Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137362e302f32302d3332203d3e203531313637.roa
File: 36322e38342e3137362e302f32302d3332203d3e203531313637.roa (raw, json)
Hash identifier: ffKk3jet/WpsYpab+wsOaO8XiSrLCNnYZ1RIqUiT9zE=
Subject key identifier: 6D:65:75:8F:A1:F0:F4:EA:1B:7B:0A:5E:36:19:55:F0:38:72:86:EF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4D70558499309F676EF1F1D64084209415AF6B2C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137362e302f32302d3332203d3e203531313637.roa
Signing time: Thu 30 Apr 2026 18:23:58 +0000
ROA not before: Thu 30 Apr 2026 18:18:58 +0000
ROA not after: Thu 29 Apr 2027 18:23:58 +0000
asID: 51167
IP address blocks: 62.84.176.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:70:55:84:99:30:9f:67:6e:f1:f1:d6:40:84:20:94:15:af:6b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 30 18:18:58 2026 GMT
Not After : Apr 29 18:23:58 2027 GMT
Subject: CN=6D65758FA1F0F4EA1B7B0A5E361955F0387286EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:09:fb:a7:a0:63:7a:b7:11:8b:d7:6e:91:e4:
b5:e4:34:16:3f:34:7b:47:6f:9e:d9:d2:41:3d:43:
7d:ae:4d:00:aa:a7:0a:c4:b7:46:c7:e4:5f:bd:a0:
17:7d:57:ea:36:fa:88:ce:4c:35:c3:18:b5:38:8e:
67:d6:6f:f6:94:c2:32:4b:85:b5:d3:d9:02:82:04:
96:07:aa:d8:7d:8b:c1:6a:26:06:16:ba:b0:83:32:
da:d0:f2:8d:7a:e3:85:d5:50:2b:0c:cc:fd:81:3c:
d3:a4:67:fc:f6:79:8a:4f:9c:64:c5:e4:64:4d:73:
b6:a0:f4:93:3b:c8:7b:dc:0e:e2:a3:15:bd:d6:f8:
89:62:1a:55:9d:07:e3:32:9f:9a:25:3f:89:58:c6:
3e:34:10:60:dd:3f:dc:8f:0d:9d:4a:f1:c5:df:08:
26:b2:dd:cf:d7:78:76:4c:c6:b2:c4:5b:d6:49:1d:
3d:59:e9:7e:2e:4c:2e:97:f7:8a:2f:77:58:4a:e5:
79:2f:70:da:b3:fa:30:57:f8:e2:8b:1a:ee:cf:d4:
31:3d:47:d7:71:46:23:18:46:3e:90:b1:79:94:99:
eb:d8:40:e2:6e:08:24:39:0b:69:ec:b5:91:18:dc:
94:85:e3:62:bd:31:c7:32:32:ee:67:76:1f:9b:49:
27:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:65:75:8F:A1:F0:F4:EA:1B:7B:0A:5E:36:19:55:F0:38:72:86:EF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137362e302f32302d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.176.0/20
Signature Algorithm: sha256WithRSAEncryption
68:4b:57:ec:66:89:c3:f5:b7:a2:d7:42:18:e6:ff:1b:3a:c0:
f1:a4:b4:b9:3d:d6:90:c1:09:03:b3:19:80:fc:95:27:3f:89:
54:d4:a4:09:87:ab:7c:5d:c4:47:d4:6f:e7:d5:4e:cd:2d:3c:
4f:4a:30:b2:d7:89:e7:91:85:7c:e6:59:29:68:0a:6b:4a:1a:
a5:44:f1:88:82:c9:d9:61:38:73:e5:b4:5c:6f:e2:c4:d0:04:
90:cc:cf:7b:ca:7c:97:68:f7:33:76:9d:80:0c:22:6e:2c:e3:
15:e4:ed:2a:73:ea:47:d4:9c:23:00:03:e7:a3:cd:d8:f4:0e:
9c:a5:2a:18:57:90:1c:4d:88:3e:39:a2:b7:44:f6:a1:94:8d:
23:67:63:b8:69:f7:18:b8:bf:62:36:a4:71:59:91:5c:cd:ba:
03:17:77:ec:ae:45:b2:d1:34:8c:ca:b8:60:45:51:1f:96:b3:
25:38:28:f4:0e:48:10:1c:f3:ae:2f:2f:db:ef:79:00:b6:f6:
c9:f7:34:9a:4f:d2:8e:28:db:cc:58:c4:11:c7:cb:8e:b1:ca:
2c:b2:c2:91:a3:9b:98:15:d5:5e:ea:3d:2a:2c:ba:48:e5:69:
f5:6e:68:23:f2:6d:43:de:0d:51:76:dc:a8:f9:14:92:58:94:
a6:75:50:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:26:40 2026 by rpki-client