Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136312e302f32342d3234203d3e20313334343934.roa
File: 36322e38342e3136312e302f32342d3234203d3e20313334343934.roa (raw, json)
Hash identifier: g9217m7O/1y4K2TIRR51kkZ5Va977wKLVC/Av3kkV1U=
Subject key identifier: 18:B7:2C:20:A0:A9:C5:B4:AF:D6:1C:2D:B9:C9:E8:50:1D:7B:9C:37
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 677F7654C859B00E55F567D20992464720D1AF51
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136312e302f32342d3234203d3e20313334343934.roa
Signing time: Wed 05 Aug 2026 12:21:42 +0000
ROA not before: Wed 05 Aug 2026 12:16:42 +0000
ROA not after: Wed 04 Aug 2027 12:21:42 +0000
asID: 134494
IP address blocks: 62.84.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:7f:76:54:c8:59:b0:0e:55:f5:67:d2:09:92:46:47:20:d1:af:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 5 12:16:42 2026 GMT
Not After : Aug 4 12:21:42 2027 GMT
Subject: CN=18B72C20A0A9C5B4AFD61C2DB9C9E8501D7B9C37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0c:a5:9b:7a:1e:ce:95:e7:06:5a:de:36:06:
14:dc:cf:65:dc:ab:78:94:02:c9:1d:71:87:2f:88:
5a:6b:5a:da:b7:80:53:0d:80:94:ca:98:fc:3a:7a:
db:a7:08:63:31:ad:e1:7a:f5:6c:55:a9:39:a0:2c:
06:32:27:75:c0:d2:71:60:28:ad:5d:68:9e:28:9b:
0d:90:98:79:05:87:89:05:f7:45:ce:83:70:db:41:
37:cc:4a:f0:f1:a8:43:f6:4d:4d:82:a9:38:b8:d2:
17:bf:19:2e:bc:cc:5d:04:c8:e3:15:6a:dc:17:4e:
ac:8b:82:5d:ee:8f:4d:94:bf:86:b0:80:dc:1d:1e:
14:5b:2a:27:d0:5e:9a:98:eb:7a:1d:93:f6:3d:0d:
62:bc:b2:03:30:52:b2:c9:7d:be:2f:bf:8f:e5:a7:
ce:03:6a:10:45:96:f1:22:48:f6:ff:75:8f:cf:97:
68:9f:e5:0e:23:74:5d:cf:c9:4d:79:20:00:74:12:
9c:a6:8e:84:45:44:44:78:b2:e9:15:b5:34:53:eb:
53:08:99:3b:83:dd:19:6c:71:2b:c7:37:08:96:2d:
8e:fb:97:db:41:eb:eb:a5:10:af:a1:f1:a6:15:be:
74:bb:e4:72:fd:4b:7a:72:33:03:48:b9:a3:cb:d9:
aa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B7:2C:20:A0:A9:C5:B4:AF:D6:1C:2D:B9:C9:E8:50:1D:7B:9C:37
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136312e302f32342d3234203d3e20313334343934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.161.0/24
Signature Algorithm: sha256WithRSAEncryption
48:ef:14:e0:67:f8:4f:fa:0d:51:57:d0:cf:e3:73:b5:e9:43:
d1:c1:72:d6:f0:b4:8e:07:94:10:76:70:b4:b5:2a:03:1f:91:
6f:d8:8d:c7:67:3b:76:5f:14:9a:03:f1:ff:fa:78:2b:f5:c0:
a7:ca:b5:20:c3:b6:35:ef:27:dc:09:f9:72:e5:f0:4d:90:c4:
02:68:15:d9:49:83:78:f6:f7:06:d1:2c:56:0a:be:c7:3c:fc:
44:04:23:f5:0b:07:03:25:e3:de:d1:d1:bb:3e:3d:39:a8:24:
20:e2:1f:60:e1:dd:98:1b:05:2b:40:e3:72:3b:28:43:a7:13:
03:f8:cb:d0:bc:76:b1:6b:f8:5c:99:33:30:24:5a:91:74:f9:
2e:43:bf:95:cf:4a:be:9e:dd:2d:df:12:6a:e1:1e:db:f0:5e:
4c:1f:72:b0:57:bd:a1:9f:4f:55:34:77:28:9b:aa:4e:91:63:
20:2e:ab:1c:b8:bf:7b:df:3c:21:99:21:71:5c:aa:d2:9a:c5:
eb:6b:77:17:b3:84:f1:40:59:1b:53:69:e7:fe:91:26:73:a2:
3e:bc:ba:a2:d1:49:66:db:d1:ca:aa:74:a7:8f:9f:85:ec:30:
05:a3:71:7f:be:55:69:14:85:1f:ba:f2:98:f3:dc:67:12:47:
b4:dc:d2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 00:29:12 2026 by rpki-client