Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136332e302f32342d3234203d3e20383334.roa
File: 36322e38342e3136332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 7fUMKLyxjVDBfqWL5nzl4+zn28k+UBsHnhrsPjwIhh8=
Subject key identifier: 94:D0:CF:CC:1E:E2:EB:E1:E9:E5:A1:1C:DB:AF:09:E2:0D:96:9C:10
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 13117D5546E7826A431D2D9EEF2D34FB241DC7D7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136332e302f32342d3234203d3e20383334.roa
Signing time: Wed 18 Mar 2026 07:39:47 +0000
ROA not before: Wed 18 Mar 2026 07:34:47 +0000
ROA not after: Wed 17 Mar 2027 07:39:47 +0000
asID: 834
IP address blocks: 62.84.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:11:7d:55:46:e7:82:6a:43:1d:2d:9e:ef:2d:34:fb:24:1d:c7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 18 07:34:47 2026 GMT
Not After : Mar 17 07:39:47 2027 GMT
Subject: CN=94D0CFCC1EE2EBE1E9E5A11CDBAF09E20D969C10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:89:d6:3d:c2:5a:fd:41:9d:6e:39:a9:9d:5b:
08:70:58:d6:14:3a:c3:9c:0e:36:46:5d:5c:ce:10:
99:57:52:dd:8c:78:16:60:2d:3d:b1:24:01:bd:62:
5d:b7:bb:e1:b2:a5:2a:7b:bb:17:a5:d4:6e:ad:84:
82:0d:34:3e:83:00:a6:48:0d:67:1e:76:55:75:8e:
04:ac:fd:f5:0d:55:43:79:69:8d:ab:be:ed:88:6e:
00:33:26:c8:a9:20:7e:0b:d8:a9:0a:62:7c:71:08:
84:48:ad:36:dc:0e:4e:3a:61:66:b6:d8:fa:86:f1:
1f:61:f7:a2:b8:d1:52:72:62:10:92:df:04:0a:e7:
34:32:00:78:96:42:5b:40:17:bc:54:4a:8e:fe:e0:
63:86:29:45:eb:0a:52:9a:cd:a3:3a:0e:90:5b:99:
6f:39:f6:72:19:a2:c3:f6:fc:0f:6d:e4:ca:63:89:
3b:57:c3:6d:eb:94:01:de:31:40:82:1c:66:ee:e9:
5c:30:e5:9c:bf:ff:da:8e:a4:13:2c:cb:a2:f6:1a:
05:59:03:ea:72:1a:7b:bb:63:df:eb:ee:c2:6d:82:
0b:8a:f9:ec:df:b1:f3:39:8d:6f:10:ce:3d:63:8b:
38:11:3d:a3:14:19:21:b0:dd:19:83:f2:1a:9c:4e:
33:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D0:CF:CC:1E:E2:EB:E1:E9:E5:A1:1C:DB:AF:09:E2:0D:96:9C:10
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.163.0/24
Signature Algorithm: sha256WithRSAEncryption
04:be:ec:05:4a:fb:0b:4f:19:a5:f6:36:3f:b7:98:2d:79:aa:
0e:e5:6a:9b:c9:8f:aa:9c:9a:1d:8d:9e:8b:c1:fb:b1:ab:9c:
62:b2:ec:3b:51:6a:39:5c:25:2f:62:cb:30:be:a4:7b:4e:50:
dc:e2:7d:26:e7:a1:10:cb:79:7e:76:4d:7e:8a:87:03:3c:65:
cd:12:03:c0:1d:5a:8e:cc:2b:41:29:71:a1:65:94:23:41:34:
4b:f8:a3:9a:5f:57:cd:d1:51:65:9c:41:d3:19:ab:c9:73:83:
a3:f8:48:ff:ab:2d:c4:0c:d7:3d:7d:ed:47:6d:30:7d:36:55:
51:c5:be:53:04:ca:0e:9a:c7:b3:ef:c8:bd:3e:00:e4:4f:cd:
03:9e:d4:22:bf:ad:26:66:68:96:98:65:50:30:98:de:f5:fc:
08:73:6e:c1:20:44:2d:5c:69:78:ce:ee:fc:7d:40:94:a0:6e:
df:8d:8c:71:e1:b5:a4:5a:c4:d0:99:e5:aa:f3:3a:f9:03:7f:
13:9b:9b:c2:57:3b:21:e9:87:1e:3a:2e:4c:ad:c5:29:ec:1b:
95:02:e7:25:14:ea:8c:ac:c5:e2:69:ff:1a:42:bb:e9:f8:b2:
bd:4d:0c:a0:92:81:ba:9e:03:65:65:1d:af:9d:e0:b3:e1:49:
a5:08:14:88
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUExF9VUbngmpDHS2e7y00+yQdx9cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjAzMTgwNzM0NDdaFw0yNzAzMTcwNzM5NDdaMDMxMTAvBgNV
BAMTKDk0RDBDRkNDMUVFMkVCRTFFOUU1QTExQ0RCQUYwOUUyMEQ5NjlDMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkidY9wlr9QZ1uOamdWwhwWNYU
OsOcDjZGXVzOEJlXUt2MeBZgLT2xJAG9Yl23u+GypSp7uxel1G6thIINND6DAKZI
DWcedlV1jgSs/fUNVUN5aY2rvu2IbgAzJsipIH4L2KkKYnxxCIRIrTbcDk46YWa2
2PqG8R9h96K40VJyYhCS3wQK5zQyAHiWQltAF7xUSo7+4GOGKUXrClKazaM6DpBb
mW859nIZosP2/A9t5MpjiTtXw23rlAHeMUCCHGbu6Vww5Zy//9qOpBMsy6L2GgVZ
A+pyGnu7Y9/r7sJtgguK+ezfsfM5jW8Qzj1jizgRPaMUGSGw3RmD8hqcTjOrAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUlNDPzB7i6+Hp5aEc268J4g2WnBAwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzYzMjJlMzgzNDJlMzEzNjMz
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPlSjMA0G
CSqGSIb3DQEBCwUAA4IBAQAEvuwFSvsLTxml9jY/t5gteaoO5WqbyY+qnJodjZ6L
wfuxq5xisuw7UWo5XCUvYsswvqR7TlDc4n0m56EQy3l+dk1+iocDPGXNEgPAHVqO
zCtBKXGhZZQjQTRL+KOaX1fN0VFlnEHTGavJc4Oj+Ej/qy3EDNc9fe1HbTB9NlVR
xb5TBMoOmsez78i9PgDkT80DntQiv60mZmiWmGVQMJje9fwIc27BIEQtXGl4zu78
fUCUoG7fjYxx4bWkWsTQmeWq8zr5A38Tm5vCVzsh6YceOi5MrcUp7BuVAuclFOqM
rMXiaf8aQrvp+LK9TQygkoG6ngNlZR2vneCz4UmlCBSI
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:54 2026 by rpki-client