Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/36322e3139322e3137382e302f32342d3234203d3e20313938373533.roa
File: 36322e3139322e3137382e302f32342d3234203d3e20313938373533.roa (raw, json)
Hash identifier: 4wqLXS7Cj9iCBRkUH4v40XGnR9k8DmykzJjOdLdOJ1c=
Subject key identifier: F3:F4:97:77:91:B1:25:5A:E0:68:D3:B4:C7:C1:47:FA:0E:56:EB:45
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 52D9DC3CA37BE117535DEB6BBD4A2B132BCC5DC7
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/36322e3139322e3137382e302f32342d3234203d3e20313938373533.roa
Signing time: Fri 16 Oct 2026 18:54:33 +0000
ROA not before: Fri 16 Oct 2026 18:49:33 +0000
ROA not after: Fri 15 Oct 2027 18:54:33 +0000
asID: 198753
IP address blocks: 62.192.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:d9:dc:3c:a3:7b:e1:17:53:5d:eb:6b:bd:4a:2b:13:2b:cc:5d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 16 18:49:33 2026 GMT
Not After : Oct 15 18:54:33 2027 GMT
Subject: CN=F3F4977791B1255AE068D3B4C7C147FA0E56EB45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7a:25:4d:18:c2:ae:dc:cd:1f:fa:c9:92:72:
cf:cf:7b:50:84:7b:32:5f:d9:bb:85:3e:bb:60:86:
b2:53:5b:d6:f3:7b:01:db:54:11:1e:75:ad:cd:d0:
e6:c7:d9:c5:c4:4b:55:12:92:06:36:0b:24:98:b7:
9a:04:13:22:24:8d:f9:99:80:e1:a0:c8:a8:0f:32:
c9:25:1d:91:fc:70:ce:22:0c:50:1c:7f:51:1e:2a:
10:02:c2:8d:62:48:91:40:00:5c:89:a0:82:d6:83:
35:80:8a:94:d2:d7:38:98:f6:2d:51:e3:25:c9:9c:
f8:63:c5:dd:48:7a:a7:b2:de:8c:e8:bf:d0:93:45:
90:ea:3d:b4:18:4c:aa:22:c6:7e:6d:9c:5f:4a:e0:
8d:b4:bd:1f:fc:9e:de:10:59:1f:52:01:da:49:43:
d5:9e:ba:c1:5d:bf:fd:ca:9f:49:10:f7:7b:2c:63:
ca:81:2f:c0:d6:2e:38:3c:51:e1:9f:f1:51:f2:87:
bb:70:50:4c:f8:98:2d:f6:c3:fa:77:08:f5:c1:0f:
87:77:70:3c:8c:44:cf:3d:0e:58:da:6e:02:c2:0c:
11:47:39:3e:03:2f:b1:d5:60:44:24:e4:30:2e:7e:
1a:aa:4e:3f:f1:f6:2a:3a:59:db:3a:38:6d:cc:34:
29:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F4:97:77:91:B1:25:5A:E0:68:D3:B4:C7:C1:47:FA:0E:56:EB:45
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/36322e3139322e3137382e302f32342d3234203d3e20313938373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.178.0/24
Signature Algorithm: sha256WithRSAEncryption
35:eb:2e:c3:fe:a6:34:51:a7:97:2c:ba:4f:fe:0e:ed:5b:7a:
74:ed:17:31:92:9d:dc:62:eb:92:af:52:bb:d7:dc:e2:38:7d:
4f:05:bd:05:6c:b3:2d:4c:7e:04:ee:a5:fb:5a:3f:ad:a0:96:
a6:c2:06:e8:6f:eb:49:af:2c:49:85:72:6d:39:b6:cd:4b:ae:
2a:da:65:41:db:39:4b:27:ff:68:71:ec:8f:46:ca:04:f5:25:
bd:17:8a:d6:a3:b6:67:e3:ea:63:0f:93:98:27:ea:67:a3:4e:
ac:20:b4:39:5a:f8:83:66:57:2e:c2:46:2d:dc:cb:21:ab:60:
30:da:22:69:87:82:a5:38:e2:83:2b:9a:09:5e:e0:48:f1:11:
cc:f5:10:1f:21:63:20:bb:1d:6a:1c:ab:ad:8e:61:a5:1a:f5:
a9:47:55:b5:7f:b3:d0:52:e3:ed:e8:bd:25:ed:1b:8c:50:91:
b1:6d:91:7f:a5:2b:80:46:2c:2b:f8:69:19:92:d4:66:79:f3:
4c:c5:49:7c:be:97:6a:7d:a9:e7:00:58:c4:56:6c:71:b4:e6:
07:7a:71:b0:53:5a:8d:7b:01:57:8a:f9:54:8f:11:93:60:34:
a6:64:a4:32:37:99:dd:57:f2:16:55:9b:8d:8d:7f:6c:3e:22:
9d:ac:8e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:02:15 2026 by rpki-client