Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136302e302f32342d3234203d3e20313937323133.roa
File: 36322e38342e3136302e302f32342d3234203d3e20313937323133.roa (raw, json)
Hash identifier: XPRomi9F6nSXFiCTwx1CXQnRPQPB/e8QxUX/SNSCZWc=
Subject key identifier: C4:C0:D9:69:80:39:98:22:1F:77:E2:EC:2D:13:4A:27:A5:8C:BA:DF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4E2A5C649C81B6AAD6E69BB21C6237B9DE89DD92
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136302e302f32342d3234203d3e20313937323133.roa
Signing time: Fri 21 Aug 2026 10:52:09 +0000
ROA not before: Fri 21 Aug 2026 10:47:09 +0000
ROA not after: Fri 20 Aug 2027 10:52:09 +0000
asID: 197213
IP address blocks: 62.84.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:2a:5c:64:9c:81:b6:aa:d6:e6:9b:b2:1c:62:37:b9:de:89:dd:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 21 10:47:09 2026 GMT
Not After : Aug 20 10:52:09 2027 GMT
Subject: CN=C4C0D969803998221F77E2EC2D134A27A58CBADF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:79:c6:c6:5c:13:ee:db:10:29:5b:2c:51:77:
08:4d:53:fa:39:56:18:d5:25:75:06:0b:3f:74:d0:
5a:5a:bf:b5:f7:d6:5c:c1:cb:07:d5:45:49:bb:b3:
63:9b:f0:a4:6c:a4:06:0c:d5:14:0f:7a:c6:82:ba:
9f:ae:6e:ff:d4:4e:a3:9d:fd:96:f8:3d:f2:8b:57:
4c:83:6a:4e:46:75:73:3e:23:f6:ca:cb:ac:f0:e4:
b2:f8:cc:71:b3:0f:74:b6:f5:a9:3d:0f:1a:82:e9:
b9:c0:c5:e4:13:2f:93:e8:f5:24:c1:db:1d:cb:3b:
b1:1f:9d:96:3d:ff:63:a4:1d:d4:16:3c:29:12:79:
53:85:7d:49:11:7d:fb:f4:17:a2:2b:2e:dd:be:1b:
6d:5b:3b:c3:73:6d:5e:31:db:b9:cf:1f:ad:c5:7b:
14:7d:a0:ef:08:4b:8d:3c:1c:2e:0e:4f:a8:8a:9c:
f7:da:36:f6:e5:95:b7:b7:91:64:2b:54:4a:f7:0b:
54:e2:b3:7f:a6:79:af:5f:51:46:14:72:72:f3:21:
27:54:12:e0:19:17:b7:b9:3a:02:eb:c6:96:32:9c:
fb:76:2a:b1:90:20:39:f0:da:52:d6:04:cb:54:20:
43:ff:b5:9f:6a:b8:21:f3:02:f7:6a:1a:4c:c7:49:
e7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C0:D9:69:80:39:98:22:1F:77:E2:EC:2D:13:4A:27:A5:8C:BA:DF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136302e302f32342d3234203d3e20313937323133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.160.0/24
Signature Algorithm: sha256WithRSAEncryption
03:e9:39:65:6e:cf:cb:b2:df:04:5d:7f:15:87:34:47:08:54:
29:1c:2b:f2:6a:6f:ee:1a:8f:4c:6b:1c:71:5f:08:5e:97:1c:
81:03:02:09:aa:b6:c8:1e:63:25:c8:c6:bd:1e:8d:ae:da:f7:
15:e6:da:17:64:b4:24:77:c5:91:61:bc:fa:61:ea:80:0b:14:
ab:98:70:d4:74:76:d1:23:a6:a6:69:ab:7b:d9:b9:c0:71:48:
96:33:73:02:0a:68:d1:14:b7:69:21:1d:40:27:c8:ae:07:48:
73:5b:91:95:1c:61:18:83:75:d7:23:b1:04:bb:a0:19:8a:da:
5f:21:50:d0:db:86:2c:8e:bb:5f:3d:f2:f7:0c:c3:96:e2:53:
d4:c0:31:c0:a7:d8:55:1f:fc:b9:e0:63:46:30:84:d0:3b:a4:
af:88:4c:09:81:2b:a4:d6:52:f3:2b:89:c2:03:d3:e4:a2:c5:
02:83:ed:d9:44:b3:3e:1a:c1:78:15:3d:f8:4e:a3:73:b0:fc:
f2:04:91:75:50:57:ce:22:29:65:1f:29:f4:48:41:72:83:56:
60:11:c0:ed:9e:1c:ea:b3:a5:e7:c7:b9:b4:11:fa:39:64:bd:
e5:02:54:34:61:bf:58:48:bb:b4:04:74:ac:4c:83:d3:88:fd:
f3:4b:ad:a2
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUTipcZJyBtqrW5puyHGI3ud6J3ZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA4MjExMDQ3MDlaFw0yNzA4MjAxMDUyMDlaMDMxMTAvBgNV
BAMTKEM0QzBEOTY5ODAzOTk4MjIxRjc3RTJFQzJEMTM0QTI3QTU4Q0JBREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWecbGXBPu2xApWyxRdwhNU/o5
VhjVJXUGCz900Fpav7X31lzBywfVRUm7s2Ob8KRspAYM1RQPesaCup+ubv/UTqOd
/Zb4PfKLV0yDak5GdXM+I/bKy6zw5LL4zHGzD3S29ak9DxqC6bnAxeQTL5Po9STB
2x3LO7EfnZY9/2OkHdQWPCkSeVOFfUkRffv0F6IrLt2+G21bO8NzbV4x27nPH63F
exR9oO8IS408HC4OT6iKnPfaNvbllbe3kWQrVEr3C1Tis3+mea9fUUYUcnLzISdU
EuAZF7e5OgLrxpYynPt2KrGQIDnw2lLWBMtUIEP/tZ9quCHzAvdqGkzHSeeFAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUxMDZaYA5mCIfd+LsLRNKJ6WMut8wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzYzMjJlMzgzNDJlMzEzNjMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzOTM3MzIzMTMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
PlSgMA0GCSqGSIb3DQEBCwUAA4IBAQAD6Tllbs/Lst8EXX8VhzRHCFQpHCvyam/u
Go9MaxxxXwhelxyBAwIJqrbIHmMlyMa9Ho2u2vcV5toXZLQkd8WRYbz6YeqACxSr
mHDUdHbRI6amaat72bnAcUiWM3MCCmjRFLdpIR1AJ8iuB0hzW5GVHGEYg3XXI7EE
u6AZitpfIVDQ24YsjrtfPfL3DMOW4lPUwDHAp9hVH/y54GNGMITQO6SviEwJgSuk
1lLzK4nCA9PkosUCg+3ZRLM+GsF4FT34TqNzsPzyBJF1UFfOIillHyn0SEFyg1Zg
EcDtnhzqs6Xnx7m0Efo5ZL3lAlQ0Yb9YSLu0BHSsTIPTiP3zS62i
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:58 2026 by rpki-client