Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136342e302f32342d3234203d3e20313937323133.roa
File: 36322e38342e3136342e302f32342d3234203d3e20313937323133.roa (raw, json)
Hash identifier: wMgS/pXiEqceSq+e7gSBAfIlJou7xXYolBf8omAxvnc=
Subject key identifier: 22:D6:C2:EB:E0:A4:78:46:77:5E:5F:74:00:47:25:62:B7:E9:35:13
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4E97B433130D51C549070F598CDA224CCB4EFE72
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136342e302f32342d3234203d3e20313937323133.roa
Signing time: Fri 21 Aug 2026 10:52:12 +0000
ROA not before: Fri 21 Aug 2026 10:47:12 +0000
ROA not after: Fri 20 Aug 2027 10:52:12 +0000
asID: 197213
IP address blocks: 62.84.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:97:b4:33:13:0d:51:c5:49:07:0f:59:8c:da:22:4c:cb:4e:fe:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 21 10:47:12 2026 GMT
Not After : Aug 20 10:52:12 2027 GMT
Subject: CN=22D6C2EBE0A47846775E5F7400472562B7E93513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:12:f2:58:3d:6d:17:fe:84:41:26:43:61:3e:
3f:0d:ca:52:ef:dc:bb:e4:ef:82:9f:d6:6f:33:1c:
c0:20:a5:8d:c4:a0:a7:bb:38:b5:d4:72:9a:af:f0:
88:91:41:6d:1c:01:73:77:a1:43:99:0a:4b:aa:ae:
f2:13:34:56:33:b7:02:7f:35:8a:e0:41:45:db:2f:
83:1c:31:c4:7b:60:5d:cd:04:91:b8:88:f2:62:23:
86:37:47:6c:18:88:17:4e:8d:49:39:eb:9f:98:a1:
12:64:fe:47:5c:fd:24:4a:f3:0f:8c:5f:d9:19:8a:
e2:f0:a7:1d:ea:ca:ca:00:5a:ef:d3:93:08:47:47:
ac:74:f1:34:5c:ea:d4:7e:20:ce:69:8c:92:be:ea:
fd:48:e3:ac:5b:56:5b:f2:0f:c9:b0:15:fe:35:eb:
ac:4b:5e:17:2a:78:34:51:6a:33:96:7d:ce:d1:57:
2e:cf:65:9a:ce:60:2f:20:de:de:f8:30:97:bf:7f:
3e:39:fe:c7:28:d6:cb:9a:02:14:d6:e8:c1:2b:00:
e3:2f:97:1b:4a:5b:11:6f:f4:36:f5:7e:00:b4:65:
7a:90:fd:9a:04:80:5f:cf:dd:14:3d:6b:67:b8:03:
58:09:15:29:dd:54:6e:26:3d:d2:e6:55:c4:1e:e5:
96:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D6:C2:EB:E0:A4:78:46:77:5E:5F:74:00:47:25:62:B7:E9:35:13
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136342e302f32342d3234203d3e20313937323133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.164.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:0e:f8:44:5c:28:ce:b0:6e:cf:66:d7:ce:66:51:6c:e2:c0:
36:24:0a:a3:7a:23:37:be:10:b6:10:45:77:68:50:b1:cb:31:
52:af:18:5d:c8:52:fd:46:ae:1f:cb:41:ed:8f:5c:3b:d8:9e:
49:a0:a7:12:73:5d:e2:f9:dc:c8:92:71:a7:81:b0:f1:c4:95:
20:0c:b4:a7:9e:de:b1:40:31:29:72:6f:a1:90:5b:5a:12:38:
1e:f3:19:3d:62:d0:ab:9e:3a:76:4b:ac:a2:cb:5a:16:d8:87:
6c:4c:45:16:df:0b:48:b5:1d:2f:c7:7c:2a:f6:c1:4b:31:12:
19:09:3d:c4:60:49:70:a2:3f:2c:a8:b8:2d:c0:97:fc:3c:ea:
d8:42:c5:a5:cc:e2:b6:3b:6b:a9:94:66:d1:87:41:d5:ce:d6:
bf:3d:7e:93:73:bc:13:b1:ed:c7:8e:7d:08:0e:cc:a1:44:5c:
30:3b:e5:c8:bf:86:e8:d5:24:5d:c5:05:16:97:75:02:76:4d:
78:73:7b:4a:98:a0:d7:10:b8:1c:35:a8:41:e2:8b:7e:bf:34:
b4:1b:08:f3:2c:1c:d4:1c:9f:87:58:3e:7f:12:90:df:c0:9d:
c8:e7:90:69:00:97:73:dd:1b:5a:be:8d:c6:6e:f4:45:31:3f:
ed:bf:21:30
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUTpe0MxMNUcVJBw9ZjNoiTMtO/nIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA4MjExMDQ3MTJaFw0yNzA4MjAxMDUyMTJaMDMxMTAvBgNV
BAMTKDIyRDZDMkVCRTBBNDc4NDY3NzVFNUY3NDAwNDcyNTYyQjdFOTM1MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJEvJYPW0X/oRBJkNhPj8NylLv
3Lvk74Kf1m8zHMAgpY3EoKe7OLXUcpqv8IiRQW0cAXN3oUOZCkuqrvITNFYztwJ/
NYrgQUXbL4McMcR7YF3NBJG4iPJiI4Y3R2wYiBdOjUk565+YoRJk/kdc/SRK8w+M
X9kZiuLwpx3qysoAWu/TkwhHR6x08TRc6tR+IM5pjJK+6v1I46xbVlvyD8mwFf41
66xLXhcqeDRRajOWfc7RVy7PZZrOYC8g3t74MJe/fz45/sco1suaAhTW6MErAOMv
lxtKWxFv9Db1fgC0ZXqQ/ZoEgF/P3RQ9a2e4A1gJFSndVG4mPdLmVcQe5ZYNAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUItbC6+CkeEZ3Xl90AEclYrfpNRMwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzYzMjJlMzgzNDJlMzEzNjM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzOTM3MzIzMTMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
PlSkMA0GCSqGSIb3DQEBCwUAA4IBAQAdDvhEXCjOsG7PZtfOZlFs4sA2JAqjeiM3
vhC2EEV3aFCxyzFSrxhdyFL9Rq4fy0Htj1w72J5JoKcSc13i+dzIknGngbDxxJUg
DLSnnt6xQDEpcm+hkFtaEjge8xk9YtCrnjp2S6yiy1oW2IdsTEUW3wtItR0vx3wq
9sFLMRIZCT3EYElwoj8sqLgtwJf8POrYQsWlzOK2O2uplGbRh0HVzta/PX6Tc7wT
se3Hjn0IDsyhRFwwO+XIv4bo1SRdxQUWl3UCdk14c3tKmKDXELgcNahB4ot+vzS0
GwjzLBzUHJ+HWD5/EpDfwJ3I55BpAJdz3Rtavo3GbvRFMT/tvyEw
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:59 2026 by rpki-client