Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137342e302f32342d3234203d3e20313937323133.roa
File: 36322e38342e3137342e302f32342d3234203d3e20313937323133.roa (raw, json)
Hash identifier: Ng7cLSG057C6XP09PYM1wFPgosAicsTD+e5Xct5yuoI=
Subject key identifier: 90:2A:66:62:EF:38:DD:EC:D4:E8:52:D3:99:42:90:FB:78:F2:6B:EC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 47DFEAC6881A98D47602582728E3D2CEEFC1290F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137342e302f32342d3234203d3e20313937323133.roa
Signing time: Fri 21 Aug 2026 10:52:05 +0000
ROA not before: Fri 21 Aug 2026 10:47:05 +0000
ROA not after: Fri 20 Aug 2027 10:52:05 +0000
asID: 197213
IP address blocks: 62.84.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:df:ea:c6:88:1a:98:d4:76:02:58:27:28:e3:d2:ce:ef:c1:29:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 21 10:47:05 2026 GMT
Not After : Aug 20 10:52:05 2027 GMT
Subject: CN=902A6662EF38DDECD4E852D3994290FB78F26BEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:77:e5:ce:85:13:3a:ed:4a:44:b6:43:c0:31:
65:35:2c:95:14:68:ef:e7:a5:8b:16:00:33:9b:40:
3b:26:86:dc:18:51:d3:aa:1f:79:bc:d5:b8:9d:4e:
ab:36:8a:53:2a:d2:51:ab:ac:11:ad:11:b3:09:6f:
74:6f:c9:27:71:38:2f:31:64:87:1f:87:04:76:91:
cf:63:31:c1:ba:d6:d5:53:34:95:88:5b:5a:70:e4:
be:89:eb:5c:f5:9a:b0:5d:c0:5e:32:25:29:a8:a1:
11:56:0c:7d:19:64:8c:e0:4f:0d:b8:c9:4e:63:63:
73:e8:ff:e2:6e:79:6a:20:ab:4c:64:00:70:f3:41:
8a:52:df:63:e5:8f:79:f4:51:d4:95:1e:ff:fe:5c:
74:c0:dc:81:45:0d:b0:e9:f9:0f:92:e1:d9:f5:6e:
94:8c:7d:0c:0b:a7:e1:05:35:84:03:50:fa:e3:48:
7d:81:1e:c5:ca:0c:7a:20:08:4a:ec:1d:39:89:62:
ef:1b:1c:31:9d:40:4f:11:f4:85:ba:39:65:9d:1f:
29:51:3c:fd:c4:cf:ec:53:b8:b3:f2:ec:13:e5:ff:
46:94:90:b6:10:b6:f0:c6:f0:03:96:c6:31:77:ff:
0b:3a:4e:f9:f7:5c:76:62:68:1c:a7:52:a3:8e:61:
4d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2A:66:62:EF:38:DD:EC:D4:E8:52:D3:99:42:90:FB:78:F2:6B:EC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137342e302f32342d3234203d3e20313937323133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.174.0/24
Signature Algorithm: sha256WithRSAEncryption
49:99:64:9f:89:a6:1d:d3:90:58:eb:27:ef:55:31:a1:77:71:
59:68:4f:34:7e:10:d9:5f:04:4d:c4:91:56:cd:2d:fa:ae:e6:
79:85:7b:d5:51:47:31:1d:3b:ba:1e:cb:a3:71:37:34:39:4f:
c0:70:01:dc:ab:3f:b1:fe:e6:94:97:4c:d0:1b:79:40:e7:c5:
27:b3:ab:25:13:bb:9b:ec:c3:b2:7e:53:a6:04:d7:02:5b:56:
28:06:9b:ea:dc:d7:81:c9:65:b1:bf:2c:61:d0:0e:94:78:ed:
d2:38:69:3e:d1:61:92:d7:66:22:4c:71:30:29:69:d7:19:1c:
85:b0:a6:0b:c4:0f:28:64:3e:98:d8:1c:50:c0:14:02:0f:da:
67:80:c7:69:37:ea:04:44:ac:0a:b7:f6:15:06:49:fb:2f:d2:
10:04:61:1f:61:6a:65:f9:a8:bd:e9:0d:55:82:ff:88:34:0c:
e4:77:85:39:ec:86:cc:f3:0e:27:94:36:a4:e2:58:fe:80:e0:
d4:9c:5e:92:2a:a1:1e:b3:2e:c3:e4:05:9a:c1:7d:fd:1f:7e:
ff:4a:3b:2b:cd:fd:34:85:67:8e:e2:00:45:86:88:77:63:0c:
af:9a:b7:7e:d6:7d:28:ad:92:01:1c:92:05:7a:9f:99:55:e4:
ce:e4:de:3f
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUR9/qxogamNR2AlgnKOPSzu/BKQ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA4MjExMDQ3MDVaFw0yNzA4MjAxMDUyMDVaMDMxMTAvBgNV
BAMTKDkwMkE2NjYyRUYzOERERUNENEU4NTJEMzk5NDI5MEZCNzhGMjZCRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7d+XOhRM67UpEtkPAMWU1LJUU
aO/npYsWADObQDsmhtwYUdOqH3m81bidTqs2ilMq0lGrrBGtEbMJb3RvySdxOC8x
ZIcfhwR2kc9jMcG61tVTNJWIW1pw5L6J61z1mrBdwF4yJSmooRFWDH0ZZIzgTw24
yU5jY3Po/+JueWogq0xkAHDzQYpS32Plj3n0UdSVHv/+XHTA3IFFDbDp+Q+S4dn1
bpSMfQwLp+EFNYQDUPrjSH2BHsXKDHogCErsHTmJYu8bHDGdQE8R9IW6OWWdHylR
PP3Ez+xTuLPy7BPl/0aUkLYQtvDG8AOWxjF3/ws6Tvn3XHZiaBynUqOOYU0pAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUkCpmYu843ezU6FLTmUKQ+3jya+wwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzYzMjJlMzgzNDJlMzEzNzM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzOTM3MzIzMTMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
PlSuMA0GCSqGSIb3DQEBCwUAA4IBAQBJmWSfiaYd05BY6yfvVTGhd3FZaE80fhDZ
XwRNxJFWzS36ruZ5hXvVUUcxHTu6HsujcTc0OU/AcAHcqz+x/uaUl0zQG3lA58Un
s6slE7ub7MOyflOmBNcCW1YoBpvq3NeByWWxvyxh0A6UeO3SOGk+0WGS12YiTHEw
KWnXGRyFsKYLxA8oZD6Y2BxQwBQCD9pngMdpN+oERKwKt/YVBkn7L9IQBGEfYWpl
+ai96Q1Vgv+INAzkd4U57IbM8w4nlDak4lj+gODUnF6SKqEesy7D5AWawX39H37/
Sjsrzf00hWeO4gBFhoh3Ywyvmrd+1n0orZIBHJIFep+ZVeTO5N4/
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:28:16 2026 by rpki-client