Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e32302e302f32322d3234203d3e203437353833.roa
File: 36322e37322e32302e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: RVBM1yO6fZbA8eAVaUqLQR4PhJuiEfDzV0QxGDA7wJE=
Subject key identifier: BD:A8:07:4F:73:57:E7:47:38:C2:F0:18:6B:4A:9F:E1:C0:81:40:CF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 012566430601CE0A1751B6A2CCC3A9E090787EF9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e32302e302f32322d3234203d3e203437353833.roa
Signing time: Thu 16 Apr 2026 11:23:41 +0000
ROA not before: Thu 16 Apr 2026 11:18:41 +0000
ROA not after: Thu 15 Apr 2027 11:23:41 +0000
asID: 47583
IP address blocks: 62.72.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:25:66:43:06:01:ce:0a:17:51:b6:a2:cc:c3:a9:e0:90:78:7e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 16 11:18:41 2026 GMT
Not After : Apr 15 11:23:41 2027 GMT
Subject: CN=BDA8074F7357E74738C2F0186B4A9FE1C08140CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b5:e4:be:30:bf:27:3f:ea:6e:a8:36:5c:12:
a4:f6:07:85:0c:7b:19:7d:ee:f2:c2:e3:65:59:f3:
b3:74:75:d3:b9:44:81:9c:9b:94:9d:45:5b:6a:21:
34:62:45:22:27:9b:a9:cd:80:70:53:dd:8e:17:fe:
06:60:cc:b6:09:fe:ff:3d:42:e5:73:82:09:2a:c1:
69:8c:94:53:ea:93:75:fc:f3:7c:da:34:98:85:61:
f6:98:72:35:59:d8:d3:f1:17:fb:72:8f:e1:76:30:
bf:0d:3a:be:2e:66:92:32:a4:2d:c4:39:59:f6:40:
11:73:fd:2a:35:dd:55:a7:56:9b:f1:f2:9f:ca:3a:
85:81:46:08:d7:bd:0f:bb:28:81:af:37:6c:f0:0a:
e4:8f:e6:f4:6f:b0:f5:76:53:78:db:9c:78:52:24:
cf:7d:b3:e3:69:ca:af:18:78:05:5f:3a:8c:5d:e1:
d9:07:fa:e1:52:98:f0:e5:6f:8b:7d:39:b9:57:e5:
02:66:61:41:ca:14:a8:09:c8:9d:99:2f:ef:dc:cb:
15:d2:9f:77:99:c1:c3:23:d9:a5:d8:e9:55:79:6d:
52:b7:4f:69:24:0a:44:7a:c4:56:af:ba:3a:34:53:
5c:e2:c6:0d:0f:8b:3a:0e:bd:a6:41:07:9f:d5:b8:
57:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A8:07:4F:73:57:E7:47:38:C2:F0:18:6B:4A:9F:E1:C0:81:40:CF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e32302e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.20.0/22
Signature Algorithm: sha256WithRSAEncryption
17:a8:e4:33:bf:e8:bb:a4:7e:1c:a4:83:0a:51:2b:09:89:b9:
5f:6e:4d:84:26:1b:09:30:e2:2f:a9:ea:b9:3b:c7:f1:61:4f:
60:de:06:2b:7c:c8:8c:35:a1:60:38:76:88:d5:e9:18:bc:d5:
04:22:a4:7b:1f:f8:90:18:cc:cc:91:32:d1:8f:f1:4c:44:c2:
e8:b5:0f:39:1f:c1:01:f8:23:62:4d:05:f4:94:ef:11:75:0c:
24:96:e4:21:77:f7:c1:ca:de:3e:be:c6:c1:7f:28:6c:8b:52:
78:59:9f:de:48:34:55:31:8f:68:56:8e:79:46:70:da:84:d8:
ae:e0:01:9d:ed:fd:f3:77:90:54:2a:a8:88:9d:7d:04:cc:5f:
35:80:19:df:92:e7:81:b4:ab:99:c7:65:ce:4c:09:33:a1:a5:
75:20:5d:3e:d1:2e:e8:e1:d1:c6:ee:bf:2f:a6:03:96:5d:99:
d8:8e:75:85:10:56:5f:f2:b3:e6:e6:dd:75:43:9f:b0:47:3a:
75:30:b0:30:d7:69:22:5e:5c:5d:bc:72:ac:41:bc:03:85:ce:
65:c7:36:6b:57:b1:62:9f:d8:94:9a:8e:bc:68:27:e6:6f:f1:
47:1c:c7:2f:c5:07:24:93:d4:42:b0:e7:20:1b:ec:66:08:88:
81:d2:6c:7f
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUASVmQwYBzgoXUbaizMOp4JB4fvkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA0MTYxMTE4NDFaFw0yNzA0MTUxMTIzNDFaMDMxMTAvBgNV
BAMTKEJEQTgwNzRGNzM1N0U3NDczOEMyRjAxODZCNEE5RkUxQzA4MTQwQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbteS+ML8nP+puqDZcEqT2B4UM
exl97vLC42VZ87N0ddO5RIGcm5SdRVtqITRiRSInm6nNgHBT3Y4X/gZgzLYJ/v89
QuVzggkqwWmMlFPqk3X883zaNJiFYfaYcjVZ2NPxF/tyj+F2ML8NOr4uZpIypC3E
OVn2QBFz/So13VWnVpvx8p/KOoWBRgjXvQ+7KIGvN2zwCuSP5vRvsPV2U3jbnHhS
JM99s+Npyq8YeAVfOoxd4dkH+uFSmPDlb4t9OblX5QJmYUHKFKgJyJ2ZL+/cyxXS
n3eZwcMj2aXY6VV5bVK3T2kkCkR6xFavujo0U1zixg0PizoOvaZBB5/VuFcLAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUvagHT3NX50c4wvAYa0qf4cCBQM8wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzYzMjJlMzczMjJlMzIzMDJl
MzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI+SBQw
DQYJKoZIhvcNAQELBQADggEBABeo5DO/6LukfhykgwpRKwmJuV9uTYQmGwkw4i+p
6rk7x/FhT2DeBit8yIw1oWA4dojV6Ri81QQipHsf+JAYzMyRMtGP8UxEwui1Dzkf
wQH4I2JNBfSU7xF1DCSW5CF398HK3j6+xsF/KGyLUnhZn95INFUxj2hWjnlGcNqE
2K7gAZ3t/fN3kFQqqIidfQTMXzWAGd+S54G0q5nHZc5MCTOhpXUgXT7RLujh0cbu
vy+mA5ZdmdiOdYUQVl/ys+bm3XVDn7BHOnUwsDDXaSJeXF28cqxBvAOFzmXHNmtX
sWKf2JSajrxoJ+Zv8Uccxy/FByST1EKw5yAb7GYIiIHSbH8=
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:52:24 2026 by rpki-client