Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e302e302f32312d3234203d3e203437353833.roa
File: 36322e37322e302e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: QMWCfnJMFlObVmtE7JPlHg+6rEAy6LtAN2DLexKqJv4=
Subject key identifier: 1C:2C:F4:24:BA:2A:AA:D7:84:42:0D:0E:08:40:E1:3D:50:13:78:98
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 786B99D96ABD8DD1F13F4BC647B4F9DBDF4088C0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e302e302f32312d3234203d3e203437353833.roa
Signing time: Thu 16 Apr 2026 11:23:42 +0000
ROA not before: Thu 16 Apr 2026 11:18:42 +0000
ROA not after: Thu 15 Apr 2027 11:23:42 +0000
asID: 47583
IP address blocks: 62.72.0.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:6b:99:d9:6a:bd:8d:d1:f1:3f:4b:c6:47:b4:f9:db:df:40:88:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 16 11:18:42 2026 GMT
Not After : Apr 15 11:23:42 2027 GMT
Subject: CN=1C2CF424BA2AAAD784420D0E0840E13D50137898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:55:c4:e0:73:e6:6a:b2:97:cc:f4:7a:21:9f:
fb:3f:02:42:e4:c4:1c:77:bf:52:07:94:8f:93:ea:
6e:bc:85:3b:c3:a9:e6:da:fe:05:a4:a6:8d:95:bb:
1c:b0:a1:6c:d9:97:a4:08:4d:7d:61:3e:46:f8:24:
44:08:ed:31:59:5a:25:b2:6a:32:4e:77:9c:69:95:
9c:b3:3b:fd:8f:e7:88:9b:84:aa:13:d9:3f:20:33:
50:ef:66:2c:39:da:3b:6a:43:c4:0a:43:bc:03:a4:
1b:a3:4b:b9:60:5a:68:db:32:a0:64:50:88:32:53:
53:7d:bd:bb:d6:6c:18:1d:32:80:e4:bf:18:4f:34:
68:58:45:06:96:88:ed:5a:d0:47:7a:98:2b:9b:13:
4d:99:b0:e7:32:fd:65:9d:8a:1a:f0:82:16:6b:b1:
8b:e7:c4:f4:42:64:e2:d7:2f:b0:45:3b:d9:ad:ce:
8c:e2:84:57:bc:13:e9:0a:1c:cf:7c:d5:0a:5b:2f:
27:e4:93:a1:79:11:3b:21:99:12:30:f8:1f:35:50:
cd:ae:1c:cf:fb:84:bc:96:e0:7f:16:11:48:19:f5:
01:37:99:53:b6:7e:60:37:69:63:ab:e8:4e:6e:91:
ad:fa:91:99:63:c3:94:cc:15:73:82:dc:41:2d:b9:
12:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2C:F4:24:BA:2A:AA:D7:84:42:0D:0E:08:40:E1:3D:50:13:78:98
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e302e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.0.0/21
Signature Algorithm: sha256WithRSAEncryption
8f:9a:78:40:4d:ba:5d:c0:56:51:4f:4e:17:e8:80:d1:6d:4c:
4c:26:e9:16:1d:e9:2d:c4:66:61:d6:83:46:87:79:6b:9d:c7:
95:bc:7d:6e:82:80:37:02:69:0b:e1:32:34:24:05:c6:f1:b8:
01:c3:f9:bf:b4:5b:6d:2b:1c:d8:cc:60:32:da:15:7b:e5:88:
c3:cd:47:0b:76:ce:a1:be:e9:24:e6:89:4b:87:1a:cd:1e:76:
f3:6f:30:01:d9:01:eb:54:2e:44:7a:80:ad:7c:b1:85:2d:19:
06:85:29:fb:d1:61:57:51:3f:83:57:35:1d:08:21:f2:af:e5:
2e:72:eb:1d:09:a4:1e:34:d6:aa:01:21:bc:43:80:8a:19:69:
1c:0a:3b:93:8a:13:e3:cc:05:c0:1e:f2:91:9b:aa:7a:58:f1:
67:a7:b8:1d:db:e8:49:f6:25:31:b1:ac:07:21:91:55:c9:c2:
55:68:95:0d:22:27:ae:c0:8e:e8:f1:18:64:bb:69:77:1a:59:
10:fe:cb:b6:10:eb:e1:aa:c9:06:fe:82:bb:34:66:f5:62:2e:
d8:3e:fe:0d:28:7d:47:4e:88:14:64:99:a1:a9:91:a1:ea:1e:
7a:46:13:e5:27:f0:8a:c9:98:a1:f7:52:38:0a:b9:e9:a9:9c:
5e:6c:64:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:33:35 2026 by rpki-client