Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/36322e3139322e3137392e302f32342d3234203d3e20313938373533.roa
File: 36322e3139322e3137392e302f32342d3234203d3e20313938373533.roa (raw, json)
Hash identifier: rwqDkDyC0PnceRDiQjNPGvdnYWENJkl4SiC87MPYYQ8=
Subject key identifier: 71:8B:C6:F3:4D:09:80:17:9D:F9:46:A2:D2:0A:5C:FD:16:E7:26:E0
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 5CDEAF4AAE43F339DBB23866A93B8D2BA9043A48
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/36322e3139322e3137392e302f32342d3234203d3e20313938373533.roa
Signing time: Fri 16 Oct 2026 18:54:34 +0000
ROA not before: Fri 16 Oct 2026 18:49:34 +0000
ROA not after: Fri 15 Oct 2027 18:54:34 +0000
asID: 198753
IP address blocks: 62.192.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:de:af:4a:ae:43:f3:39:db:b2:38:66:a9:3b:8d:2b:a9:04:3a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 16 18:49:34 2026 GMT
Not After : Oct 15 18:54:34 2027 GMT
Subject: CN=718BC6F34D0980179DF946A2D20A5CFD16E726E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c1:18:a3:44:a5:e5:00:28:1c:2b:2c:e4:f9:
e2:e7:a3:0c:4d:d4:b5:8f:bf:8f:4a:a6:80:e1:51:
58:29:73:9c:95:42:f0:ac:23:76:fc:17:03:9d:23:
22:93:3f:24:45:8a:c1:52:b7:d7:00:9f:9d:91:a8:
c2:ae:e6:40:eb:f1:24:65:b7:8b:6d:6e:f4:3c:78:
1a:f9:a1:5c:f7:be:28:04:e0:90:5c:fe:61:af:4f:
a5:64:42:98:41:7f:0b:0c:8c:47:74:f3:04:ab:25:
19:50:44:60:5d:12:99:e2:bb:14:7c:b3:e3:59:31:
4a:bb:7b:fa:3f:07:e2:51:ee:c7:2b:30:1e:ed:dc:
ca:cf:71:70:96:2a:11:31:03:78:16:21:e3:a3:fc:
0f:ea:df:9f:b3:02:8c:09:e7:e7:bb:eb:db:e2:02:
59:8f:a3:67:89:6d:2a:20:99:7e:8b:67:fa:15:01:
fd:0d:82:0b:af:33:d5:ef:76:69:b1:a8:5c:e4:e0:
c9:1c:fe:34:6d:91:a7:a0:02:34:bb:6a:f9:bd:d7:
d5:aa:a8:a2:c7:3f:27:b8:6d:59:2a:ad:73:08:15:
48:0c:cd:2b:b4:4f:6a:80:97:d3:e1:93:43:55:6a:
5a:c9:78:76:01:77:a9:72:d1:96:63:91:a4:de:5f:
ab:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8B:C6:F3:4D:09:80:17:9D:F9:46:A2:D2:0A:5C:FD:16:E7:26:E0
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/36322e3139322e3137392e302f32342d3234203d3e20313938373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.179.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:b5:67:44:0e:e0:b3:69:6c:e7:46:be:64:6f:9d:95:f0:a5:
64:6e:ca:39:91:e4:52:7a:8e:7f:48:53:9d:47:b4:62:0c:5a:
2d:eb:cb:63:0e:9d:a3:d8:a5:76:45:7e:e8:fc:56:31:93:ab:
a9:73:d4:66:ea:81:0c:4b:ff:e5:3a:8d:c4:99:50:3e:7c:b4:
8b:51:c9:cf:4e:18:9f:de:08:8d:7e:07:c9:4e:c4:1c:d8:52:
60:77:b0:8c:17:2f:af:4e:0e:ec:2d:5c:d1:69:42:4c:cb:be:
b4:00:33:e5:fc:0e:58:c3:d9:a4:83:7c:7a:fe:7c:4c:cc:de:
0a:7b:f3:20:34:50:8d:c6:d4:db:bd:f4:32:b2:7d:61:18:da:
3d:6a:ab:30:2c:45:64:15:9c:21:3d:47:a6:70:61:af:61:40:
1f:3b:cb:94:cc:99:62:99:f3:12:a8:2b:51:46:ac:b5:84:72:
f4:22:ca:4a:3f:03:a8:d4:83:8b:40:00:1b:1a:ac:e6:de:e7:
5a:d7:84:97:05:cf:06:c2:51:76:f1:8e:30:43:ba:e8:95:d4:
6e:4b:0b:9e:52:81:03:f0:98:c4:28:81:88:97:3d:8b:e4:0a:
49:fa:49:62:34:50:0d:18:48:b5:e3:9a:1f:b8:55:02:e8:2a:
9d:48:99:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:02:49 2026 by rpki-client