Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136302e302f32342d3234203d3e20383334.roa
File: 36322e38342e3136302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: VztvXxCiKLgXEMyFoTx8O/tMI6KPT39CKXSaCvf3G2E=
Subject key identifier: 54:00:93:D1:3A:73:6F:5C:12:AC:27:20:30:A9:51:1F:54:22:62:15
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1A592D0BF788462944CC566D9F2C5AB494A7877F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136302e302f32342d3234203d3e20383334.roa
Signing time: Wed 01 Jul 2026 17:16:17 +0000
ROA not before: Wed 01 Jul 2026 17:11:17 +0000
ROA not after: Wed 30 Jun 2027 17:16:17 +0000
asID: 834
IP address blocks: 62.84.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:59:2d:0b:f7:88:46:29:44:cc:56:6d:9f:2c:5a:b4:94:a7:87:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 1 17:11:17 2026 GMT
Not After : Jun 30 17:16:17 2027 GMT
Subject: CN=540093D13A736F5C12AC272030A9511F54226215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0a:a7:2c:da:45:6a:17:5a:f0:9e:9a:89:ce:
24:8c:dc:53:61:6c:0c:3d:49:f4:51:6f:27:ec:da:
4d:89:da:e0:7c:61:02:a4:5f:25:95:09:f7:f5:24:
ab:e2:27:47:ea:b1:88:8d:fc:81:38:e9:33:c5:91:
fd:c3:30:bd:45:af:de:7f:86:ab:63:22:ff:79:9b:
54:09:45:93:a8:7f:d7:09:34:1b:c9:7b:5f:18:09:
3b:fa:05:4c:41:2f:d6:88:d2:94:1a:33:88:bd:de:
42:8f:cd:9a:57:1c:f4:da:16:1c:71:92:0d:b8:4f:
a3:80:66:05:4e:39:28:89:82:0e:6c:5c:38:92:e2:
d8:4e:c6:5a:99:bb:7e:01:d6:92:64:65:5e:70:e8:
21:c1:3a:c0:9b:77:6f:90:54:80:27:da:1c:72:6f:
cb:18:31:9d:01:c7:9c:f3:6e:f8:5f:dd:c4:2b:0c:
16:18:0c:ac:81:f1:25:65:86:1e:9e:fd:46:d1:dd:
cf:53:51:1b:45:37:95:24:97:e6:1e:ce:54:67:eb:
4d:b1:54:ce:e0:3c:cf:6f:fe:41:ff:f9:4f:80:55:
6a:67:d8:0e:ce:0b:bd:10:7a:68:e9:a6:65:7c:08:
1a:b0:f4:51:74:61:08:50:12:08:20:07:72:9c:f6:
a1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:00:93:D1:3A:73:6F:5C:12:AC:27:20:30:A9:51:1F:54:22:62:15
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.160.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:e8:3f:77:e6:e1:2e:32:d8:2a:ce:8f:57:21:55:76:10:25:
97:89:f1:55:bf:9c:63:4f:3e:e7:f8:d5:e9:f7:ae:8e:ce:4a:
3a:40:3b:b4:c1:10:1b:1b:a5:bd:1c:56:a1:d2:d6:b5:b1:10:
ef:5d:de:c1:97:fb:01:4b:55:6d:3f:b4:da:2d:f4:55:af:97:
74:7e:0f:c0:cd:c5:3e:a3:26:f7:d9:14:dd:bf:a1:1b:31:68:
04:1a:09:19:db:d4:2d:dc:30:c1:09:af:75:a8:15:5c:5c:ea:
cc:83:d6:6b:46:c3:2a:e5:91:bc:8e:bf:7d:ba:96:52:b6:fa:
5d:0e:12:62:c6:3a:7d:27:cc:f6:fb:89:e3:5e:1e:d3:a9:15:
0a:e1:c6:76:ea:d6:31:ed:93:0e:6b:b8:31:21:2f:5b:ef:8f:
57:a5:1a:b2:14:9a:b2:b0:b8:90:37:03:f8:da:40:cf:ad:8c:
2b:fe:8f:e7:a9:9f:77:e1:18:39:5d:b2:2c:69:47:50:0d:87:
4a:d1:37:16:87:62:78:49:cd:31:72:ce:dd:f7:b8:aa:d1:ad:
83:4f:4d:c0:b8:3b:aa:5f:3f:a0:c0:e8:7b:e7:42:fa:78:c4:
db:e3:fc:21:9d:9e:2b:ff:83:67:af:64:56:f2:bf:10:77:3e:
d5:43:b0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:54:06 2026 by rpki-client