Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136342e302f32342d3234203d3e20383334.roa
File: 36322e38342e3136342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: +skkyTAkCjVku7bnI1iVe0IomomG8cv1MCp427Pt9Cw=
Subject key identifier: 26:0F:68:5B:E4:65:F3:0B:30:B7:D3:14:30:AA:40:85:68:6F:B9:24
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 64CE80776360FCC08C842E913A591CEFDC3A4E79
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136342e302f32342d3234203d3e20383334.roa
Signing time: Fri 24 Apr 2026 10:18:46 +0000
ROA not before: Fri 24 Apr 2026 10:13:46 +0000
ROA not after: Fri 23 Apr 2027 10:18:46 +0000
asID: 834
IP address blocks: 62.84.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:ce:80:77:63:60:fc:c0:8c:84:2e:91:3a:59:1c:ef:dc:3a:4e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 24 10:13:46 2026 GMT
Not After : Apr 23 10:18:46 2027 GMT
Subject: CN=260F685BE465F30B30B7D31430AA4085686FB924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:73:4c:d1:d8:35:60:92:be:4f:93:f5:a0:
2e:7c:12:1c:fe:b5:23:3c:35:75:60:0b:23:de:a6:
04:53:6b:e2:12:f3:e5:a9:81:dd:da:7c:34:a7:5d:
9a:e0:6b:a8:fa:4e:92:d6:c1:70:cf:81:8c:5a:f8:
79:cf:22:a6:60:21:94:40:3e:40:7b:8a:52:a2:2e:
b9:4c:5e:82:d3:fa:fc:ca:23:d5:db:48:99:b3:ea:
84:7c:4e:3b:55:ba:77:80:1f:09:14:80:de:97:cb:
78:30:b9:c7:da:a7:d9:87:9a:0c:ea:48:f1:a1:b3:
97:e4:af:08:f5:0c:4b:17:ce:91:94:7b:02:c4:27:
8a:bb:17:0f:d8:ca:e3:67:0d:92:cd:ce:f4:8f:14:
2c:99:63:a5:d8:28:75:f9:56:30:c5:8c:a2:85:e0:
2a:9b:cb:23:84:42:90:24:7e:73:0c:dd:aa:ae:b1:
bd:89:22:80:21:35:6d:11:64:75:5a:68:41:cb:8d:
76:a7:20:ae:68:9e:c8:53:05:fe:de:69:12:f4:0d:
5f:96:d9:a8:cd:2b:47:d0:1a:48:d3:c4:7d:b2:be:
50:fd:28:11:3e:d4:55:4d:c9:ee:39:8a:c2:4d:77:
18:07:03:f8:91:c0:3a:72:22:e4:e9:bf:6c:d1:45:
a2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0F:68:5B:E4:65:F3:0B:30:B7:D3:14:30:AA:40:85:68:6F:B9:24
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.164.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:32:37:28:b7:52:5d:f1:9d:a7:4b:d4:de:92:19:84:61:05:
df:e7:30:e7:09:81:18:ff:e7:5c:ff:b9:46:3a:ec:00:39:da:
21:e4:20:d6:d5:eb:53:03:1f:fe:64:6c:3d:89:80:f8:4e:66:
b1:a9:e1:e1:a7:a6:64:fc:50:ba:75:a9:51:31:00:dd:51:de:
da:1c:df:89:43:35:a7:6b:ab:8b:d6:66:1c:3f:7a:25:a5:b3:
e3:cf:44:a5:b3:22:0b:65:c2:e0:cf:d3:8e:17:3e:ad:2a:2a:
89:8e:55:7b:f9:cd:52:25:12:00:11:99:92:23:08:87:c8:e1:
98:9a:62:4d:7e:23:6c:a2:17:c5:ef:dc:26:6e:bb:e3:31:85:
e6:e2:33:c5:63:83:65:9e:2c:e9:b4:49:cc:10:c7:2f:d0:69:
1f:35:4b:3d:83:9c:97:90:3e:40:e3:bc:8a:eb:5b:ff:da:74:
63:ee:b6:d7:49:8c:c0:b8:fd:f1:8e:85:8f:b8:fe:ff:ba:df:
8e:ae:a0:ce:c5:f9:f1:c4:35:6b:75:f8:a9:3a:3b:90:76:03:
be:bd:d3:31:10:ee:0c:fb:5b:b2:2d:05:13:84:35:41:25:7d:
ea:96:2c:2b:58:6c:7d:38:9b:79:6f:a4:01:fc:03:07:b0:2e:
ad:1b:b4:e3
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUZM6Ad2Ng/MCMhC6ROlkc79w6TnkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA0MjQxMDEzNDZaFw0yNzA0MjMxMDE4NDZaMDMxMTAvBgNV
BAMTKDI2MEY2ODVCRTQ2NUYzMEIzMEI3RDMxNDMwQUE0MDg1Njg2RkI5MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2HnNM0dg1YJK+T5P1oC58Ehz+
tSM8NXVgCyPepgRTa+IS8+Wpgd3afDSnXZrga6j6TpLWwXDPgYxa+HnPIqZgIZRA
PkB7ilKiLrlMXoLT+vzKI9XbSJmz6oR8TjtVuneAHwkUgN6Xy3gwucfap9mHmgzq
SPGhs5fkrwj1DEsXzpGUewLEJ4q7Fw/YyuNnDZLNzvSPFCyZY6XYKHX5VjDFjKKF
4CqbyyOEQpAkfnMM3aqusb2JIoAhNW0RZHVaaEHLjXanIK5onshTBf7eaRL0DV+W
2ajNK0fQGkjTxH2yvlD9KBE+1FVNye45isJNdxgHA/iRwDpyIuTpv2zRRaIfAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUJg9oW+Rl8wswt9MUMKpAhWhvuSQwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzYzMjJlMzgzNDJlMzEzNjM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPlSkMA0G
CSqGSIb3DQEBCwUAA4IBAQBsMjcot1Jd8Z2nS9TekhmEYQXf5zDnCYEY/+dc/7lG
OuwAOdoh5CDW1etTAx/+ZGw9iYD4TmaxqeHhp6Zk/FC6dalRMQDdUd7aHN+JQzWn
a6uL1mYcP3olpbPjz0SlsyILZcLgz9OOFz6tKiqJjlV7+c1SJRIAEZmSIwiHyOGY
mmJNfiNsohfF79wmbrvjMYXm4jPFY4NlnizptEnMEMcv0GkfNUs9g5yXkD5A47yK
61v/2nRj7rbXSYzAuP3xjoWPuP7/ut+OrqDOxfnxxDVrdfipOjuQdgO+vdMxEO4M
+1uyLQUThDVBJX3qliwrWGx9OJt5b6QB/AMHsC6tG7Tj
-----END CERTIFICATE-----
Generated at Wed May 13 02:19:18 2026 by rpki-client