Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136322e302f32342d3234203d3e20383334.roa
File: 36322e38342e3136322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: OVel8oHbfeSXu3GoVEcAgDSGUnLtgQKRI2Jg8JGETUw=
Subject key identifier: A5:6F:7C:E2:73:D5:4C:84:20:2C:7B:B1:A9:AB:9D:38:51:14:F9:08
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6B0CF2BA0A002D2E37114AC20A2529C0584B3385
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136322e302f32342d3234203d3e20383334.roa
Signing time: Wed 01 Jul 2026 17:15:41 +0000
ROA not before: Wed 01 Jul 2026 17:10:41 +0000
ROA not after: Wed 30 Jun 2027 17:15:41 +0000
asID: 834
IP address blocks: 62.84.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:0c:f2:ba:0a:00:2d:2e:37:11:4a:c2:0a:25:29:c0:58:4b:33:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 1 17:10:41 2026 GMT
Not After : Jun 30 17:15:41 2027 GMT
Subject: CN=A56F7CE273D54C84202C7BB1A9AB9D385114F908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:45:69:00:88:08:85:45:74:ca:f8:32:b2:a7:
de:a8:7f:7d:0d:8b:74:35:4d:6a:e7:75:d9:ce:9e:
da:25:10:c4:40:69:ef:58:05:8c:4a:e7:eb:47:3f:
d2:87:d3:78:90:a8:fe:e0:f8:5d:10:c6:3f:f4:c9:
a8:52:a2:e5:b2:97:19:ea:d7:15:94:ba:a8:92:63:
f3:a2:58:01:52:32:19:7a:ad:34:56:0f:66:0f:0c:
47:04:40:c2:fc:00:9a:4b:c6:b2:1c:83:1a:53:5a:
64:e3:28:f2:0a:80:6e:0d:af:d4:a3:91:d3:43:71:
5f:a1:56:8d:d8:0d:cc:29:a0:df:a9:d3:5b:b0:4d:
b3:5d:57:55:94:a8:f7:bc:ce:c0:23:76:85:c3:e1:
2e:79:00:ae:91:15:81:ce:b4:1b:56:73:9e:f9:74:
eb:50:a1:a9:f3:35:df:35:bc:31:c0:ac:5d:ad:6c:
f9:25:2d:09:3f:ae:4c:d8:d0:6e:15:ec:92:f4:6e:
87:6c:d2:3d:56:90:04:b7:d1:e5:79:3c:f3:f2:3c:
e9:d4:b4:cb:7a:bb:76:75:c4:22:ad:2d:7a:2d:ca:
14:f1:53:c5:f8:fa:ee:23:07:15:88:af:a6:b4:92:
18:30:cb:62:8c:46:00:39:88:80:73:94:95:1f:f1:
ab:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6F:7C:E2:73:D5:4C:84:20:2C:7B:B1:A9:AB:9D:38:51:14:F9:08
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.162.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:6e:51:a8:0b:49:dd:ef:39:68:dd:9d:63:ea:d2:8b:65:7b:
16:f9:9b:30:14:2c:9d:5a:f0:65:41:8b:f0:97:91:eb:fe:fc:
73:2a:87:69:22:e4:84:7f:24:1c:49:1c:24:cd:88:a0:52:77:
9a:28:bd:e8:a9:a1:0d:fe:e3:4a:b1:1d:4a:e4:2b:cc:8d:e9:
94:af:a5:f2:ad:9c:d7:2d:5a:b1:36:9a:b3:92:50:d7:42:1b:
39:1c:d3:6c:98:6a:c5:2a:8a:09:bb:46:5d:19:fc:fc:9a:97:
2d:75:e2:2a:33:a9:07:68:83:50:3d:54:61:39:5d:86:ae:22:
82:98:2c:55:1b:bb:23:0b:e8:c8:14:d6:25:bc:60:db:f3:aa:
53:cf:db:bc:ed:f4:1f:f2:a8:59:88:fe:ec:2e:20:3a:18:ec:
7d:ba:bd:5e:20:b4:be:e5:ea:cc:ed:0a:1d:35:bc:ed:a1:b4:
41:0d:2d:5c:de:70:bf:a9:7b:90:09:b2:bc:7b:64:e8:07:48:
42:7b:d3:c2:d8:fd:8d:d5:25:27:1d:71:75:a7:8b:1c:97:c0:
8d:fa:2d:35:8c:72:14:7b:f4:c4:72:66:7c:0e:dc:f5:1a:78:
c8:77:51:4b:f2:6b:1d:b7:1a:dd:98:69:ee:52:a8:0d:98:ac:
8c:0a:c7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:54:08 2026 by rpki-client