Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136382e302f32342d3234203d3e203235333639.roa
File: 36322e38342e3136382e302f32342d3234203d3e203235333639.roa (raw, json)
Hash identifier: 0gefog/1pLw/7yzBqFERnX9xs2ZpZACbCZGS72fiKXI=
Subject key identifier: 3C:FE:C3:77:7F:C5:6E:12:35:5F:88:AC:05:6E:EC:2F:06:EA:D2:8D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 552709562F7B2E07D4E4A9370E0ABF02AC245E67
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136382e302f32342d3234203d3e203235333639.roa
Signing time: Mon 20 Apr 2026 11:23:48 +0000
ROA not before: Mon 20 Apr 2026 11:18:48 +0000
ROA not after: Mon 19 Apr 2027 11:23:48 +0000
asID: 25369
IP address blocks: 62.84.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:27:09:56:2f:7b:2e:07:d4:e4:a9:37:0e:0a:bf:02:ac:24:5e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 20 11:18:48 2026 GMT
Not After : Apr 19 11:23:48 2027 GMT
Subject: CN=3CFEC3777FC56E12355F88AC056EEC2F06EAD28D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:00:4d:ff:13:5f:90:fd:5c:8b:a3:05:6b:55:
d0:15:e7:95:dc:05:d2:2b:1c:38:76:83:f3:60:c3:
5c:28:35:b2:06:2f:f8:48:dc:8f:d0:89:c7:59:42:
a9:38:80:9b:4a:b0:e8:e2:e4:a7:15:6d:16:e2:63:
3a:9d:02:7c:65:33:dc:d1:0c:b3:ec:2d:d6:5f:fc:
5f:da:93:68:15:84:ed:41:67:da:57:01:bc:b9:9e:
a5:65:c7:7f:63:1e:e1:b8:43:2b:ba:0c:ca:fa:f0:
c6:fd:2e:a0:07:46:22:fa:5b:c3:ca:de:70:9b:88:
84:cb:96:6b:6e:63:03:52:1c:ed:46:80:e1:2a:23:
e6:91:d9:20:da:54:29:ea:52:b2:c6:7e:e6:e3:f2:
58:0b:d0:fd:66:5a:8c:8b:b0:b8:37:f6:8e:46:a6:
c8:d2:c6:32:21:19:4c:79:87:99:99:44:ca:f8:3a:
52:7b:f4:eb:f4:41:fe:74:70:41:12:25:f1:7e:20:
af:26:40:39:65:a6:42:df:8c:46:94:34:a0:e2:7b:
24:0a:8d:87:d0:62:fd:f9:5a:e2:06:99:01:d8:9b:
e4:a6:b3:b0:4e:5a:34:2e:79:77:a5:04:48:d1:53:
ef:11:04:0a:22:03:d5:57:e3:6f:fd:b9:aa:ee:8c:
a1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FE:C3:77:7F:C5:6E:12:35:5F:88:AC:05:6E:EC:2F:06:EA:D2:8D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136382e302f32342d3234203d3e203235333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.168.0/24
Signature Algorithm: sha256WithRSAEncryption
25:1d:54:c5:31:da:37:fe:30:77:e0:7d:be:53:65:98:1d:8a:
73:81:2b:10:25:07:e5:87:1c:49:2e:0b:f3:ca:c2:8a:c0:a5:
c3:00:14:65:24:bf:43:2e:fa:26:07:b8:a5:e7:0d:15:e1:de:
c5:0b:07:07:fd:8c:9d:f3:b4:b4:c2:04:6d:d5:30:9e:e4:32:
c9:5a:1c:c2:50:3e:63:ad:13:6c:80:ed:e8:c1:f0:53:0f:87:
32:8f:96:23:5b:d2:ac:55:4a:51:d1:fe:ff:c0:93:df:bf:7a:
b6:61:3f:af:e8:ad:69:0f:1c:c6:b4:7c:00:f0:eb:3c:9e:9d:
36:3c:80:a7:3d:3b:2c:b3:e9:b1:52:a4:df:55:36:55:54:ee:
35:71:5a:27:ba:f2:ef:98:7c:b7:33:66:3e:f5:01:26:76:58:
9d:af:1f:fc:8c:72:81:b9:3c:3f:3f:3b:ae:2f:38:e4:9d:8c:
7f:97:d2:e0:60:b2:a0:48:49:38:17:02:63:2a:e1:db:91:b5:
b1:13:fe:82:4a:f6:4a:73:71:75:46:db:80:c1:33:86:21:e4:
7f:3e:d8:ec:66:f5:c8:c7:12:bd:05:7e:f0:0f:ec:2a:0e:b1:
fa:08:f6:6f:cc:6b:d7:89:ee:10:7e:c0:ab:a5:25:11:e1:dc:
79:47:89:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:00:51 2026 by rpki-client