Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137342e302f32342d3234203d3e20323035383836.roa
File: 36322e38342e3137342e302f32342d3234203d3e20323035383836.roa (raw, json)
Hash identifier: D/Ghq5AenSQREUGPaNktLC0FcP/04q/61/ecSUg6xmI=
Subject key identifier: B1:2F:D0:70:6F:EB:EB:0F:88:7E:04:83:CD:D0:48:08:12:A3:9A:45
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4163258C84B5D1CDCA321FEA7169F50959585DC7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137342e302f32342d3234203d3e20323035383836.roa
Signing time: Fri 17 Oct 2025 11:04:04 +0000
ROA not before: Fri 17 Oct 2025 10:59:04 +0000
ROA not after: Fri 16 Oct 2026 11:04:04 +0000
asID: 205886
IP address blocks: 62.84.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:63:25:8c:84:b5:d1:cd:ca:32:1f:ea:71:69:f5:09:59:58:5d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 17 10:59:04 2025 GMT
Not After : Oct 16 11:04:04 2026 GMT
Subject: CN=B12FD0706FEBEB0F887E0483CDD0480812A39A45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d7:b2:6d:15:ef:99:a5:12:5f:d7:eb:e7:c3:
4c:54:ec:90:83:a0:72:4e:9f:6f:c3:8c:ca:d5:6d:
e7:13:3d:1a:2d:fe:88:e5:88:18:c1:04:6b:9b:5e:
e2:1b:60:3a:64:22:44:39:ab:cf:b7:af:22:ae:65:
8b:98:60:11:72:4e:54:66:91:0d:80:c3:6b:80:63:
f5:7e:dc:42:95:48:ea:9e:29:d5:e0:00:58:3b:5b:
8a:2a:f0:60:5e:89:5d:52:c2:f8:2c:c4:51:af:8a:
11:9b:22:57:64:cd:6c:ce:18:a3:9c:19:67:b4:2f:
36:4c:bc:7f:b4:34:91:da:0a:d2:74:27:7b:e8:51:
32:7e:59:ec:69:74:15:32:25:04:67:d3:46:a4:95:
d9:a5:6c:57:1a:28:bd:84:13:bf:2d:f0:a4:d9:c2:
3a:06:5d:a3:8e:f7:d3:bd:87:f7:38:5e:8f:aa:b6:
f3:8e:c4:6a:a4:50:0e:7e:d6:66:c3:89:50:c9:0a:
c1:e9:7d:6a:f2:3f:85:8d:42:9b:5f:8e:14:f4:46:
b7:81:df:ed:32:69:8d:b0:e5:64:6d:56:3c:a9:87:
16:4d:a6:a8:98:59:78:51:d3:bb:5e:cd:a7:9c:e0:
fd:ea:2e:a6:48:0d:5c:8d:f6:9f:9e:1d:29:08:fc:
bf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2F:D0:70:6F:EB:EB:0F:88:7E:04:83:CD:D0:48:08:12:A3:9A:45
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137342e302f32342d3234203d3e20323035383836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.174.0/24
Signature Algorithm: sha256WithRSAEncryption
59:01:a2:98:7d:2d:a9:55:37:0a:d6:e7:4e:92:e6:c4:5c:13:
4c:6a:d8:0d:a8:e3:3a:03:1a:80:ee:97:4f:23:35:df:cd:7d:
55:9b:a9:d0:33:1b:52:07:01:6b:b1:0d:53:55:9b:1d:8d:7a:
49:67:2b:5b:37:12:83:ac:3b:03:81:e2:5c:8e:3d:6e:3d:4f:
2a:7f:33:f6:38:8c:a1:d8:89:df:57:83:de:c2:02:c0:19:be:
e1:25:f4:57:d0:01:6a:f3:d5:fd:a4:00:bd:e3:c1:b0:cc:08:
c9:a0:08:77:0d:ec:3a:3f:53:58:af:ee:8b:43:f8:8f:05:55:
f8:40:1a:35:4d:60:54:8f:b9:1f:ec:6f:03:26:25:16:bf:34:
97:a2:f2:07:f4:03:bc:c4:4f:8d:88:17:8b:be:c8:46:dd:66:
8c:cb:d1:ee:6c:08:c1:d2:ef:8b:05:ff:36:30:34:8a:9a:bc:
75:7c:94:8e:63:ed:ca:af:de:98:f5:ad:66:d3:20:22:f3:17:
60:72:88:65:42:92:7f:62:d4:4e:77:07:8c:d0:fe:91:8b:16:
e1:a3:07:9b:fd:48:19:11:f3:84:eb:09:f7:58:21:18:1e:fa:
6c:44:84:90:a6:e4:40:f7:c3:dc:b0:f5:94:a1:65:65:8f:2d:
05:8d:59:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:31:11 2025 by rpki-client