Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/36322e3139322e3137372e302f32342d3234203d3e20313938373533.roa
File: 36322e3139322e3137372e302f32342d3234203d3e20313938373533.roa (raw, json)
Hash identifier: 0kZIKafdyJGpkoCXAH/yQ1ysqVNLKFvJ1yYYHCSHgqQ=
Subject key identifier: E2:B7:19:EA:49:AC:9D:B8:0F:48:E4:5E:F3:46:0E:04:54:1E:19:C6
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 0C7733EA7C623B1AC2D416CA0C93E54B85FB70D8
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/36322e3139322e3137372e302f32342d3234203d3e20313938373533.roa
Signing time: Fri 16 Oct 2026 18:54:32 +0000
ROA not before: Fri 16 Oct 2026 18:49:32 +0000
ROA not after: Fri 15 Oct 2027 18:54:32 +0000
asID: 198753
IP address blocks: 62.192.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:77:33:ea:7c:62:3b:1a:c2:d4:16:ca:0c:93:e5:4b:85:fb:70:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 16 18:49:32 2026 GMT
Not After : Oct 15 18:54:32 2027 GMT
Subject: CN=E2B719EA49AC9DB80F48E45EF3460E04541E19C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:75:b0:ac:79:c6:41:c9:b8:c5:04:2d:2d:
0c:d4:de:57:03:6c:61:34:3c:61:2c:90:97:6c:58:
8a:e2:02:42:83:8d:92:ef:91:f3:26:be:97:59:c4:
08:9b:ac:22:4a:ed:0e:30:7d:27:e5:3d:fa:02:9d:
64:38:01:9b:f1:c8:e9:73:6d:1b:7b:ec:ad:3e:55:
66:08:a4:23:53:b2:57:a5:05:a0:a7:2f:c8:2d:4f:
ef:26:cd:a2:06:e4:4e:66:dc:64:ae:f3:1c:de:7b:
4f:39:b9:a0:2c:d2:44:86:96:da:e8:be:9b:fa:96:
b9:b2:8f:de:e5:b7:e0:fd:17:b7:c8:88:20:d0:5e:
00:c3:51:a2:d0:0a:5b:8f:07:13:2f:2d:9c:19:0c:
dd:5e:a8:68:22:8b:9d:55:83:18:b3:4e:7b:4b:11:
69:9d:61:c0:9c:4a:35:4b:38:9d:b2:c4:62:db:d5:
ee:44:3f:86:7b:1c:02:a1:7c:00:e3:3c:a4:28:82:
f8:4a:4e:72:30:71:30:02:53:38:0c:23:6e:04:9b:
12:07:1c:69:de:d5:5b:eb:59:30:0a:ee:2c:c3:2e:
4d:92:ae:cf:b7:36:67:57:42:07:55:cf:a9:fc:20:
bb:3e:31:74:fe:a9:dd:e2:87:98:9e:c2:98:2f:c2:
14:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B7:19:EA:49:AC:9D:B8:0F:48:E4:5E:F3:46:0E:04:54:1E:19:C6
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/36322e3139322e3137372e302f32342d3234203d3e20313938373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.177.0/24
Signature Algorithm: sha256WithRSAEncryption
55:0c:07:36:09:9d:19:7f:84:c1:ec:15:ce:5e:6f:03:8c:e9:
fc:af:02:5a:f1:3c:d4:9c:19:1d:ca:6a:6b:2f:6b:ad:33:84:
58:0d:f2:e9:b2:87:c9:35:69:60:a8:51:b5:38:59:56:a4:77:
33:04:6d:bb:86:3b:10:f9:c1:af:0f:61:68:4c:7d:c0:76:1a:
ed:6f:7b:57:3c:bd:a9:25:4c:72:40:52:77:80:10:eb:43:2b:
bf:f2:d1:67:01:7a:70:6b:33:48:3a:eb:3b:d4:81:16:df:56:
78:9f:e6:e8:af:ee:ce:22:5b:34:0c:c3:f5:32:61:d8:07:20:
5a:85:56:e3:bc:bf:6b:57:e7:0f:43:70:b0:b6:e0:94:6f:be:
f6:17:9b:8c:ac:b2:da:75:4d:d5:17:b5:29:e8:67:e1:52:cb:
5e:45:28:4b:3f:a5:87:8e:f8:81:e3:40:6c:cb:f3:ef:9a:61:
8e:03:6b:dd:81:b8:bd:bc:c1:be:a2:b6:6d:3f:9b:ba:78:51:
82:44:75:54:90:00:d4:21:0b:1f:d8:93:f9:b1:c8:87:5a:8f:
d4:89:97:6c:33:fa:fa:d0:84:8a:63:e6:c2:27:b2:f0:44:c4:
26:2d:ea:fa:0d:be:52:93:38:9c:2c:fa:ce:5f:f7:ce:be:7e:
b5:54:aa:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:49:41 2026 by rpki-client