Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136322e302f32342d3234203d3e2039333034.roa
File: 36322e38342e3136322e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: 2Lqybo7vfJ21ALl60mw7zrW3oYO8t/QGz/bIn+1cyiE=
Subject key identifier: AB:83:2E:A7:2D:A3:98:94:93:A2:0B:6E:B8:6E:6B:24:C6:DE:95:48
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 27D01AA05C5D32D60696C2749013236FC9DD09FD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136322e302f32342d3234203d3e2039333034.roa
Signing time: Tue 02 Jun 2026 05:12:36 +0000
ROA not before: Tue 02 Jun 2026 05:07:36 +0000
ROA not after: Tue 01 Jun 2027 05:12:36 +0000
asID: 9304
IP address blocks: 62.84.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 12:09:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:d0:1a:a0:5c:5d:32:d6:06:96:c2:74:90:13:23:6f:c9:dd:09:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 2 05:07:36 2026 GMT
Not After : Jun 1 05:12:36 2027 GMT
Subject: CN=AB832EA72DA3989493A20B6EB86E6B24C6DE9548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cb:07:9c:55:33:d7:d5:ac:4a:13:1a:ae:5f:
e1:ca:09:7c:f1:69:d2:98:7a:ed:1e:01:1d:75:4a:
b8:30:2e:ce:d2:4c:34:68:d7:9e:7c:41:dc:c9:a0:
4a:b9:79:60:bd:74:7e:13:44:1a:76:21:02:41:d2:
39:b9:ff:29:54:dc:66:7f:e9:b4:ef:6b:f5:be:47:
59:c9:f0:23:32:12:b4:9e:d1:d3:7b:6b:03:58:4c:
5d:cd:7f:17:8d:7e:ed:b0:5c:8f:86:9c:1b:25:ee:
74:1f:f2:72:9a:8e:e1:b9:69:b4:5d:03:d0:16:cc:
d0:d6:3c:a5:1a:95:d1:35:c8:3a:ff:de:b2:ed:71:
55:56:e4:71:46:98:5b:67:6d:21:d6:e2:e0:af:a6:
dd:7d:2b:02:cb:8b:36:99:6b:e9:e3:3c:0f:b4:c2:
10:5a:58:8c:ba:d6:0a:44:e8:6e:0d:7a:06:c5:32:
3c:c9:45:1d:e5:8e:86:c1:59:94:c1:c6:10:8d:3a:
46:db:a6:df:56:89:b6:1e:de:71:fd:f6:d5:35:09:
8b:71:85:17:57:44:a2:66:12:e8:ee:39:32:d8:f4:
d3:ba:79:bd:13:50:8c:1e:31:08:e6:7b:95:82:7a:
d2:34:e1:93:cf:a8:db:47:bd:52:fd:fc:3e:2b:31:
96:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:83:2E:A7:2D:A3:98:94:93:A2:0B:6E:B8:6E:6B:24:C6:DE:95:48
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136322e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.162.0/24
Signature Algorithm: sha256WithRSAEncryption
79:84:35:3f:bc:74:10:a5:60:be:ee:1a:93:34:2a:4f:7c:7b:
cf:83:68:f3:ae:bf:53:74:cf:18:ae:50:31:f5:45:51:8e:36:
81:ec:5e:df:ff:9b:cd:67:3b:8b:16:71:73:9a:92:00:ae:07:
a9:56:8f:ac:2f:ae:b0:c4:24:c8:9f:84:41:cd:40:ac:08:b4:
e3:82:d2:51:49:3d:01:f7:af:05:b1:60:64:2d:1f:76:14:21:
8b:91:53:e9:b7:48:e7:50:6d:94:84:b1:28:bb:f8:42:44:fe:
ed:59:f0:14:21:b7:79:fd:d4:73:15:79:e3:4c:bd:50:ee:fc:
14:64:b2:3e:7f:42:c4:f4:0a:62:f3:af:d0:ab:dd:c5:94:ba:
39:32:d4:31:cd:25:d5:3c:7e:4f:9f:c5:35:48:4f:79:84:0d:
94:01:56:13:bb:e1:14:c1:f5:f3:b3:05:3f:34:a4:aa:0b:32:
5b:1a:9f:ee:ed:c0:a9:f6:65:e5:f2:6a:81:a4:9f:f2:55:dd:
c1:b4:e0:a1:9f:15:3b:ad:9f:6e:e4:46:f4:1d:eb:3f:01:c8:
1c:a1:22:c2:4d:7f:6c:46:61:d7:a0:72:31:cb:fb:83:86:21:
40:d6:f4:2b:e5:56:a1:92:7b:f0:21:47:ca:2c:d7:44:82:d6:
db:19:0a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:50:24 2026 by rpki-client