Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136322e302f32342d3234203d3e20383334.roa
File: 36322e38342e3136322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: neNvprbVPVTTEsvH7eq6JFsGoWpv0cxBymVnwH5lXhQ=
Subject key identifier: 63:21:35:FD:7C:75:8E:97:1D:BC:76:A5:FC:F1:78:C0:48:2A:F3:A0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3DF9E706B35A486F506F76C2B7B3AD8659765F0D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136322e302f32342d3234203d3e20383334.roa
Signing time: Wed 25 Mar 2026 09:37:37 +0000
ROA not before: Wed 25 Mar 2026 09:32:37 +0000
ROA not after: Wed 24 Mar 2027 09:37:37 +0000
asID: 834
IP address blocks: 62.84.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:f9:e7:06:b3:5a:48:6f:50:6f:76:c2:b7:b3:ad:86:59:76:5f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 25 09:32:37 2026 GMT
Not After : Mar 24 09:37:37 2027 GMT
Subject: CN=632135FD7C758E971DBC76A5FCF178C0482AF3A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:9a:d7:00:ac:bf:8e:04:d6:3b:13:22:e3:
69:5e:0f:a3:ba:7a:2b:61:51:5f:40:54:d2:4c:56:
81:b9:c7:29:37:03:11:d7:75:c4:1c:b1:56:45:c5:
b0:6a:6d:3f:b9:9e:60:06:d3:1f:b0:82:d2:9d:65:
18:93:8a:a8:7a:32:9c:92:11:16:85:fc:2b:7d:38:
1a:f4:4f:ca:07:39:5f:8a:50:e4:3b:aa:89:98:cc:
d0:24:4a:6b:77:57:e8:0e:9a:b9:d0:b6:b4:f5:40:
df:cc:23:f6:5b:9f:33:8a:3a:35:51:c5:b4:0d:2c:
cb:70:8c:b6:12:7a:73:4e:46:fe:79:36:43:92:12:
6d:79:2d:b1:bd:e4:16:a8:a3:5d:8d:11:8d:8e:cf:
3e:2e:3e:55:c6:94:a6:c7:3e:2b:d5:46:58:51:d5:
c6:6c:a7:81:45:12:cc:90:66:0b:48:af:c0:57:2e:
b2:fe:25:c6:88:bf:01:68:b5:78:6f:b3:36:7c:30:
ba:d3:2f:ec:a5:cb:8d:22:8d:d5:9c:01:8f:9b:48:
08:2a:72:fc:ec:b5:21:6a:db:4d:64:56:a8:62:c7:
5f:4b:78:5d:a1:43:0f:f6:8b:58:3a:00:3e:a3:15:
ce:77:84:59:de:88:dc:4f:bd:34:8e:30:33:c2:d6:
24:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:21:35:FD:7C:75:8E:97:1D:BC:76:A5:FC:F1:78:C0:48:2A:F3:A0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.162.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:d1:a0:2d:b9:f9:e9:9a:ca:68:7d:2d:e1:d0:ba:09:45:98:
d1:c5:d6:a3:29:d8:15:eb:03:11:a7:a0:85:95:37:3a:18:f9:
88:d8:67:63:49:68:9c:a0:b5:c4:c8:4e:0c:f3:4e:d4:75:09:
5a:6f:40:11:99:35:9d:6c:53:9d:98:85:97:7d:ff:a5:a5:2f:
0e:b2:8a:4b:bd:30:ff:fa:7e:97:8d:4b:f8:65:6b:17:21:64:
a4:d2:54:64:5e:66:fa:1a:44:06:9c:b6:c5:d4:d6:e0:40:b2:
3d:a1:bd:06:b9:ed:13:53:b9:44:45:26:d0:43:15:6a:2a:d3:
1e:f8:47:33:44:14:b2:67:42:5f:48:8a:b1:bd:8c:b8:b7:73:
86:f3:03:b6:bf:0a:2e:15:13:94:a5:e5:15:f2:ac:1b:7c:8e:
91:b9:ce:24:ba:db:0e:a9:30:ec:5e:63:d7:dd:b6:32:5c:1d:
92:3d:6f:11:b0:a9:7f:fc:d6:fa:4b:93:fc:42:41:3e:55:a1:
2c:79:53:27:15:8c:09:e6:fc:0f:6c:a0:c3:f3:bf:d0:18:7d:
81:f9:c5:65:51:55:81:9f:c3:6e:39:32:7d:22:9b:4c:eb:77:
eb:bd:fa:10:3c:f1:73:45:3d:50:4a:96:2c:1a:16:4d:6a:07:
d5:c3:50:69
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUPfnnBrNaSG9Qb3bCt7Othll2Xw0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjAzMjUwOTMyMzdaFw0yNzAzMjQwOTM3MzdaMDMxMTAvBgNV
BAMTKDYzMjEzNUZEN0M3NThFOTcxREJDNzZBNUZDRjE3OEMwNDgyQUYzQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1tprXAKy/jgTWOxMi42leD6O6
eithUV9AVNJMVoG5xyk3AxHXdcQcsVZFxbBqbT+5nmAG0x+wgtKdZRiTiqh6MpyS
ERaF/Ct9OBr0T8oHOV+KUOQ7qomYzNAkSmt3V+gOmrnQtrT1QN/MI/ZbnzOKOjVR
xbQNLMtwjLYSenNORv55NkOSEm15LbG95Baoo12NEY2Ozz4uPlXGlKbHPivVRlhR
1cZsp4FFEsyQZgtIr8BXLrL+JcaIvwFotXhvszZ8MLrTL+yly40ijdWcAY+bSAgq
cvzstSFq201kVqhix19LeF2hQw/2i1g6AD6jFc53hFneiNxPvTSOMDPC1iSZAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUYyE1/Xx1jpcdvHal/PF4wEgq86AwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzYzMjJlMzgzNDJlMzEzNjMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPlSiMA0G
CSqGSIb3DQEBCwUAA4IBAQB+0aAtufnpmspofS3h0LoJRZjRxdajKdgV6wMRp6CF
lTc6GPmI2GdjSWicoLXEyE4M807UdQlab0ARmTWdbFOdmIWXff+lpS8OsopLvTD/
+n6XjUv4ZWsXIWSk0lRkXmb6GkQGnLbF1NbgQLI9ob0Gue0TU7lERSbQQxVqKtMe
+EczRBSyZ0JfSIqxvYy4t3OG8wO2vwouFROUpeUV8qwbfI6Ruc4kutsOqTDsXmPX
3bYyXB2SPW8RsKl//Nb6S5P8QkE+VaEseVMnFYwJ5vwPbKDD87/QGH2B+cVlUVWB
n8NuOTJ9IptM63frvfoQPPFzRT1QSpYsGhZNagfVw1Bp
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:36:03 2026 by rpki-client