Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e31362e302f32322d3234203d3e203437353833.roa
File: 36322e37322e31362e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: CNxA3WCMJiGf+n1IIU5XPOOgzEh8Q4E2ia4CbECuLcc=
Subject key identifier: 24:AE:E6:CD:C1:44:4C:9A:C2:37:96:55:B1:83:E6:00:92:9A:88:1B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 557D7766C0B86C410959131CEC6132BFB932C3E0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e31362e302f32322d3234203d3e203437353833.roa
Signing time: Thu 16 Apr 2026 11:23:42 +0000
ROA not before: Thu 16 Apr 2026 11:18:42 +0000
ROA not after: Thu 15 Apr 2027 11:23:42 +0000
asID: 47583
IP address blocks: 62.72.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:7d:77:66:c0:b8:6c:41:09:59:13:1c:ec:61:32:bf:b9:32:c3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 16 11:18:42 2026 GMT
Not After : Apr 15 11:23:42 2027 GMT
Subject: CN=24AEE6CDC1444C9AC2379655B183E600929A881B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:27:bd:8f:24:0e:2f:57:ff:49:f6:d2:f6:94:
fb:b4:91:56:b0:02:87:db:c9:f3:db:e2:f9:b4:18:
a2:9c:e9:97:4a:00:04:b6:88:12:d5:18:3c:3c:1d:
f1:88:ee:2f:11:ff:eb:cd:44:83:18:fd:f5:49:fb:
26:eb:e4:24:f6:3a:2a:9e:d6:25:b3:1a:da:2b:14:
f2:9c:da:da:5a:38:b9:fb:d7:71:ac:cd:e7:d5:3e:
db:b9:fc:02:67:e7:50:d9:fd:e5:ed:22:82:1e:ef:
55:dc:1e:45:45:10:2c:14:02:75:66:85:43:8f:3b:
b6:25:14:ce:c0:3f:e8:f5:95:6b:e3:96:bc:18:6f:
49:b1:0d:05:2d:58:3e:45:c3:f1:6c:87:95:e8:cb:
c3:b7:f9:0e:5d:c0:3f:4d:8b:7f:80:64:df:31:56:
6d:40:4d:59:23:d9:e5:b3:16:0e:75:37:fe:49:5a:
30:52:51:aa:3f:ca:87:e3:d7:54:c2:76:8a:a5:68:
ad:f2:38:75:f5:75:6f:de:d1:48:c6:f7:98:ee:de:
e1:99:b1:03:c1:a7:ce:04:c0:14:ca:4d:a4:ab:7c:
cd:ed:7d:a4:4e:1b:ba:43:27:39:09:81:40:c1:fb:
6f:cb:6b:67:d2:5a:3d:60:11:e5:6e:68:c8:4b:03:
64:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AE:E6:CD:C1:44:4C:9A:C2:37:96:55:B1:83:E6:00:92:9A:88:1B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e31362e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.16.0/22
Signature Algorithm: sha256WithRSAEncryption
53:d7:af:11:78:53:79:c9:b5:c6:1a:de:88:23:07:d1:ac:58:
c8:43:ec:fa:87:92:11:d3:2b:01:47:3b:7d:0c:c0:f0:39:63:
3e:97:87:ef:1f:9d:68:6f:90:8b:e3:9d:44:e6:0a:19:ed:15:
ca:b7:bf:41:55:33:cf:d1:ab:0a:f6:77:05:f0:7e:92:b0:2c:
05:27:af:a7:72:cf:c5:77:26:1e:88:0c:8b:e9:f2:15:bf:1d:
93:96:5c:2a:1a:96:2e:37:a9:35:4e:ba:94:1e:51:b1:df:6c:
94:3a:e5:81:eb:a9:bd:0f:1b:5e:43:c9:d3:95:98:2e:fe:9f:
86:14:15:42:7e:3c:bf:0d:1c:da:c5:7e:6a:6f:cd:db:ef:85:
b9:cc:7a:61:32:e4:ac:f9:36:d9:d8:ea:9b:6f:9e:b5:a7:2a:
f3:72:12:4f:4a:51:ec:13:39:7d:21:1c:f2:eb:7a:2a:2a:df:
81:74:92:37:2e:11:74:9d:d6:07:1e:0e:77:ae:5a:59:50:d0:
7d:ba:81:e5:04:ec:18:bd:4b:92:cb:6e:82:b4:9a:da:25:03:
4e:84:89:ee:d4:ba:dd:a6:35:3c:5f:11:5b:30:66:d9:01:ed:
d1:fc:b0:47:f4:2c:b3:7c:db:2d:ca:82:a8:93:80:e7:8b:33:
f3:8f:5c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:44 2026 by rpki-client