Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137352e302f32342d3234203d3e203135353235.roa
File: 36322e38342e3137352e302f32342d3234203d3e203135353235.roa (raw, json)
Hash identifier: 3oZFfRMiAUCvdNrO1FYJ5x4dVEFI/B/eR0s3XnYQ2Fk=
Subject key identifier: 0B:77:B3:23:A0:F4:02:77:04:75:CD:F3:08:46:B7:C6:E5:68:03:64
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 45C7B61DF6DB54F83BA010141CBF162D336DEC8C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137352e302f32342d3234203d3e203135353235.roa
Signing time: Tue 05 May 2026 09:24:01 +0000
ROA not before: Tue 05 May 2026 09:19:01 +0000
ROA not after: Tue 04 May 2027 09:24:01 +0000
asID: 15525
IP address blocks: 62.84.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:c7:b6:1d:f6:db:54:f8:3b:a0:10:14:1c:bf:16:2d:33:6d:ec:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 5 09:19:01 2026 GMT
Not After : May 4 09:24:01 2027 GMT
Subject: CN=0B77B323A0F402770475CDF30846B7C6E5680364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ec:10:0f:c0:42:14:49:94:07:ea:d6:06:40:
6a:05:c6:90:72:da:e6:a8:44:95:39:22:24:3d:c7:
2f:2f:8a:9b:ad:9d:16:3e:1a:3d:d6:a7:1c:35:0b:
3a:56:fd:a3:6c:32:86:24:05:7a:ed:c4:86:6a:4d:
aa:40:49:74:8f:bd:cc:dc:ed:6a:d4:2a:95:2e:81:
a6:81:1d:db:66:b0:75:67:72:92:97:83:16:9f:b3:
e2:00:34:ab:10:e4:12:07:ce:91:10:4b:77:72:cc:
df:19:76:75:d0:0f:c8:ce:8b:99:ac:07:1b:6e:a9:
00:8f:5a:d5:80:22:bd:d0:2a:41:d3:64:7c:c6:12:
d0:ee:9b:21:ca:e8:f0:99:6f:b2:84:ad:d4:2e:bf:
f5:9d:ab:45:b9:56:1f:80:75:3e:6a:d5:29:ea:a2:
bb:e1:91:ef:a4:d6:15:53:46:42:35:39:3a:0b:2d:
27:8a:8b:59:14:7c:6f:54:b1:78:07:97:05:8a:31:
99:a4:77:65:30:9d:22:f4:30:ef:7e:3d:d8:d3:1f:
5f:98:2d:4d:c9:cc:7f:f4:83:3f:78:df:f3:85:9e:
c3:89:31:97:24:01:3b:f1:ba:49:fe:7a:1a:76:56:
0c:6f:1c:6d:0d:aa:db:aa:a2:30:2c:af:42:ba:64:
fb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:77:B3:23:A0:F4:02:77:04:75:CD:F3:08:46:B7:C6:E5:68:03:64
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137352e302f32342d3234203d3e203135353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.175.0/24
Signature Algorithm: sha256WithRSAEncryption
90:27:42:20:3a:7f:89:2b:c7:bd:43:b1:a8:94:f7:05:0b:78:
ea:94:a7:b3:06:4f:2b:98:a1:5d:f2:db:33:94:56:d2:33:de:
4a:d8:a4:dc:d4:52:de:ad:f2:7f:9c:f3:61:9e:9c:98:c8:cb:
ce:22:fa:8e:49:ef:a0:bb:ef:ef:68:fc:06:af:c9:c9:55:fc:
90:7a:ea:af:aa:d9:08:46:ad:12:20:bb:b3:78:0e:07:bb:e5:
62:89:0c:e8:b9:e2:0a:b4:b7:9f:23:38:cf:ba:51:57:53:97:
c5:9d:65:c0:00:e2:f6:f1:35:a2:37:4f:05:21:6f:25:7f:a3:
4a:a0:9a:6f:d7:86:ad:9e:ef:a5:f7:18:72:a6:bd:b5:b4:18:
6c:20:58:e3:28:83:53:5f:6a:83:5c:5c:72:8b:2b:e8:cb:04:
e1:bc:e1:ab:ae:7a:c1:44:46:93:55:ff:12:93:ed:92:ce:30:
75:9d:4f:3a:38:c9:62:2a:6d:e9:b3:5e:7f:6b:26:78:c1:1e:
3c:1c:48:da:07:b2:7b:69:0a:33:80:bd:6f:9d:c2:8a:fc:19:
51:d8:6b:b0:15:02:a4:42:4c:63:69:17:52:3b:87:05:b5:cb:
3b:9b:c5:e9:01:37:1e:29:60:8f:51:cc:85:d1:8b:6b:57:32:
eb:78:40:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:08:54 2026 by rpki-client