Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/36322e3134312e36322e302f32342d3234203d3e20323033373538.roa
File: 36322e3134312e36322e302f32342d3234203d3e20323033373538.roa (raw, json)
Hash identifier: BDaAnSyPRKdKpq+KzSHaBOVytnqZq5Z4N/IJ01gcIyU=
Subject key identifier: 3B:15:89:29:AE:5E:64:D2:9C:84:C8:32:0A:47:E4:69:F9:E3:3F:54
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 335ABB91E02027C99274EBA7E479963B6111B34F
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/36322e3134312e36322e302f32342d3234203d3e20323033373538.roa
Signing time: Fri 17 Jul 2026 15:22:01 +0000
ROA not before: Fri 17 Jul 2026 15:17:01 +0000
ROA not after: Fri 16 Jul 2027 15:22:01 +0000
asID: 203758
IP address blocks: 62.141.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:5a:bb:91:e0:20:27:c9:92:74:eb:a7:e4:79:96:3b:61:11:b3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Jul 17 15:17:01 2026 GMT
Not After : Jul 16 15:22:01 2027 GMT
Subject: CN=3B158929AE5E64D29C84C8320A47E469F9E33F54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c7:f6:08:a7:c7:53:03:29:14:23:61:ee:9f:
71:a9:61:95:21:9a:9d:3c:19:98:c1:b4:0e:50:48:
a4:f2:19:8b:fd:2b:52:d6:ad:31:39:3b:fe:0f:78:
d8:53:52:73:0d:9a:20:e2:86:21:04:0b:b0:c1:c9:
0f:18:8e:84:b2:76:b4:97:f1:88:32:fa:4a:31:df:
78:86:87:3a:f5:13:49:2a:78:d4:f4:79:bc:3c:c2:
fe:bc:97:6b:36:96:3a:65:a7:9e:81:a3:c8:06:e4:
d8:99:95:75:61:aa:c4:4f:3d:bc:2b:b9:f1:15:db:
3b:2e:ef:1c:c1:a9:a9:dd:db:06:a0:02:10:10:c8:
74:e5:6d:76:46:52:2c:e8:4f:d4:84:3b:33:c4:b5:
bd:5f:6d:f2:d0:3c:6a:f6:f1:29:cc:f6:39:a4:43:
28:76:67:be:80:48:ed:cc:2f:55:8d:af:19:a6:87:
08:7c:b6:b8:c2:e0:63:9a:57:f2:f6:da:19:84:c1:
54:66:d5:c7:dd:ab:7b:a3:9e:40:8f:e2:2f:4b:c3:
03:ed:08:b8:32:77:8e:bb:4b:91:97:2f:b9:df:88:
01:5b:a7:5d:dd:65:55:6e:2d:6a:0f:55:21:fa:61:
1b:06:50:5e:4f:9a:68:e6:4b:d3:a0:f9:84:e1:89:
f1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:15:89:29:AE:5E:64:D2:9C:84:C8:32:0A:47:E4:69:F9:E3:3F:54
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/36322e3134312e36322e302f32342d3234203d3e20323033373538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.141.62.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:3b:cd:a8:55:22:a5:b0:37:7d:3a:2a:73:6f:ee:3b:83:a5:
96:fc:24:40:23:b1:f5:5b:dd:b2:7a:c6:03:2c:5b:9b:c6:83:
c9:7c:e4:eb:ba:84:8f:c4:85:1c:01:64:10:52:fb:51:cb:4d:
aa:e5:56:0a:77:7f:e7:37:a0:d9:4c:03:3e:a4:75:5a:09:82:
e6:46:0a:37:c6:10:f5:db:f2:b3:88:a3:5c:89:23:c8:f2:94:
cc:4c:89:67:69:05:b7:ec:67:d1:b4:e8:4b:b6:3f:1b:de:74:
c6:14:34:63:63:2d:ad:b0:e4:50:3c:62:fc:51:04:7d:ae:f6:
8d:81:28:c9:d5:f3:38:ec:7b:e5:76:95:f9:c4:5d:32:c8:fe:
54:3f:df:ef:55:ec:75:9c:44:5b:4a:8c:3d:cc:b6:10:bf:a0:
4e:f1:38:39:9d:f3:f8:64:47:5e:f0:0a:5f:08:e7:4c:b8:92:
b1:0f:39:e2:e4:17:71:9a:75:6c:35:7b:47:a9:e9:b4:7d:2a:
4e:74:ac:34:80:10:90:c3:fd:a6:09:0c:aa:75:01:ae:a4:00:
da:ce:6c:6f:d9:69:2e:95:63:46:c0:15:a0:82:fa:f3:bc:90:
86:8e:0a:c4:34:15:cb:46:4a:8a:23:d0:16:4e:76:9c:20:1e:
5c:22:f0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:06 2026 by rpki-client