Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136312e302f32342d3234203d3e203432363839.roa
File: 36322e38342e3136312e302f32342d3234203d3e203432363839.roa (raw, json)
Hash identifier: ITRIBYfdoPXRALySp1C1GQ2P/s8M7EGiwxalqQDD9BU=
Subject key identifier: EF:49:36:5A:27:C0:06:38:94:A0:69:44:97:BF:A9:53:D7:16:C9:81
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 41F2BA67BCC0374B9D5BF3A243632FCF05A79170
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136312e302f32342d3234203d3e203432363839.roa
Signing time: Tue 26 Aug 2025 20:20:11 +0000
ROA not before: Tue 26 Aug 2025 20:15:11 +0000
ROA not after: Tue 25 Aug 2026 20:20:11 +0000
asID: 42689
IP address blocks: 62.84.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:f2:ba:67:bc:c0:37:4b:9d:5b:f3:a2:43:63:2f:cf:05:a7:91:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 26 20:15:11 2025 GMT
Not After : Aug 25 20:20:11 2026 GMT
Subject: CN=EF49365A27C0063894A0694497BFA953D716C981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:75:3a:e3:23:eb:c6:7a:07:0e:d3:be:16:
14:a4:89:c1:a5:34:66:17:f4:25:51:40:9c:ae:54:
3c:5b:b2:df:5e:a2:43:fa:ce:90:9b:7e:d3:6b:79:
da:a3:39:80:e1:22:03:70:73:3b:cb:37:25:84:ec:
6e:d3:91:e3:a2:54:08:db:bd:03:f1:e4:2e:01:0e:
92:29:fc:f3:64:f1:74:62:56:a4:5e:20:ff:5e:ca:
d3:1e:ee:6f:aa:f1:52:5e:9d:47:99:73:62:74:0e:
38:6e:d1:5e:c5:2b:f7:68:dc:96:4c:86:61:78:d9:
59:09:f9:52:ef:af:ba:a4:dc:8b:63:bb:43:b7:30:
4e:2c:0f:e8:72:49:9e:4c:72:ed:a8:e0:b2:8e:68:
7d:50:28:b3:86:3d:da:ca:5e:dd:23:32:1a:d5:16:
cd:b1:ed:ee:12:d7:15:b9:fb:75:87:fc:5c:ca:9d:
46:42:fe:f5:6e:07:17:3a:d2:75:19:cb:70:04:47:
db:e7:ed:0e:d3:78:c6:e4:8e:4f:4d:bd:63:85:34:
5f:9c:9c:50:8f:44:33:a8:67:c5:c2:4d:67:a9:87:
fb:69:01:6a:73:46:f4:b5:25:66:9a:1e:ac:6b:3c:
17:a1:5f:d6:4c:66:93:93:47:76:f4:3a:e6:bd:98:
f2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:49:36:5A:27:C0:06:38:94:A0:69:44:97:BF:A9:53:D7:16:C9:81
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136312e302f32342d3234203d3e203432363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.161.0/24
Signature Algorithm: sha256WithRSAEncryption
37:bf:62:ac:1e:60:16:52:cd:75:01:e1:6a:96:74:34:e4:80:
89:42:44:52:73:6d:39:3e:44:21:42:cb:fd:6b:51:da:f6:10:
f9:51:ce:6b:f4:2d:ec:18:fd:08:7f:ab:3f:22:e1:ab:e4:7e:
7b:3f:d5:3d:2b:53:8d:34:18:7d:2f:9b:9d:ba:a5:6e:46:07:
9c:0c:18:58:d5:f4:eb:94:b5:d8:9c:ff:02:7c:0d:07:08:d5:
2b:08:06:d4:c5:a6:2a:b7:48:13:6a:c9:70:e8:87:2d:d8:d5:
a6:4a:fa:fc:16:2b:a3:a0:c8:7e:ae:4d:9d:21:fa:12:69:c7:
f9:8b:d2:a5:72:89:9a:52:e1:83:a3:07:77:62:28:bb:e0:a5:
6b:53:b4:31:a9:ad:ec:86:6c:65:a3:41:eb:a6:a7:a8:a1:62:
14:4c:e3:19:85:99:2e:bb:c2:30:2f:19:80:16:a0:6a:30:76:
11:10:14:56:31:07:1e:2c:ff:1a:35:7e:61:e1:6c:2b:1f:6b:
fb:73:80:93:85:98:e3:66:7e:04:9a:c0:b9:10:1e:94:a1:1b:
e8:36:58:e7:a1:4b:c6:c5:c2:5f:4a:00:02:ef:4a:4b:0e:12:
4c:64:22:30:6f:bb:d4:42:b1:dd:da:2f:3f:2d:0c:63:ef:d0:
1a:89:03:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:34 2025 by rpki-client