Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/36322e332e33362e302f32342d3234203d3e20313437303439.roa
File: 36322e332e33362e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: fVFj/kXyX1NXxE9OmqmEjJrs8z5pxg+ifW+M56v3nrc=
Subject key identifier: E9:18:7C:00:FD:57:C6:0E:36:F8:83:73:37:D9:C1:C2:5E:24:90:27
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 33033A9FDE95A2564FA05DF910EAA4C7C799A17B
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/36322e332e33362e302f32342d3234203d3e20313437303439.roa
Signing time: Fri 25 Sep 2026 08:29:22 +0000
ROA not before: Fri 25 Sep 2026 08:24:22 +0000
ROA not after: Fri 24 Sep 2027 08:29:22 +0000
asID: 147049
IP address blocks: 62.3.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:03:3a:9f:de:95:a2:56:4f:a0:5d:f9:10:ea:a4:c7:c7:99:a1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Sep 25 08:24:22 2026 GMT
Not After : Sep 24 08:29:22 2027 GMT
Subject: CN=E9187C00FD57C60E36F8837337D9C1C25E249027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e6:c3:d5:4a:2b:9d:08:97:1b:95:d5:b1:dc:
b5:ee:3b:db:bd:8b:d1:9d:d8:71:a6:0c:c1:8c:fd:
f1:bc:d4:b7:7f:f3:0f:c4:ce:f8:41:48:08:17:7d:
13:b8:3c:72:69:45:38:1a:50:6a:62:8b:b1:1b:10:
27:3f:06:7e:ce:9b:11:26:70:b2:f4:4c:18:a8:16:
64:99:a2:e8:f3:2c:30:e7:58:93:12:58:67:40:bc:
bc:d4:71:55:dc:b3:42:10:65:f1:d8:10:86:aa:63:
c9:af:40:8c:e1:6a:1c:5e:03:11:f6:ec:c4:aa:ae:
15:6f:d1:bb:33:86:fb:57:b4:41:84:94:a4:23:39:
60:9a:a6:5b:c8:a5:8e:fb:c2:4f:06:b5:f4:b7:2e:
c0:b3:ae:9b:77:0c:85:ef:4e:4b:80:a3:34:b9:0d:
d5:41:be:7f:70:ca:dc:3b:58:6d:0f:95:3b:1b:6b:
e3:df:e0:10:cf:c6:1f:47:0f:0c:d1:27:ff:aa:8d:
1c:73:5b:65:b9:86:88:a0:db:08:8f:31:5d:8c:4e:
43:37:47:77:f6:55:47:cf:27:c8:f8:47:8f:5b:5c:
9a:1a:44:a6:c2:cc:f2:89:7a:6e:b4:bb:44:01:fa:
21:f0:3a:be:fd:5a:5e:a0:80:76:e7:54:f7:90:45:
81:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:18:7C:00:FD:57:C6:0E:36:F8:83:73:37:D9:C1:C2:5E:24:90:27
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/36322e332e33362e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.36.0/24
Signature Algorithm: sha256WithRSAEncryption
94:75:2d:57:3f:bc:b2:34:45:89:7b:5f:68:32:71:71:c7:45:
3b:69:2d:40:14:39:98:b6:01:c7:99:d2:c1:77:9e:18:4a:9b:
ef:11:dc:b6:71:85:b4:2a:c8:c8:28:d3:41:ea:94:1b:11:c1:
e2:b6:de:8b:91:3a:83:24:43:57:cf:3e:f2:0e:cd:92:9a:a3:
6f:25:0b:95:f3:ad:a0:28:18:ad:0a:11:6a:1f:32:82:b5:e6:
94:81:3d:9c:12:f1:09:ce:2f:35:b1:46:1a:1e:b0:06:a7:ff:
52:bb:eb:8b:13:bb:fd:74:ee:82:15:19:0e:3c:e3:35:13:03:
15:8a:09:71:94:8f:d3:49:01:2e:b4:2d:51:cc:1a:2b:24:3e:
d7:cc:e5:47:81:02:bd:20:7a:ed:dc:d7:9e:f4:71:73:19:ee:
1f:d9:4c:28:c0:9a:fb:14:0e:5d:f4:f1:d4:25:a3:f9:56:45:
c5:83:35:83:d7:5b:93:84:2b:d1:3e:ab:8c:d0:19:d9:e4:24:
51:e8:53:94:95:08:c3:b5:9a:37:c3:ab:14:10:79:54:16:7b:
3a:73:fd:b2:df:b1:b6:2b:79:66:40:4b:b1:bb:4d:bc:10:b8:
28:f3:19:e4:ed:5c:12:12:c7:61:4b:af:c9:bb:4e:44:0d:50:
41:1e:5a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:54:03 2026 by rpki-client