:c5:d8:f7:4d:d6:71:cc:
3a:76:3f:6e:2f:8d:1e:55:35:99:0b:1a:85:4e:3c:
a4:59:93:03:42:97:8b:5f:16:52:f1:c5:c5:8f:fc:
e3:e5:d0:05:65:6d:d6:af:c4:ad:3f:90:b3:78:d5:
db:e6:d6:36:ad:0b:15:6e:44:0a:ca:a8:1f:e1:e5:
89:9c:6d:26:e0:a3:8e:67:c7:4a:a8:38:2d:4d:62:
d9:e0:ed:c4:34:34:82:8b:52:16:cc:a5:2c:d1:d1:
de:aa:a1:30:6d:f8:2d:e8:2e:e2:64:a1:e6:5d:12:
0a:09:84:98:a2:ec:1c:53:54:67:1a:2e:5b:ac:de:
91:f2:8f:3a:e6:71:56:24:2c:bb:70:46:69:89:48:
70:e6:77:37:64:d3:db:f3:13:ae:26:5e:7a:d6:01:
4b:63:ad:99:33:04:e3:80:9f:f1:76:01:2c:c7:08:
dc:ea:11:df:ff:72:e0:81:e7:fe:62:7c:15:1c:ee:
a1:42:0e:49:52:a7:3e:74:b2:f4:72:8f:d3:9a:b0:
be:73:16:aa:b4:75:46:57:57:be:78:a9:8e:82:70:
4f:04:bc:74:de:f5:96:8c:63:58:82:06:7a:8a:fc:
23:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DC:92:CD:FE:E2:53:CD:81:84:D7:B7:5A:12:57:03:79:B4:5D:60
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/36322e3134312e36302e302f32332d3234203d3e203331313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.141.60.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:32:41:4e:7e:d2:05:48:1f:0a:31:95:c9:f4:a2:84:2a:d8:
68:72:f2:17:fe:36:6e:1b:9f:17:77:f6:6b:fa:89:53:bd:d8:
1e:9d:18:58:31:4a:54:59:fe:7d:3a:93:cc:70:c9:a3:a4:9d:
ca:34:9b:f0:65:f3:2b:cf:17:64:61:f9:5c:f0:0b:4d:6c:33:
c0:70:49:e8:7f:0d:46:02:f1:b9:dc:5d:6b:88:70:0e:d3:90:
3a:d8:72:4d:e8:ed:9a:e0:f1:80:0a:67:20:16:1b:54:b4:12:
87:1a:13:84:cc:46:fa:f6:6e:d8:9c:45:7a:6f:14:60:69:39:
35:16:11:f0:2a:1c:f1:7d:eb:9d:af:a1:bd:e2:ac:98:3f:fa:
c3:8c:ad:e6:9e:a5:c8:fd:f7:c2:10:5a:08:19:61:61:20:5a:
cf:07:2c:3b:c9:a4:36:5e:bf:c2:5a:ba:a5:c8:36:28:85:1c:
66:47:52:59:13:31:97:1b:05:98:93:f5:3a:f3:fa:55:e7:1f:
f3:8c:09:f9:46:45:49:c1:c0:2f:cb:c4:8e:ed:63:32:a9:7f:
f8:06:9c:f4:a3:0d:9c:ee:a1:97:d2:e6:bc:25:c6:5b:e2:80:
13:c0:de:a4:95:57:33:4d:58:81:ee:43:3c:e5:68:86:4b:39:
15:1e:87:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 03:52:02 2026 by rpki-client