Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136342e302f32332d3234203d3e20383334.roa
File: 36322e38342e3136342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: rNLaXM0zJt6IQLhiHH9X8mufkTEKBqcvJtiZ7A9V3Ro=
Subject key identifier: 36:9C:F9:33:EA:55:CC:86:49:39:EB:65:D0:F8:0F:9F:3B:E4:6F:AD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5D95F5FC407F514CAC838C8E9E50F7DAE9D22B5C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136342e302f32332d3234203d3e20383334.roa
Signing time: Mon 23 Mar 2026 21:02:41 +0000
ROA not before: Mon 23 Mar 2026 20:57:41 +0000
ROA not after: Mon 22 Mar 2027 21:02:41 +0000
asID: 834
IP address blocks: 62.84.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:95:f5:fc:40:7f:51:4c:ac:83:8c:8e:9e:50:f7:da:e9:d2:2b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 23 20:57:41 2026 GMT
Not After : Mar 22 21:02:41 2027 GMT
Subject: CN=369CF933EA55CC864939EB65D0F80F9F3BE46FAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ff:81:79:9c:e0:ae:20:6e:41:7d:06:2b:f2:
5d:a3:0c:e5:a1:80:b9:00:d1:d6:35:34:bd:b0:a3:
45:b0:95:b6:61:65:5d:af:df:0c:1b:a2:63:40:0c:
29:b4:df:86:ef:e4:d5:50:d5:38:b7:f4:c3:99:64:
6e:29:22:c1:de:c5:97:5e:4c:66:13:67:43:fc:c4:
fc:6c:27:60:6a:c9:11:68:c0:f4:66:ac:cb:51:fb:
8b:99:74:9d:6e:ce:99:e8:9b:42:b6:c5:41:b0:d0:
12:e0:58:c7:ae:a5:e0:16:c1:f4:35:56:00:08:aa:
23:a6:df:03:59:2e:27:ab:08:0e:79:c0:4c:4e:4e:
de:45:d2:1d:60:fd:52:85:71:c8:30:dc:07:5e:75:
6e:fa:23:b5:60:7c:1e:c4:42:f9:df:19:cc:45:42:
1a:c2:2f:6f:be:79:58:4e:91:87:03:68:c3:ce:e5:
77:a8:cd:b8:12:70:8e:d8:9b:71:e1:7c:db:38:a1:
89:10:cc:9d:39:b7:89:6b:af:cf:98:af:59:2f:4b:
ab:74:0c:ed:c4:36:48:43:c8:18:93:f1:3b:4d:28:
80:e9:f3:99:af:18:83:43:26:4c:e9:ff:64:b7:9f:
86:31:bc:a1:ea:ab:75:5b:91:22:30:47:9e:47:d7:
bb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9C:F9:33:EA:55:CC:86:49:39:EB:65:D0:F8:0F:9F:3B:E4:6F:AD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136342e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.164.0/23
Signature Algorithm: sha256WithRSAEncryption
53:9c:fe:a8:7e:db:bf:1d:aa:f9:b1:07:bc:b3:c5:a9:da:56:
46:12:0a:fc:f9:91:fc:47:f5:3f:d8:c6:bb:33:62:6b:cf:8f:
56:4f:40:01:ec:38:3b:78:db:f2:b8:62:cb:af:5e:6c:f8:b8:
38:b4:b4:18:b0:b6:88:69:9a:8f:b8:40:b1:df:1a:04:91:9c:
ee:d7:d6:3b:13:a6:8c:d2:4d:e0:ca:19:a2:f9:fe:f4:12:04:
a9:dd:e7:5d:47:63:dc:47:4b:dc:11:81:fa:b0:a7:98:39:32:
62:58:1a:9a:fd:a1:cc:e1:e8:2f:78:6a:94:5a:7e:b5:36:1f:
1a:32:65:04:4b:75:24:2d:8d:98:b9:ee:b3:a1:67:4e:c7:5b:
45:c0:e8:80:55:e7:33:4b:2f:41:06:b7:50:2c:ed:31:3b:4f:
ce:9d:a6:6a:25:a6:d6:7a:dd:9d:18:54:a6:19:b5:99:f8:5a:
85:55:fd:52:de:b0:5d:a9:84:6f:29:28:c2:bf:8d:76:ea:0f:
0e:cf:7b:61:98:fd:98:37:2f:07:21:e8:a4:b7:75:0a:21:0c:
ea:e0:65:af:a6:6b:63:92:6a:d7:2b:38:84:6e:97:1f:78:d4:
08:d8:d5:2e:a6:63:3f:eb:d1:76:cb:b5:46:4a:b6:a3:1e:52:
a8:3a:72:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:36:02 2026 by rpki-client