Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136302e302f32312d3234203d3e20383334.roa
File: 36322e38342e3136302e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: xTIUmbCmaIwEWox3fRjAyDDHGjj42xfTJ7q3f3QAmzY=
Subject key identifier: 15:C4:30:2E:19:51:81:B6:34:3F:A4:66:52:6D:2D:69:23:FB:9C:51
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 49399D7A57E768D1141A211BD1073EB686A9B6EB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136302e302f32312d3234203d3e20383334.roa
Signing time: Sun 19 Jul 2026 08:26:21 +0000
ROA not before: Sun 19 Jul 2026 08:21:21 +0000
ROA not after: Sun 18 Jul 2027 08:26:21 +0000
asID: 834
IP address blocks: 62.84.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:39:9d:7a:57:e7:68:d1:14:1a:21:1b:d1:07:3e:b6:86:a9:b6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 19 08:21:21 2026 GMT
Not After : Jul 18 08:26:21 2027 GMT
Subject: CN=15C4302E195181B6343FA466526D2D6923FB9C51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:7b:10:4c:63:71:a1:ba:1e:57:bf:16:8a:
0c:ee:5f:be:c6:d6:cb:af:44:fc:eb:f1:3e:c8:11:
8b:a9:0f:68:26:e0:7a:7d:8a:b2:c3:29:2f:4c:3c:
47:77:ef:00:2b:4d:df:b3:f2:8a:ca:84:4d:fd:f9:
e8:87:fd:d5:30:6e:18:48:6b:be:b0:61:3c:ae:00:
5d:0c:c9:ce:b2:d1:2b:1c:5a:e9:34:19:76:8d:72:
14:e0:4b:a2:46:c4:b7:fd:05:33:aa:e0:52:bf:0b:
c1:f7:6d:4d:d0:c5:33:2e:fe:bf:61:84:e7:27:8f:
f8:24:73:99:fe:6c:97:f4:2a:8b:90:c8:2c:58:49:
e6:4e:ee:be:8f:73:1e:15:cf:4e:1f:6a:03:dc:3a:
f2:95:49:7a:84:83:fb:8a:d8:08:6f:6c:3b:d5:9c:
e1:40:91:80:cc:f2:e0:ff:0e:31:57:f5:5b:fc:db:
e7:95:b6:58:6a:76:08:4b:d1:1d:62:e5:5c:52:d2:
46:f5:e4:61:06:89:8f:6d:ef:1a:10:67:53:d6:84:
40:d4:67:cd:10:f5:94:01:15:7d:18:d9:b5:1a:98:
a0:7a:85:53:10:79:bc:5d:52:e7:04:2e:2b:b3:ae:
1b:d0:3c:c4:2b:26:e8:55:21:f8:46:19:cf:24:39:
f4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C4:30:2E:19:51:81:B6:34:3F:A4:66:52:6D:2D:69:23:FB:9C:51
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136302e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.160.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:30:b6:6c:a1:31:d2:74:92:f4:a4:9b:3d:89:a5:bb:d3:d1:
be:aa:a6:c8:c4:e6:98:b3:27:05:17:a7:e9:54:42:8d:c6:28:
59:a6:25:95:03:0e:c5:f0:16:94:86:03:1a:30:ed:0a:46:46:
d2:99:77:c7:76:52:e4:96:b1:8c:33:d6:6b:f2:d0:18:91:0d:
1b:b3:52:41:ff:1e:36:4c:ed:08:dc:89:29:51:83:cc:66:74:
c3:07:c4:b6:44:4a:02:3c:d5:0e:9b:54:8d:ec:3b:ca:e4:3d:
e6:d9:6a:be:59:0d:81:b8:f3:56:fc:9c:57:08:c7:bb:3e:94:
c3:3a:fe:09:cf:62:57:24:04:af:e5:56:e2:dd:f6:e5:23:8f:
3a:55:2f:c2:73:e0:78:fb:45:bc:47:02:32:d8:d1:22:03:70:
68:56:7c:d5:87:0e:db:69:86:f3:92:cc:f9:fa:19:77:f8:20:
ff:ea:86:1f:be:89:e1:40:8b:36:d0:ea:a1:7b:ef:8c:27:f2:
e1:42:06:9d:b0:8d:1f:09:7d:a0:00:6f:57:3d:46:35:07:50:
7d:ef:3f:18:d6:9c:84:5a:d5:db:6b:e5:f5:1d:b9:74:2b:12:
d1:a2:e2:49:ac:9c:6f:c0:f0:a7:b8:18:57:a1:a0:63:00:14:
14:35:cd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:54:07 2026 by rpki-client