Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/36322e3130362e37322e302f32342d3234203d3e20323031333431.roa
File: 36322e3130362e37322e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: VWf8Jo8jGxcvjs5gE7+eeysuadYpyT5Zas9y6WETyq0=
Subject key identifier: 4F:20:07:7C:2F:1F:55:E1:62:B0:EA:4B:74:DB:C9:09:98:18:EA:64
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7536BD59B9F0CDA9F985F7B5D2A2DE5A1C283717
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/36322e3130362e37322e302f32342d3234203d3e20323031333431.roa
Signing time: Thu 24 Sep 2026 17:29:21 +0000
ROA not before: Thu 24 Sep 2026 17:24:21 +0000
ROA not after: Thu 23 Sep 2027 17:29:21 +0000
asID: 201341
IP address blocks: 62.106.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 21:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:36:bd:59:b9:f0:cd:a9:f9:85:f7:b5:d2:a2:de:5a:1c:28:37:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Sep 24 17:24:21 2026 GMT
Not After : Sep 23 17:29:21 2027 GMT
Subject: CN=4F20077C2F1F55E162B0EA4B74DBC9099818EA64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:89:4f:46:c9:ec:a8:05:bd:cf:ff:03:bb:1d:
69:55:25:0e:00:d1:ad:fd:0c:12:8e:aa:ab:a9:fd:
5b:01:a3:2b:ab:c0:d6:29:b5:fe:e1:c0:0f:09:99:
99:44:1d:bc:3a:d5:43:39:0c:2e:3d:f6:3e:d6:a6:
cb:3c:e8:cb:37:a6:12:c1:cc:1c:12:ea:5e:53:96:
fd:79:d1:76:89:49:18:96:ff:c1:53:48:0b:3d:40:
b7:4b:6f:3d:ca:c3:4a:46:43:11:20:a9:d3:bb:d8:
f6:03:8b:25:50:5e:fe:8d:31:02:e2:26:d8:bf:5d:
e3:1c:3d:a6:b1:ca:b9:c2:bf:8c:c9:1a:f9:26:16:
06:2c:d8:06:f2:28:0f:08:11:d0:80:6d:1d:f1:62:
35:e1:fa:dd:6b:7d:83:37:ed:eb:4d:5f:af:4f:a7:
b1:b3:3c:34:d7:b6:ee:df:32:54:2c:48:9e:91:b7:
9b:b0:84:57:ec:ce:a9:34:bf:9f:9b:0e:de:1c:38:
89:61:13:ce:95:48:52:9e:c3:74:88:9c:d7:33:a5:
ed:df:8c:c0:4c:ca:aa:c8:14:23:e7:9c:c8:c8:11:
63:fa:db:a6:17:64:d8:fe:2f:ac:0e:1d:c4:21:c1:
6a:d0:69:47:92:b9:a0:a0:8b:97:bf:96:32:70:2f:
bc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:20:07:7C:2F:1F:55:E1:62:B0:EA:4B:74:DB:C9:09:98:18:EA:64
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/36322e3130362e37322e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.72.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:85:21:d0:80:0d:7f:98:c8:92:3c:37:17:fc:47:54:fb:d5:
de:7e:e8:5a:f4:0b:81:d7:0a:28:7a:18:ef:1b:74:aa:4d:6e:
cf:8d:a7:22:b2:a0:9e:ee:c5:e5:e9:b2:bb:f9:11:17:60:80:
2f:c1:d8:aa:74:1c:e5:4e:7b:80:d0:be:06:bc:dc:34:db:9e:
a7:bf:0b:b4:8a:28:45:05:4c:bb:61:c7:75:4a:34:f6:d9:ff:
ab:2c:bc:85:53:a3:7a:15:d0:3b:23:51:e5:e7:d3:a8:9e:45:
36:44:a4:68:15:42:a9:43:5a:93:54:97:ca:4e:2b:2c:8c:b0:
85:fe:46:c9:d3:81:1a:32:8e:ff:f7:6e:73:13:10:26:38:df:
6a:39:05:71:bb:37:5d:18:15:63:3b:58:d9:05:0c:60:81:eb:
87:85:4c:4f:6f:06:9b:6e:d7:ff:f4:f8:62:83:fb:2a:2c:17:
4f:d8:94:dd:af:65:63:d8:8d:8f:a9:1f:16:72:dd:c7:cf:90:
f9:a2:7d:3a:d2:c0:1c:89:98:2b:97:35:b3:9f:00:09:60:d2:
03:f3:5f:4c:e5:39:ce:cf:15:f7:5f:bc:bd:db:5f:4b:e6:71:
9a:b9:88:c3:de:4e:7d:89:34:b9:fe:0e:17:31:c1:cb:96:9f:
3a:13:ad:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:44:46 2026 by rpki-client