Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136312e302f32342d3234203d3e2039333034.roa
File: 36322e38342e3136312e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: Pe8SLpkSUScAttQkv1FStmdYLi/a4/SiNyVzh1o4A0E=
Subject key identifier: B7:B2:43:80:9E:E3:97:57:EC:91:15:9D:58:DA:FC:00:AE:AE:C6:80
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 50808D5CF2407CC30BFF9DE444DA0E5D594BD1DE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136312e302f32342d3234203d3e2039333034.roa
Signing time: Tue 02 Jun 2026 05:12:30 +0000
ROA not before: Tue 02 Jun 2026 05:07:30 +0000
ROA not after: Tue 01 Jun 2027 05:12:30 +0000
asID: 9304
IP address blocks: 62.84.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:80:8d:5c:f2:40:7c:c3:0b:ff:9d:e4:44:da:0e:5d:59:4b:d1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 2 05:07:30 2026 GMT
Not After : Jun 1 05:12:30 2027 GMT
Subject: CN=B7B243809EE39757EC91159D58DAFC00AEAEC680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:09:5f:2e:8d:f6:81:bc:12:74:1d:c9:0a:ac:
63:4f:c1:a2:31:aa:ce:e0:fa:1e:8e:a6:13:d9:8c:
83:dc:1a:71:22:15:25:f2:9d:62:d4:d0:64:76:c1:
ed:20:02:d7:cf:e5:b7:01:79:c8:5c:77:c8:0b:89:
c0:4a:12:d9:8d:af:3c:fa:f2:45:c1:e0:f7:33:d5:
18:02:9e:7a:79:94:ec:e0:fe:13:bf:83:8a:80:a9:
10:7e:86:1e:ed:d8:bc:c1:24:f5:93:c6:22:5c:e7:
1d:da:51:96:62:c4:60:2b:3b:b3:b1:d8:46:34:4c:
6c:be:9f:c7:aa:c3:40:57:06:ea:d7:a4:79:01:4c:
00:a0:f8:01:80:f7:20:b7:c9:5c:1f:2b:c8:b5:8e:
c5:e7:35:1a:32:4c:ef:77:5c:8f:18:8c:45:cf:e9:
7d:f6:fd:19:4c:ab:16:3e:8d:33:04:b2:2c:e0:7d:
02:ba:8c:be:d5:88:d0:9c:9c:c7:0a:c6:5b:41:59:
e9:00:9b:e2:e5:90:3b:50:0c:b4:2b:d5:d7:82:53:
7b:fc:ff:ae:b9:0f:53:9d:a5:b2:54:d3:76:b5:87:
87:23:e6:4e:b7:b1:31:a9:0e:e8:67:89:48:e6:f0:
9e:62:b0:33:78:a2:3c:e8:dd:9e:18:47:b9:0c:0c:
06:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B2:43:80:9E:E3:97:57:EC:91:15:9D:58:DA:FC:00:AE:AE:C6:80
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136312e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.161.0/24
Signature Algorithm: sha256WithRSAEncryption
67:8b:43:97:41:ed:5c:d1:48:52:4e:49:93:4f:3a:b4:da:2a:
ec:ba:6b:01:db:ba:9b:ef:b5:bc:4b:ee:78:ea:9b:2a:e8:43:
18:d3:45:4d:ce:a9:11:25:cd:99:b3:e6:ce:74:37:dc:fd:0f:
55:6d:0a:10:65:97:00:20:ce:3d:1a:34:79:ed:4b:4a:8a:5b:
c3:05:1b:ca:6c:d3:06:a8:e2:cc:24:a0:c1:80:e1:59:03:10:
93:51:eb:b5:c4:62:56:56:2a:ea:0c:d6:01:a8:d8:90:af:ab:
cf:9e:59:a5:0e:3e:07:be:a3:7c:3d:60:8f:26:21:3c:51:08:
e9:7c:e3:25:00:b4:9f:da:0f:e5:3c:df:76:f1:95:25:27:6e:
fe:cc:cc:70:7f:a6:86:39:13:75:c3:65:1e:cc:14:c1:3a:60:
d0:56:ad:f0:e5:d7:14:81:70:3e:85:32:86:a8:c6:b7:3d:bd:
4e:b8:70:e4:c7:00:e3:78:cc:02:4f:48:ef:7a:8a:46:8b:d7:
92:e7:fc:50:cf:0b:65:ae:f9:a7:a7:59:98:23:04:f4:86:a6:
a9:df:a2:49:cd:12:06:2d:78:13:56:1d:07:44:6f:cf:b6:8b:
e6:a4:ec:a6:3b:74:74:16:95:b9:96:78:f7:07:bc:7f:d8:a5:
14:6d:73:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 05:18:00 2026 by rpki-client