Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136312e302f32342d3234203d3e20313939353530.roa
File: 36322e38342e3136312e302f32342d3234203d3e20313939353530.roa (raw, json)
Hash identifier: JBK6hRY6600z6Gd7OOj8IH1Xa2AFSdnD2AXgpnBT16g=
Subject key identifier: AC:43:C2:04:0B:18:65:EE:AC:25:F1:89:80:9D:14:8F:30:4C:9A:D1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 605F697FA8C56A72D7B15BE41FFE17875E679450
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136312e302f32342d3234203d3e20313939353530.roa
Signing time: Tue 13 Oct 2026 20:11:35 +0000
ROA not before: Tue 13 Oct 2026 20:06:35 +0000
ROA not after: Tue 12 Oct 2027 20:11:35 +0000
asID: 199550
IP address blocks: 62.84.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:5f:69:7f:a8:c5:6a:72:d7:b1:5b:e4:1f:fe:17:87:5e:67:94:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 13 20:06:35 2026 GMT
Not After : Oct 12 20:11:35 2027 GMT
Subject: CN=AC43C2040B1865EEAC25F189809D148F304C9AD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:8e:4e:5f:68:ac:aa:9e:e1:12:bc:de:a2:
28:55:1a:07:9b:23:f8:a4:60:bc:f0:58:2f:d9:0f:
05:09:47:04:2b:62:1a:4c:44:ae:10:92:ab:b4:15:
4f:46:51:98:bb:4e:9f:58:a5:9b:c3:12:c5:ec:8e:
ae:20:97:a0:43:ed:05:ce:14:a3:2f:a8:f1:43:0a:
b0:97:ca:6e:ce:a9:a7:fc:c2:85:6c:63:e4:9d:8a:
c1:d4:41:27:60:d4:74:a4:bf:b6:39:b2:c4:67:ef:
78:b8:54:11:f2:04:9c:1e:5d:e7:23:58:ba:e8:92:
bc:f2:0a:60:2d:14:3d:ff:e7:95:c9:a2:26:2a:f1:
18:f0:27:63:bb:15:89:e5:c9:ac:8c:45:38:3a:ff:
9b:7d:3b:2c:64:ce:d3:f0:f3:46:9a:a7:bb:aa:3c:
97:c3:7d:b8:d4:4a:96:db:7d:a8:3e:a9:7a:b8:f5:
b2:9b:03:11:dd:1a:09:2b:14:99:95:8d:51:17:e1:
13:6b:14:10:4b:7b:c3:91:53:de:da:72:01:f8:28:
21:a7:28:06:91:40:dd:d3:d1:0f:2c:a5:bf:67:62:
a7:28:48:3a:6d:8e:ec:2f:b8:54:ca:a9:48:71:79:
c1:17:cd:2b:a0:db:53:ce:9e:72:ed:2c:84:a0:59:
3e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:43:C2:04:0B:18:65:EE:AC:25:F1:89:80:9D:14:8F:30:4C:9A:D1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136312e302f32342d3234203d3e20313939353530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.161.0/24
Signature Algorithm: sha256WithRSAEncryption
44:6f:43:3d:47:97:7d:b7:e4:01:d2:93:ef:25:00:e1:2d:3f:
ff:2b:a2:df:86:e5:28:24:01:ee:19:58:83:88:39:35:ec:a3:
b4:e9:c4:0a:9a:2c:1e:86:d7:7f:46:79:b2:23:e3:fc:c5:f9:
17:b6:75:14:98:11:e2:58:d3:fb:c0:be:1b:06:27:a4:58:88:
9c:ea:3d:59:75:aa:26:87:76:67:55:a8:e6:89:ac:bf:08:88:
c7:97:44:52:ef:54:9a:00:53:a1:e9:a9:f1:dd:59:91:47:c3:
6e:10:0d:f9:25:72:59:4e:22:ba:3e:23:41:4b:32:bc:e4:18:
17:d7:20:ae:72:a2:ab:1d:8b:1a:9a:f0:d3:78:72:2d:f9:e5:
b7:01:86:7d:a9:7b:51:2b:1b:44:c5:30:5a:5f:86:a9:3a:9c:
18:18:a1:a7:24:26:04:02:8f:30:0e:c4:a9:11:ad:9b:eb:48:
57:c1:cc:f2:7a:54:a6:49:c2:c5:43:48:b2:86:79:50:1b:c0:
dc:59:02:96:04:2c:1a:49:07:3b:f7:d5:98:c8:ed:3a:76:a9:
00:24:ff:7b:69:cd:ba:1a:93:ed:1e:7b:5c:59:53:ef:52:97:
73:5e:7d:40:8a:29:e1:51:ec:29:1c:3c:79:15:cd:04:85:1d:
1b:9b:7a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:44:16 2026 by rpki-client