Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136352e302f32342d3234203d3e203437313732.roa
File: 36322e38342e3136352e302f32342d3234203d3e203437313732.roa (raw, json)
Hash identifier: v7DfxLRqtD8/x32AZsbdUkSIZpq/9rfCLAiWE4k072Q=
Subject key identifier: 91:AE:19:58:17:17:6A:C4:2D:4A:17:53:6E:19:2E:84:ED:E1:3C:C9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3832FEE4636675204098A2E1FE7CEFD8C243429F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136352e302f32342d3234203d3e203437313732.roa
Signing time: Fri 25 Sep 2026 12:13:20 +0000
ROA not before: Fri 25 Sep 2026 12:08:20 +0000
ROA not after: Fri 24 Sep 2027 12:13:20 +0000
asID: 47172
IP address blocks: 62.84.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:32:fe:e4:63:66:75:20:40:98:a2:e1:fe:7c:ef:d8:c2:43:42:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 25 12:08:20 2026 GMT
Not After : Sep 24 12:13:20 2027 GMT
Subject: CN=91AE195817176AC42D4A17536E192E84EDE13CC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:71:4b:c5:b9:20:d4:2d:6f:42:2e:62:bb:d9:
cc:34:47:b7:63:a1:15:70:66:82:ba:49:fd:9d:22:
f7:b3:6b:f2:0f:4d:11:37:57:1a:80:6d:1c:55:26:
39:90:71:c5:12:f3:e9:16:74:fc:db:01:e9:89:a7:
38:15:2c:da:58:58:81:74:11:9e:a6:96:40:11:13:
8c:4f:d9:2c:24:2b:2e:9d:3c:ad:74:74:45:8e:5c:
f3:32:cb:ce:58:4c:12:e0:49:87:f4:a2:6d:c9:be:
f1:21:d2:7a:91:10:05:61:04:6e:9c:ab:92:ea:6c:
77:0d:0e:65:f0:69:98:f6:57:0c:e1:4f:d7:46:34:
b9:f2:7f:48:c4:de:9a:f3:53:d2:c3:f2:b2:c9:7c:
2f:bd:ae:26:bb:1f:f5:e4:0f:ec:dd:40:63:b7:94:
ce:78:65:18:be:97:5f:e1:f0:fd:7f:f1:40:e0:5b:
78:9a:82:39:b2:8b:1c:74:4a:73:58:86:da:8d:aa:
c7:bd:8c:a4:be:38:32:cd:92:cd:35:0d:39:63:71:
e8:be:d8:c1:c9:d7:79:91:c9:aa:9a:91:bb:ce:ff:
6b:da:ea:9d:cb:11:6a:83:06:b3:11:bd:07:45:c3:
56:2d:14:5c:87:8c:ac:e0:bd:93:7b:12:1e:2f:0a:
76:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AE:19:58:17:17:6A:C4:2D:4A:17:53:6E:19:2E:84:ED:E1:3C:C9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136352e302f32342d3234203d3e203437313732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.165.0/24
Signature Algorithm: sha256WithRSAEncryption
90:d0:ea:68:71:05:3b:27:6c:eb:2c:7f:77:08:6c:62:ac:55:
2b:40:8b:ee:f0:28:91:36:bd:10:90:09:45:f6:ea:96:b5:cb:
5d:56:0b:b8:db:0d:57:1e:e3:e4:d1:a0:83:50:22:21:e3:9f:
38:63:f4:ef:31:05:8a:40:d4:04:80:25:09:8f:be:39:30:e5:
a6:bb:af:ed:c3:19:06:00:ca:e0:40:35:90:6e:f8:e4:70:3d:
db:86:2a:1e:3c:cf:67:2e:e9:78:74:f8:90:02:00:82:6f:a4:
07:29:a9:59:0e:31:94:ed:94:ad:3f:4f:7f:e8:12:5d:f2:fe:
7b:2a:d4:39:c8:61:b9:fc:4a:06:8a:8d:5f:92:f8:0f:6b:34:
5c:28:82:fa:8c:c0:ff:6c:bb:ba:37:f0:27:dd:5f:62:33:ea:
51:ab:a7:aa:7c:c9:df:8c:eb:1b:7f:31:34:72:73:e2:b4:7a:
61:ba:e9:3b:09:a0:c8:73:42:1b:a2:ac:18:29:0d:6d:29:58:
8a:a2:b2:46:25:4b:9e:24:3f:d8:50:8f:a3:b3:4b:ce:5f:4a:
bc:21:b4:ab:fa:ea:49:c6:11:5d:f9:70:65:61:11:1e:6f:ec:
d6:c0:22:b0:44:52:c6:d0:1d:de:b9:26:50:f1:54:cb:1a:30:
84:ac:91:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:24:31 2026 by rpki-client