Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e31322e302f32322d3234203d3e203437353833.roa
File: 36322e37322e31322e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: YzNWddu+SgTKPoP1Y5ZVcd9M/KCI83pJca4DDRHvCN4=
Subject key identifier: 62:6A:D4:11:CB:8E:A6:A5:97:A5:7E:53:62:9D:5B:FF:F8:80:55:F6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 720D81C4C4A7C9E14D4C52BD5FD7992AA9D4BF7E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e31322e302f32322d3234203d3e203437353833.roa
Signing time: Thu 16 Apr 2026 11:23:43 +0000
ROA not before: Thu 16 Apr 2026 11:18:43 +0000
ROA not after: Thu 15 Apr 2027 11:23:43 +0000
asID: 47583
IP address blocks: 62.72.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:0d:81:c4:c4:a7:c9:e1:4d:4c:52:bd:5f:d7:99:2a:a9:d4:bf:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 16 11:18:43 2026 GMT
Not After : Apr 15 11:23:43 2027 GMT
Subject: CN=626AD411CB8EA6A597A57E53629D5BFFF88055F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b4:94:29:88:61:dc:73:3c:6d:4f:e6:32:81:
57:a3:28:34:0d:b1:4b:cf:35:2d:c5:91:0d:68:c1:
d7:56:99:29:f8:05:bd:77:41:e3:d4:55:b5:91:8f:
7b:46:6b:86:a2:c0:d6:02:7b:48:a6:d6:75:17:10:
d6:ce:35:c3:a5:ec:27:f2:d5:d9:b1:4c:ed:0f:a8:
da:b6:3d:b8:13:1d:82:c3:ac:16:b4:81:20:10:bd:
85:6b:04:f8:fb:93:48:3e:73:f4:2d:ff:f7:e9:6f:
cb:73:eb:ca:83:aa:12:54:e8:8f:34:d5:4d:76:e0:
9c:c8:4b:0c:f2:41:d1:32:74:41:ed:ab:81:d3:f4:
4d:43:b8:6a:2b:04:eb:9e:df:8b:34:4a:83:9b:24:
c0:6d:1e:69:43:39:60:b6:b2:4a:fd:7f:5c:59:34:
61:2c:fa:62:b7:26:f4:e5:51:f2:b9:0a:9a:af:2a:
9f:27:7b:cb:9f:88:37:76:40:f4:3c:88:ce:cb:3c:
d0:fe:b6:c2:69:f7:0d:85:76:f8:f8:ac:6e:63:91:
d3:40:8d:45:d1:09:f4:d5:dd:32:ef:aa:f9:f1:ef:
76:02:04:4c:24:b2:73:62:77:38:09:f2:77:69:2f:
d6:24:dd:18:ae:62:00:59:69:da:97:b8:82:d0:29:
fb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6A:D4:11:CB:8E:A6:A5:97:A5:7E:53:62:9D:5B:FF:F8:80:55:F6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e31322e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.12.0/22
Signature Algorithm: sha256WithRSAEncryption
05:34:23:dd:d8:88:b9:d8:df:78:7c:e7:cf:42:e3:2f:7f:ac:
67:66:d8:b9:60:7c:b3:38:30:c2:bb:e6:cd:6a:2e:00:4f:0b:
a7:0a:27:12:1a:ce:5e:36:70:a1:a8:40:67:5e:65:0d:98:2d:
c0:ee:0d:6d:38:7f:8f:a2:b1:76:a6:57:b4:18:62:b2:cc:c1:
9e:53:e4:6b:ac:a9:39:83:49:03:2a:02:50:0d:37:b8:16:bf:
d8:7f:98:a3:f5:39:3c:cf:e0:63:20:c0:a8:1f:8c:bf:5f:8a:
a3:8c:3e:b2:48:74:6e:0d:6a:e9:95:6a:be:4d:a1:63:0f:eb:
1a:86:ad:9f:f8:83:c3:52:71:92:0a:e0:93:88:e3:52:f5:ff:
a5:dd:56:10:84:0d:70:1d:9f:a7:f5:ab:9b:30:78:0f:7f:ba:
ae:d4:e0:39:ba:30:81:a9:b6:55:cc:ca:62:90:ba:ec:74:92:
c8:7b:ec:88:79:e1:00:ca:00:a1:56:f3:69:da:09:82:85:df:
c4:83:bc:ac:26:08:51:b6:64:b0:03:c9:e1:4d:8d:76:a6:3e:
d0:88:f3:b4:fa:3b:38:43:11:3a:b5:3f:4e:45:f3:56:fe:78:
94:aa:19:4b:72:f5:30:2f:69:2b:46:aa:d1:d2:92:35:00:9d:
50:48:11:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:16:12 2026 by rpki-client