Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e332e392e302f32342d3234203d3e20323031333431.roa
File: 36322e332e392e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: 8SGgvvf+j/01WFUcJJWJud/5pUlOYDtwdFFZlJ9/cQQ=
Subject key identifier: 81:44:E1:80:18:FA:10:73:A1:90:1F:43:FA:F5:65:1C:7F:8C:A7:9C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 278474D3BFE06CCC79519CA2EACA57B35ECED255
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e332e392e302f32342d3234203d3e20323031333431.roa
Signing time: Thu 04 Jun 2026 13:24:51 +0000
ROA not before: Thu 04 Jun 2026 13:19:51 +0000
ROA not after: Thu 03 Jun 2027 13:24:51 +0000
asID: 201341
IP address blocks: 62.3.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:84:74:d3:bf:e0:6c:cc:79:51:9c:a2:ea:ca:57:b3:5e:ce:d2:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 4 13:19:51 2026 GMT
Not After : Jun 3 13:24:51 2027 GMT
Subject: CN=8144E18018FA1073A1901F43FAF5651C7F8CA79C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:03:97:04:af:04:b7:ab:07:e0:e8:15:78:c5:
ea:57:03:b9:6e:38:f1:41:eb:35:96:51:eb:2e:5d:
11:ef:17:e8:c6:e7:d5:0f:de:6c:35:0e:73:57:b4:
34:f2:5c:e8:ee:67:ec:28:d8:d3:03:a8:c7:7a:16:
a9:b9:72:15:8e:3b:0d:3e:87:04:06:e6:f3:a8:82:
51:3c:de:47:fe:55:83:3f:1d:b8:b5:f0:41:bc:7e:
2d:75:61:15:b4:61:b9:6e:05:cf:bc:62:72:b3:23:
bf:63:40:d5:4d:bf:ed:6e:07:0b:f1:c1:fc:a7:87:
f1:49:91:49:be:e2:b9:7d:26:64:f3:7c:e8:36:eb:
84:35:6c:56:ad:88:ad:ba:25:a4:20:9f:47:26:62:
8a:ce:66:da:11:88:e6:99:df:f6:47:7e:d2:e2:ad:
3f:cd:1e:d3:97:06:79:f1:92:cf:35:e0:2c:33:dc:
2c:52:e8:cb:8c:ea:c7:ef:37:95:d5:c1:0d:88:03:
8c:0d:25:ea:94:19:96:fd:34:a8:54:2f:a2:21:0c:
8d:62:c7:29:28:7e:76:bd:dc:21:97:ff:6b:78:27:
63:87:84:fb:78:f5:4c:37:c3:43:7e:30:57:0c:2a:
5c:8a:49:c0:06:89:24:eb:54:bf:4b:a2:7b:26:21:
e3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:44:E1:80:18:FA:10:73:A1:90:1F:43:FA:F5:65:1C:7F:8C:A7:9C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e332e392e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.9.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:72:33:49:51:f3:6c:e8:50:68:88:52:15:f1:c6:f4:6c:0c:
df:ea:66:f4:8d:8f:ed:5b:8d:b0:82:01:89:41:b6:7b:e5:de:
af:30:a6:62:98:34:ca:32:22:a3:b1:67:af:eb:05:61:8e:15:
1c:f1:9c:4c:4a:50:5b:cf:9a:76:38:eb:fe:c1:a3:6e:83:cd:
de:91:9c:5d:dd:39:ae:0c:14:51:69:50:16:5e:e1:bd:20:1b:
1d:1c:27:b8:99:25:25:1f:0d:58:43:d6:de:28:aa:3c:9d:59:
59:f2:ad:c5:ff:e7:47:d1:37:76:61:e1:1a:8f:89:aa:32:e0:
f2:9d:d1:36:92:30:12:18:08:41:0f:7b:63:a9:5d:42:fd:89:
a1:11:99:1a:e8:22:b0:3f:e3:39:cb:64:f1:1b:65:60:69:c4:
2b:9d:49:93:7b:64:7d:d2:55:57:fd:73:a6:60:b0:b5:1a:d1:
09:8e:59:a4:ac:27:36:6e:49:99:68:f4:39:72:c6:f7:c4:58:
f7:30:b4:61:7d:e3:c3:07:d1:ad:e6:6a:49:e1:eb:fc:93:32:
ce:50:61:83:cc:e0:7f:f7:36:4f:45:59:88:4e:48:22:b3:b0:
6f:36:a7:f7:d6:a3:11:1c:d2:43:f3:e7:2f:be:ff:e8:36:12:
64:2c:22:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:22:38 2026 by rpki-client