Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e33362e302f32322d3234203d3e203437353833.roa
File: 36322e37322e33362e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: uL1j2KiTaAKK235otEDQBGKafS02Y8jU2gBxXKMzMxc=
Subject key identifier: EC:88:99:8C:60:CB:28:61:F5:11:E8:3E:55:C0:BC:31:53:36:E6:CA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 66BD4C9D7F1C3C34781EB250162F56CA3C9D84E1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e33362e302f32322d3234203d3e203437353833.roa
Signing time: Fri 20 Jun 2025 07:46:39 +0000
ROA not before: Fri 20 Jun 2025 07:41:39 +0000
ROA not after: Fri 19 Jun 2026 07:46:39 +0000
asID: 47583
IP address blocks: 62.72.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:bd:4c:9d:7f:1c:3c:34:78:1e:b2:50:16:2f:56:ca:3c:9d:84:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 20 07:41:39 2025 GMT
Not After : Jun 19 07:46:39 2026 GMT
Subject: CN=EC88998C60CB2861F511E83E55C0BC315336E6CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:84:68:98:b7:9a:37:3e:92:53:c2:91:ff:
f1:ca:7d:cf:26:b1:43:c7:b9:2e:ac:5c:ac:67:fa:
0c:20:f6:67:5c:d1:68:a5:40:08:ee:21:73:67:31:
d1:ed:8b:fd:1f:69:fb:76:5a:87:bf:1b:15:68:3a:
ec:38:98:66:c5:73:b2:59:6a:e1:5f:0c:8a:06:6d:
4a:c0:0f:09:e2:90:e2:33:ef:15:8a:dd:8e:3e:58:
41:69:ac:81:73:8b:d2:05:8c:b1:57:e3:ea:37:3d:
88:26:fa:32:7b:a1:81:92:7d:0b:0e:59:1e:09:16:
7f:84:29:13:f3:ab:d1:06:02:1a:c3:3a:30:36:7d:
56:26:b2:33:a3:53:79:ee:e8:33:83:99:4f:05:3a:
cd:fe:ed:c8:87:8e:04:2c:c5:1f:b0:1d:d9:d5:f1:
a2:0c:67:d5:fb:6d:fc:46:6a:d5:a3:92:da:98:e8:
1b:e9:96:5a:4c:67:d6:87:1c:3e:a6:97:38:af:ee:
be:50:70:88:2a:59:40:0f:71:ea:2a:6b:fa:6d:40:
bc:d9:b2:75:a6:84:52:53:e7:e1:69:e6:ef:a0:bd:
c2:d3:b3:a1:45:ef:d2:82:54:3a:b6:07:ac:bc:e2:
28:98:d4:74:84:f9:96:18:99:96:42:92:dd:3b:60:
e1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:88:99:8C:60:CB:28:61:F5:11:E8:3E:55:C0:BC:31:53:36:E6:CA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e33362e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.36.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:3a:21:cd:04:4b:43:1f:7a:da:3e:34:64:0c:a9:e5:38:91:
79:8e:b1:46:d3:6c:f7:0a:8d:94:31:43:64:b3:39:66:a9:2c:
cd:6c:10:68:db:72:f4:95:05:bb:3d:bb:70:a2:69:a2:9a:a6:
29:e0:da:3e:14:b6:81:e2:8c:83:c1:3d:fd:01:68:9f:8d:bc:
51:a7:14:7d:a0:d5:97:eb:8e:1c:8c:30:52:b0:3e:2c:7d:da:
70:11:bc:a9:db:81:85:03:d6:5c:4f:45:c7:84:3f:3e:f2:f5:
ee:44:9b:eb:38:44:50:95:50:00:56:4b:da:09:a6:27:9c:65:
af:64:7b:09:18:ea:28:f9:c7:6a:8c:58:82:48:01:a4:bc:84:
55:c8:bf:73:57:42:cf:10:2a:ce:29:5e:13:1b:22:73:d6:f1:
16:8a:01:b3:bb:61:b9:63:20:fa:89:2e:e3:24:6c:d2:77:6b:
77:b8:3f:8c:8c:0e:0c:09:1d:c0:fe:42:ae:a3:3a:3d:60:ad:
bc:0b:bc:79:8d:bb:97:bf:43:8e:bd:20:74:ee:a7:ac:bc:93:
0b:75:49:c5:79:b0:9a:24:eb:84:78:73:ef:52:94:65:87:11:
51:fe:20:29:2f:76:6a:9c:9e:16:cb:bc:8b:2d:86:88:87:b3:
87:9f:08:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:29:23 2025 by rpki-client