Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136362e302f32342d3234203d3e20323136343035.roa
File: 36322e38342e3136362e302f32342d3234203d3e20323136343035.roa (raw, json)
Hash identifier: Kp+OxV7puWUW6Y1e17IH3MT0Nko7orLeW7TuqldkdC8=
Subject key identifier: 55:69:5B:FF:E7:CD:C3:ED:99:AD:10:36:A7:E6:B9:E5:EF:7E:0B:C2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6A243D5ECCAB39D88E950E49E818900245934B73
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136362e302f32342d3234203d3e20323136343035.roa
Signing time: Sat 23 Aug 2025 11:22:40 +0000
ROA not before: Sat 23 Aug 2025 11:17:40 +0000
ROA not after: Sat 22 Aug 2026 11:22:40 +0000
asID: 216405
IP address blocks: 62.84.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:24:3d:5e:cc:ab:39:d8:8e:95:0e:49:e8:18:90:02:45:93:4b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 23 11:17:40 2025 GMT
Not After : Aug 22 11:22:40 2026 GMT
Subject: CN=55695BFFE7CDC3ED99AD1036A7E6B9E5EF7E0BC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:02:9f:6a:4c:e3:7e:86:fa:bb:44:cd:17:fb:
06:eb:ad:a3:22:83:82:14:12:f0:a5:7a:2b:4b:d1:
ad:de:f3:42:05:9d:5f:c3:4c:22:97:a8:44:4e:58:
c4:94:a5:66:76:3b:19:bb:0b:f2:cd:17:1b:3d:b4:
8e:24:a2:66:15:7f:30:91:98:98:49:8d:cf:0e:74:
ea:a4:81:dc:2b:da:4a:99:55:13:b8:af:00:e8:7c:
31:9f:6a:dd:55:ac:a9:71:1f:15:a8:3b:22:8f:78:
00:a3:ba:70:f9:57:90:ee:2d:a9:e4:b2:bb:67:68:
55:de:3f:e2:5f:8b:8b:87:24:fe:26:68:85:1c:3a:
dc:a1:b9:bd:f5:81:09:e1:90:56:1a:3d:c6:96:5b:
3c:df:2b:67:f5:f8:d8:16:23:a6:47:ff:1d:62:b7:
f2:83:6f:e4:94:c7:a5:c0:0b:ca:ef:2e:0f:3d:83:
e1:32:fd:be:99:0f:a8:17:de:c4:ff:5d:9d:9d:ef:
79:26:6e:9a:22:7d:bb:05:fd:51:6a:4d:d9:bf:f4:
25:8e:ff:28:75:fb:1b:48:e6:c6:17:26:07:cf:95:
70:3b:4e:f8:28:4a:b6:0b:ee:c9:8f:a1:5e:aa:35:
bc:23:ea:73:3c:c0:cb:b1:c3:6c:a0:53:9d:e7:48:
2b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:69:5B:FF:E7:CD:C3:ED:99:AD:10:36:A7:E6:B9:E5:EF:7E:0B:C2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136362e302f32342d3234203d3e20323136343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.166.0/24
Signature Algorithm: sha256WithRSAEncryption
26:67:49:a8:01:8a:ee:8f:fb:c7:10:dc:c6:e7:d8:80:8a:de:
55:ad:8a:e3:d4:c5:93:7b:15:55:de:0b:a1:f5:be:55:f8:15:
87:64:b2:f0:f1:9f:a4:99:41:db:c0:fe:9e:70:11:e7:e1:46:
0f:75:89:bb:07:59:e0:8e:79:10:e9:81:e0:da:d3:a1:c1:41:
55:00:3d:5a:78:b4:7e:ef:88:79:be:3c:2f:5f:b0:4a:2e:3f:
8b:15:e7:0a:10:9e:69:67:8f:01:89:5f:80:56:12:60:b3:11:
98:4c:7a:cf:9e:51:57:8b:b8:d5:ce:db:bd:4a:20:00:71:37:
3e:f9:b5:fa:bc:65:92:f5:53:fd:0b:d7:a0:00:7f:99:64:f1:
e7:c8:3a:46:ec:34:b3:ac:9a:bf:6b:cc:b6:41:56:41:d5:65:
ac:48:b5:ac:58:47:40:01:3c:bc:4a:99:8f:92:e7:86:c6:ca:
3b:c4:bd:36:f5:2a:50:d7:21:e6:de:b0:bc:aa:25:aa:e0:0e:
83:47:7d:bf:dc:4f:af:aa:a4:c1:6f:2b:47:dc:47:bc:9c:37:
07:aa:f9:43:d6:20:b8:cc:b2:61:f5:e9:58:8c:50:9c:e1:3b:
c1:a7:f8:28:c8:33:86:fa:0c:7b:54:db:96:8c:cd:72:0c:e9:
2f:a0:94:51
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUaiQ9XsyrOdiOlQ5J6BiQAkWTS3MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA4MjMxMTE3NDBaFw0yNjA4MjIxMTIyNDBaMDMxMTAvBgNV
BAMTKDU1Njk1QkZGRTdDREMzRUQ5OUFEMTAzNkE3RTZCOUU1RUY3RTBCQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXAp9qTON+hvq7RM0X+wbrraMi
g4IUEvCleitL0a3e80IFnV/DTCKXqEROWMSUpWZ2Oxm7C/LNFxs9tI4komYVfzCR
mJhJjc8OdOqkgdwr2kqZVRO4rwDofDGfat1VrKlxHxWoOyKPeACjunD5V5DuLank
srtnaFXeP+Jfi4uHJP4maIUcOtyhub31gQnhkFYaPcaWWzzfK2f1+NgWI6ZH/x1i
t/KDb+SUx6XAC8rvLg89g+Ey/b6ZD6gX3sT/XZ2d73kmbpoifbsF/VFqTdm/9CWO
/yh1+xtI5sYXJgfPlXA7TvgoSrYL7smPoV6qNbwj6nM8wMuxw2ygU53nSCspAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUVWlb/+fNw+2ZrRA2p+a55e9+C8IwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzYzMjJlMzgzNDJlMzEzNjM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM2MzQzMDM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
PlSmMA0GCSqGSIb3DQEBCwUAA4IBAQAmZ0moAYruj/vHENzG59iAit5VrYrj1MWT
exVV3guh9b5V+BWHZLLw8Z+kmUHbwP6ecBHn4UYPdYm7B1ngjnkQ6YHg2tOhwUFV
AD1aeLR+74h5vjwvX7BKLj+LFecKEJ5pZ48BiV+AVhJgsxGYTHrPnlFXi7jVztu9
SiAAcTc++bX6vGWS9VP9C9egAH+ZZPHnyDpG7DSzrJq/a8y2QVZB1WWsSLWsWEdA
ATy8SpmPkueGxso7xL029SpQ1yHm3rC8qiWq4A6DR32/3E+vqqTBbytH3Ee8nDcH
qvlD1iC4zLJh9elYjFCc4TvBp/goyDOG+gx7VNuWjM1yDOkvoJRR
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:55:20 2025 by rpki-client