Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137312e302f32342d3234203d3e20383334.roa
File: 36322e38342e3137312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: IfDsXbKRGRnwml3RaWfNZz/L8TDKPWSXTxorsLW2ORM=
Subject key identifier: 93:2C:1F:A5:86:21:AA:30:D8:D9:E5:BB:18:E0:72:1A:91:63:1F:DC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5C62620D4F9D18203B930753A568D613223C106B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137312e302f32342d3234203d3e20383334.roa
Signing time: Wed 01 Jul 2026 17:19:10 +0000
ROA not before: Wed 01 Jul 2026 17:14:10 +0000
ROA not after: Wed 30 Jun 2027 17:19:10 +0000
asID: 834
IP address blocks: 62.84.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:62:62:0d:4f:9d:18:20:3b:93:07:53:a5:68:d6:13:22:3c:10:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 1 17:14:10 2026 GMT
Not After : Jun 30 17:19:10 2027 GMT
Subject: CN=932C1FA58621AA30D8D9E5BB18E0721A91631FDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fa:de:4f:fa:28:51:a9:d1:0a:52:53:6d:5f:
ef:40:ff:ee:ec:4e:63:1c:7d:92:f4:55:2e:a8:cf:
e7:eb:9d:94:c4:13:8a:2d:a4:e6:8c:4b:df:7e:8f:
4e:cf:dd:d6:74:4a:ef:44:03:ce:52:7a:93:bb:00:
10:e3:d3:a4:b3:f0:2f:0f:20:e8:c6:aa:a9:6b:4c:
47:39:91:ef:02:8b:f1:26:62:f4:f9:53:a3:2a:d6:
14:a2:71:95:d8:8e:bb:a3:1c:28:03:a5:2f:ba:51:
57:fe:94:f1:86:91:48:fe:91:98:e7:f5:da:39:e5:
37:5d:f9:41:ac:d7:9d:5b:38:de:8e:44:83:68:3c:
38:d8:72:50:d5:3e:fe:9a:1c:cf:bd:41:67:d5:a2:
48:2d:19:13:71:8c:13:27:f0:b2:f8:1c:60:42:fe:
17:90:a5:3a:24:eb:77:04:76:ee:69:e7:15:1b:3a:
18:d8:3b:c6:02:eb:f4:53:e2:42:0a:d8:9f:4c:32:
58:26:e7:d5:15:fe:b3:39:9f:de:02:36:3d:98:71:
e0:e9:0a:27:14:d3:df:a1:7f:c2:a5:f8:f2:cb:07:
86:48:a1:7d:28:27:14:af:cf:20:0c:73:c1:29:de:
76:3f:a3:09:a7:68:ca:0f:2d:c9:e6:fa:6a:d7:a6:
6e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2C:1F:A5:86:21:AA:30:D8:D9:E5:BB:18:E0:72:1A:91:63:1F:DC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.171.0/24
Signature Algorithm: sha256WithRSAEncryption
58:37:27:b1:b1:e1:f9:9e:e5:45:44:3d:6e:97:37:7f:4a:75:
80:ac:82:a8:16:87:59:62:28:3a:bd:04:8e:24:b5:b8:d7:80:
35:45:fd:44:71:2b:e1:50:f3:f9:60:7d:12:a2:f1:c3:37:ec:
ab:02:44:ac:46:d0:e4:c5:40:9a:65:6e:1d:81:33:64:46:b7:
15:ed:e6:e1:65:a1:04:0e:dd:1f:01:61:54:85:29:40:59:48:
42:c4:9f:8d:e3:73:2c:9b:f1:2b:9e:fe:14:19:58:8b:e1:ff:
a0:d2:28:c5:0e:f9:c5:ac:d8:88:76:5d:58:9d:c9:4f:b7:ee:
a4:bb:50:a0:e1:3c:6e:02:c9:14:be:6f:30:f0:b9:f4:f4:bf:
a2:f6:e7:64:a5:4b:e0:5c:83:b6:9e:4d:75:5e:63:73:ed:72:
5e:01:8b:e6:db:94:54:63:7f:73:c6:cf:38:de:c5:95:ae:59:
8f:68:dc:2d:b9:e2:67:c0:ba:05:83:5d:d5:2e:59:b8:91:27:
21:73:31:44:9d:e2:47:07:08:53:e4:68:79:8b:f8:40:9d:44:
83:2d:a6:7a:ac:cb:8d:d1:ae:9d:51:11:89:02:af:35:cd:7a:
2c:2e:c1:a4:61:b8:4e:2e:fa:7c:8f:50:7d:46:82:81:b5:4b:
20:f5:ca:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:16 2026 by rpki-client