Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e32382e302f32322d3234203d3e203437353833.roa
File: 36322e37322e32382e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: Wvn04LDhLxjStI+5IVR9+34GfeGDfXKVlAFeWbTnMns=
Subject key identifier: BC:FC:79:5E:E8:A3:7C:01:D0:84:E1:2E:F2:8D:A6:28:F8:EF:4A:B4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 61DA8E6EF294DA98EAE0B52F587D5C547247B2D0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e32382e302f32322d3234203d3e203437353833.roa
Signing time: Fri 20 Jun 2025 07:46:40 +0000
ROA not before: Fri 20 Jun 2025 07:41:40 +0000
ROA not after: Fri 19 Jun 2026 07:46:40 +0000
asID: 47583
IP address blocks: 62.72.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:da:8e:6e:f2:94:da:98:ea:e0:b5:2f:58:7d:5c:54:72:47:b2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 20 07:41:40 2025 GMT
Not After : Jun 19 07:46:40 2026 GMT
Subject: CN=BCFC795EE8A37C01D084E12EF28DA628F8EF4AB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2f:47:fd:32:b5:3a:bf:bb:eb:6c:e8:9f:2b:
4b:db:98:b7:38:70:d7:28:ed:e7:76:7f:e6:61:85:
66:67:68:61:0f:cb:96:b2:08:fa:62:37:05:b4:16:
2e:2b:bc:d4:06:28:2b:92:68:b8:c9:41:34:e8:fe:
dc:ba:c8:19:d1:be:95:bd:f1:79:0c:23:82:48:0e:
34:c1:c0:f0:72:2c:3d:0e:a4:b5:f4:6d:b9:05:97:
92:96:fc:e3:14:53:0e:9e:8a:9a:07:1c:47:69:0a:
42:78:9a:b5:48:38:94:f6:e7:f0:38:60:85:bb:29:
e8:6e:e3:04:f4:2e:2b:ed:fa:78:f4:02:4a:d5:d1:
a0:34:3e:d3:4e:92:ec:46:6c:78:cd:55:b9:72:c1:
e4:93:fb:76:e9:f2:82:ea:e5:61:b3:b3:f6:a6:78:
0d:c9:4d:76:63:a9:12:6e:3f:df:9e:5c:eb:30:0b:
43:e4:db:09:9a:f4:39:db:7a:23:d4:d8:67:06:11:
1f:47:01:17:39:b1:16:19:bb:ec:84:03:86:09:ff:
c2:c0:78:86:01:ed:c1:20:43:82:e3:fe:5c:49:1c:
dc:50:b9:e7:5a:8a:69:92:73:ed:34:dc:2c:eb:df:
96:f7:34:17:4e:43:b6:54:5e:35:46:9d:65:6f:89:
ba:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FC:79:5E:E8:A3:7C:01:D0:84:E1:2E:F2:8D:A6:28:F8:EF:4A:B4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e32382e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.28.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:19:a6:fc:3b:ba:e1:31:94:9a:b8:b3:49:30:1c:ed:f2:b3:
00:14:d0:1f:6e:56:5e:ae:2b:ae:57:85:fd:f3:f9:f6:56:3b:
cd:e9:21:81:b1:be:5a:e1:64:1b:46:2b:99:5e:4f:fc:ab:3e:
9f:e9:2d:8b:e3:c3:b4:10:71:98:4d:35:7d:a4:4b:a1:64:a5:
4b:12:3b:b6:95:b0:da:f8:8f:46:b8:f8:3c:94:18:51:e8:bc:
0b:fb:b4:39:d2:21:f4:61:cb:63:50:12:36:e2:c1:02:10:3d:
87:14:18:16:d5:82:47:05:fe:fd:46:51:9d:6e:ba:7b:be:1c:
77:68:a7:89:51:88:cb:19:e2:55:c5:8c:6d:dc:e5:0f:e2:f1:
85:8b:a0:28:7c:2e:67:19:bb:b0:2e:37:57:85:e8:89:58:a3:
00:10:dc:5c:ee:a0:17:ef:f4:0c:18:d9:a1:47:a3:d9:f2:fe:
b8:24:e4:bf:a6:21:17:c4:5b:e2:e5:b0:b2:f1:c1:56:97:00:
fb:13:d3:bb:e2:08:ec:83:76:39:a5:4f:b0:cb:21:05:73:68:
ed:9f:e1:9c:0d:0f:97:d5:bc:f4:8b:47:f0:33:52:aa:3c:4a:
b5:63:82:65:49:3a:60:79:12:0a:60:a8:f2:eb:02:d8:95:60:
d1:f1:6b:b3
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUYdqObvKU2pjq4LUvWH1cVHJHstAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA2MjAwNzQxNDBaFw0yNjA2MTkwNzQ2NDBaMDMxMTAvBgNV
BAMTKEJDRkM3OTVFRThBMzdDMDFEMDg0RTEyRUYyOERBNjI4RjhFRjRBQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvL0f9MrU6v7vrbOifK0vbmLc4
cNco7ed2f+ZhhWZnaGEPy5ayCPpiNwW0Fi4rvNQGKCuSaLjJQTTo/ty6yBnRvpW9
8XkMI4JIDjTBwPByLD0OpLX0bbkFl5KW/OMUUw6eipoHHEdpCkJ4mrVIOJT25/A4
YIW7Kehu4wT0Livt+nj0AkrV0aA0PtNOkuxGbHjNVblyweST+3bp8oLq5WGzs/am
eA3JTXZjqRJuP9+eXOswC0Pk2wma9DnbeiPU2GcGER9HARc5sRYZu+yEA4YJ/8LA
eIYB7cEgQ4Lj/lxJHNxQuedaimmSc+003Czr35b3NBdOQ7ZUXjVGnWVviboFAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUvPx5XuijfAHQhOEu8o2mKPjvSrQwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzYzMjJlMzczMjJlMzIzODJl
MzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI+SBww
DQYJKoZIhvcNAQELBQADggEBAD8Zpvw7uuExlJq4s0kwHO3yswAU0B9uVl6uK65X
hf3z+fZWO83pIYGxvlrhZBtGK5leT/yrPp/pLYvjw7QQcZhNNX2kS6FkpUsSO7aV
sNr4j0a4+DyUGFHovAv7tDnSIfRhy2NQEjbiwQIQPYcUGBbVgkcF/v1GUZ1uunu+
HHdop4lRiMsZ4lXFjG3c5Q/i8YWLoCh8LmcZu7AuN1eF6IlYowAQ3FzuoBfv9AwY
2aFHo9ny/rgk5L+mIRfEW+LlsLLxwVaXAPsT07viCOyDdjmlT7DLIQVzaO2f4ZwN
D5fVvPSLR/AzUqo8SrVjgmVJOmB5EgpgqPLrAtiVYNHxa7M=
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:38:25 2025 by rpki-client