Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136302e302f32342d3234203d3e2039333034.roa
File: 36322e38342e3136302e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: i9U79mFQ2qTpRvHx7MpHp9ZG4aPACm3c0oTAuZTJXHI=
Subject key identifier: 26:38:8C:37:26:6E:22:8C:24:E1:50:F2:3B:BA:D8:7C:FB:BA:BE:A2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 68DC68453308D8F1952ECE7227A153F1D19FB5C2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136302e302f32342d3234203d3e2039333034.roa
Signing time: Tue 02 Jun 2026 05:12:49 +0000
ROA not before: Tue 02 Jun 2026 05:07:49 +0000
ROA not after: Tue 01 Jun 2027 05:12:49 +0000
asID: 9304
IP address blocks: 62.84.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 12:09:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:dc:68:45:33:08:d8:f1:95:2e:ce:72:27:a1:53:f1:d1:9f:b5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 2 05:07:49 2026 GMT
Not After : Jun 1 05:12:49 2027 GMT
Subject: CN=26388C37266E228C24E150F23BBAD87CFBBABEA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:25:e4:52:04:50:6d:95:7b:77:3f:ca:b6:36:
45:da:0d:96:9e:70:d6:cd:da:b3:8e:15:e7:f3:36:
ae:6a:f7:20:c3:2f:33:28:52:e6:51:ea:f6:94:3d:
37:c0:25:98:1c:55:35:27:16:35:a7:94:79:44:e3:
97:c9:10:9b:d4:78:8e:e2:e6:1c:ba:a5:1e:01:68:
cc:a3:b3:c4:6e:70:98:62:db:d3:58:27:cd:be:f8:
8c:a2:17:d1:5b:5c:ba:e8:4a:3e:5a:90:e9:8a:ff:
96:4f:3f:17:3c:47:0e:25:71:9b:7d:28:c3:3a:be:
f1:4a:53:13:76:00:4f:89:14:86:de:e6:9c:d2:7d:
37:a4:f3:f0:dd:ab:c3:62:7a:9d:76:17:4d:3b:d8:
49:96:ad:b0:00:06:f3:54:4e:00:8d:f1:1e:ca:ae:
62:a9:61:4e:e3:f9:ab:45:6a:74:b5:18:32:10:e8:
2a:67:e9:39:4b:d6:a6:92:72:08:98:2b:93:0a:33:
e1:ba:35:7d:06:cf:7d:86:29:fa:81:32:f3:ad:8a:
0e:eb:55:d7:97:e9:87:31:16:99:dd:7a:b6:98:84:
db:ae:81:aa:a8:5a:21:38:c2:88:5c:9e:03:25:2d:
56:6e:36:a3:44:20:93:5d:a4:4e:7c:2b:77:01:61:
c4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:38:8C:37:26:6E:22:8C:24:E1:50:F2:3B:BA:D8:7C:FB:BA:BE:A2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136302e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.160.0/24
Signature Algorithm: sha256WithRSAEncryption
26:0f:17:84:3e:0e:3c:c6:da:51:be:13:a4:0f:8f:e8:92:1d:
7c:25:e8:f5:c0:c7:52:34:40:d3:9a:e4:1e:0c:63:f9:53:94:
91:a0:9d:9b:76:95:4f:30:e9:8c:81:e5:1b:b2:5f:24:f5:ad:
1d:fc:39:6a:99:b5:10:05:3c:ef:f2:9e:e0:37:1e:fe:90:4e:
57:81:f0:a2:f5:17:58:e2:68:2d:5f:cc:8d:43:8c:2a:a3:0b:
09:1c:f9:28:5c:00:7b:fe:e6:02:09:0b:29:3a:32:10:5a:5a:
fc:33:91:fe:0d:fd:1c:48:41:04:3d:ac:fd:f8:55:e8:c1:9e:
22:10:5e:48:b5:5d:91:e4:37:aa:cd:c9:b9:84:26:0a:1a:18:
e6:93:ad:27:30:1e:6f:2f:31:3c:eb:d9:93:3a:7e:fe:e1:c9:
d0:80:1c:cd:b2:07:21:cc:f9:c2:43:d5:d2:75:19:39:d3:3b:
73:25:d5:94:32:26:55:91:7f:03:d6:da:f0:51:46:a2:98:7f:
f8:ff:9b:cb:db:56:1c:54:39:90:29:04:a0:f9:f9:dd:09:2f:
9f:e5:d9:54:4d:34:03:1d:2d:7e:ed:0e:b6:72:67:4a:66:f6:
76:83:0a:e3:57:4d:2d:69:1e:02:e7:6a:5f:c9:b6:d7:ac:1c:
12:ab:e3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:50:38 2026 by rpki-client