Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136312e302f32342d3234203d3e20383334.roa
File: 36322e38342e3136312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: EfS7ZrWzHtM5H3Ei8eSg42W1P2D1tj+HVXHKaAdU7LI=
Subject key identifier: AC:D2:4C:81:CB:35:D2:F9:F1:30:5D:0C:BB:B2:D7:2A:C5:EA:0A:38
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2EA4477DFFCF7237EC74A6C55E8A2A62C7A6BE36
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136312e302f32342d3234203d3e20383334.roa
Signing time: Wed 01 Jul 2026 17:15:25 +0000
ROA not before: Wed 01 Jul 2026 17:10:25 +0000
ROA not after: Wed 30 Jun 2027 17:15:25 +0000
asID: 834
IP address blocks: 62.84.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:a4:47:7d:ff:cf:72:37:ec:74:a6:c5:5e:8a:2a:62:c7:a6:be:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 1 17:10:25 2026 GMT
Not After : Jun 30 17:15:25 2027 GMT
Subject: CN=ACD24C81CB35D2F9F1305D0CBBB2D72AC5EA0A38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f3:19:57:6a:89:e7:78:4a:79:01:f6:e7:bd:
60:12:ca:d8:fa:3c:1e:31:3b:6f:c8:53:57:72:82:
5c:8f:2d:d8:d4:13:2f:cb:df:1e:b3:00:f1:e0:02:
b2:9d:95:29:c8:ef:73:71:8a:d6:a1:42:51:77:de:
78:56:42:8f:bc:b3:56:aa:61:e8:65:d5:74:da:3c:
0b:2f:a4:58:74:22:83:ed:72:b9:1e:2b:8a:cf:cf:
25:b1:09:75:82:3f:83:94:3a:f1:08:fc:91:45:b6:
e3:d4:0a:0e:a4:fb:15:0a:d3:3a:5d:96:56:88:79:
0d:d5:9a:66:33:64:66:0b:f6:df:30:73:80:18:d7:
6e:8f:5f:93:f7:58:c9:e7:e7:46:ea:f8:ef:5c:a1:
be:68:e6:3c:bd:d7:b3:0d:46:17:93:d2:74:6f:e3:
4d:2c:59:86:92:56:a0:59:a9:f9:a1:09:6f:e6:77:
18:69:da:03:53:04:e9:f1:98:d0:2f:3e:fc:2e:cd:
9b:d7:26:f9:42:15:6f:29:44:09:76:e0:dd:76:e0:
d4:98:10:92:21:cd:30:fd:7f:78:88:32:c0:0a:da:
d6:50:35:39:70:4a:50:fb:ca:1c:20:fa:73:9e:52:
35:57:6c:7d:79:77:da:8e:03:79:48:f9:92:8b:16:
fc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D2:4C:81:CB:35:D2:F9:F1:30:5D:0C:BB:B2:D7:2A:C5:EA:0A:38
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.161.0/24
Signature Algorithm: sha256WithRSAEncryption
10:96:7e:da:8b:26:1d:72:65:f0:7e:e8:5d:d6:22:b1:dc:8a:
f6:b5:ea:82:50:64:e6:01:58:45:46:c6:b8:b2:a1:cd:05:2e:
a5:3d:eb:14:17:30:5e:4b:1d:7c:24:88:13:64:da:b8:96:8c:
ca:29:8a:a5:bb:15:36:01:98:80:cc:70:61:05:ae:00:26:2c:
0a:a2:5a:28:3f:64:6e:38:48:bc:61:cf:6e:a1:c5:b8:6c:3b:
c0:0d:01:89:5d:f7:d7:7a:d0:1c:cd:5d:9b:29:bd:f1:25:a0:
49:4c:a8:b9:b6:64:a1:6f:be:f5:4d:e4:9e:80:d9:40:a4:d6:
07:ba:18:65:07:19:07:6c:c2:86:50:2f:80:a5:17:d9:cf:0b:
f8:44:19:d1:6d:6a:8a:d4:64:9e:e9:83:7b:8f:b4:4c:10:23:
70:04:f4:7b:46:e2:7f:06:5e:67:cf:30:f9:bf:7d:13:bd:97:
79:2f:2b:ee:b3:9f:79:48:a3:03:9b:f8:3e:e2:a4:64:2a:c9:
bb:93:ec:1c:77:54:9d:09:2b:cc:af:d1:e8:98:d6:8d:87:2b:
8d:86:d2:88:88:5a:af:d2:28:6e:d8:98:7c:63:5a:a0:40:9b:
7d:33:b9:35:28:8e:71:27:40:60:60:b4:a7:ae:aa:4e:6a:f3:
41:e9:e6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:54:13 2026 by rpki-client