Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/36322e332e34362e302f32342d3234203d3e20323034313730.roa
File: 36322e332e34362e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: GggrLZ5FhvdMXs+j8hkco4VGM5Ug6bNn7l9nyLmgr2k=
Subject key identifier: 4A:DD:7E:A7:C6:52:64:EE:AB:12:2F:F7:5A:94:53:49:1F:E2:33:72
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6DD756D9E6002E4337FF6327E9AA9D21607D7B54
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/36322e332e34362e302f32342d3234203d3e20323034313730.roa
Signing time: Fri 23 Oct 2026 16:30:18 +0000
ROA not before: Fri 23 Oct 2026 16:25:18 +0000
ROA not after: Fri 22 Oct 2027 16:30:18 +0000
asID: 204170
IP address blocks: 62.3.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:d7:56:d9:e6:00:2e:43:37:ff:63:27:e9:aa:9d:21:60:7d:7b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:18 2026 GMT
Not After : Oct 22 16:30:18 2027 GMT
Subject: CN=4ADD7EA7C65264EEAB122FF75A9453491FE23372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:54:71:0b:8e:03:cd:53:41:b9:9c:2a:b8:
a1:55:e7:f2:03:02:70:ac:24:f0:ce:52:1e:be:a1:
64:be:d1:24:64:a1:7b:4a:65:11:03:32:5d:3f:1e:
9c:f4:8b:b7:95:90:e4:cf:53:fc:f4:3c:e1:0f:f6:
3f:ed:7a:bf:e1:46:03:66:5c:61:e7:89:1c:ad:59:
69:47:1d:b2:84:8a:13:b8:5b:85:5e:27:c5:0f:fa:
22:b9:4f:18:8a:0c:98:3c:63:a9:03:7e:d7:ca:d7:
2c:88:d7:6d:91:28:ed:85:4a:10:2d:d9:af:21:65:
a3:06:e9:f2:12:4f:c6:46:24:bf:87:1b:74:3b:5b:
1c:f2:5a:03:f6:0e:d0:df:65:6f:18:1c:38:b9:a5:
7f:75:2d:11:ca:59:60:1f:dc:4d:d1:07:bd:4b:fd:
0d:52:30:42:6a:f3:2e:93:5e:6b:bc:b4:e4:45:9d:
1d:88:05:e4:58:d7:23:e9:f8:f1:a3:c2:e9:98:8e:
ae:61:48:cd:63:4f:c7:20:21:db:f7:f6:91:e4:d5:
bc:59:36:5d:5c:86:c9:9a:0f:67:82:c8:e3:5d:82:
1c:57:15:1e:e6:da:5d:67:14:9e:aa:f4:e9:1f:f4:
ad:ef:87:5a:aa:b0:ed:27:31:1b:a3:eb:ac:a8:66:
a1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DD:7E:A7:C6:52:64:EE:AB:12:2F:F7:5A:94:53:49:1F:E2:33:72
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/36322e332e34362e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.46.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:b7:e4:7d:a1:ef:f6:40:50:b5:6a:30:11:21:c0:14:a0:be:
c4:06:0a:8c:d1:19:a3:c9:d4:dc:30:1c:7d:dc:1e:a6:ed:e5:
93:96:90:fe:0b:59:53:0a:b6:89:2c:67:11:62:f2:9c:7e:24:
f3:f2:e8:b5:2a:fa:c6:09:4a:65:39:8d:a2:6d:d3:05:aa:ca:
ac:1a:37:c9:68:1f:6d:29:ac:ac:b5:60:e2:2a:bf:f2:ad:7d:
3a:f3:cc:30:5e:03:39:01:93:5a:34:d4:47:55:06:06:81:ae:
a4:9b:be:cf:86:31:ab:58:28:b6:fc:0c:bc:1c:d1:9d:77:f5:
a8:6c:51:58:18:76:10:12:db:50:90:1e:56:de:fc:e5:8f:ea:
d1:72:11:fc:de:c7:2e:22:99:84:19:79:f9:50:7c:45:b4:e4:
8d:fc:61:a5:f8:1a:fe:7e:ef:eb:60:4a:d1:17:20:30:76:cc:
e6:81:fc:51:26:2c:e9:d5:40:a9:67:3b:a7:ed:29:44:3b:24:
78:9d:f3:ea:21:f5:70:86:62:47:43:d7:0d:ee:c4:32:83:3e:
22:ab:ab:eb:73:97:67:3f:95:46:b6:9e:6f:87:ee:d7:a8:1c:
06:95:4c:26:10:8e:bc:d0:bc:be:b6:98:5c:ba:fe:d2:94:8f:
e7:8d:11:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:38:04 2026 by rpki-client