Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e382e302f32322d3234203d3e203437353833.roa
File: 36322e37322e382e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: d2lrZhohLoMB4ezMyPeXS2+ejb+M5OaWchCItWObhx0=
Subject key identifier: 72:FD:B2:4E:8C:D6:7E:F9:28:80:9E:E4:55:28:3F:C3:B5:3B:E5:CF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 643D99DFAFDA7B1A06BB8F6657AE4C25066F0ABA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e382e302f32322d3234203d3e203437353833.roa
Signing time: Thu 16 Apr 2026 11:23:42 +0000
ROA not before: Thu 16 Apr 2026 11:18:42 +0000
ROA not after: Thu 15 Apr 2027 11:23:42 +0000
asID: 47583
IP address blocks: 62.72.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:3d:99:df:af:da:7b:1a:06:bb:8f:66:57:ae:4c:25:06:6f:0a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 16 11:18:42 2026 GMT
Not After : Apr 15 11:23:42 2027 GMT
Subject: CN=72FDB24E8CD67EF928809EE455283FC3B53BE5CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:30:4f:49:1b:ec:6f:38:7b:8e:a4:38:2b:d4:
73:8b:62:64:5a:eb:94:28:5f:63:34:a1:59:55:67:
5c:f6:a1:09:87:8e:77:74:fb:4b:13:84:fc:51:9a:
7a:f0:a0:50:7d:fd:b6:c3:23:97:f3:47:34:ca:84:
18:2d:f1:0d:d2:12:95:d2:3c:ce:90:c1:f4:bb:ea:
54:a8:b8:03:f3:51:41:de:1a:42:a2:13:3a:1b:fd:
45:f3:21:a1:6f:47:35:2c:7a:9e:f8:83:7f:1d:72:
a5:dd:6a:5e:6a:bb:9f:0e:62:15:53:9c:bd:d5:df:
5e:ad:94:ac:11:e0:91:52:4f:eb:20:9f:bf:59:c8:
b9:79:d6:b9:a1:90:32:f6:5a:16:a8:1f:e5:ab:b3:
fa:7a:41:a1:5c:3f:e3:6b:64:59:08:03:4b:ac:d2:
17:46:18:9d:14:00:93:70:0b:6e:7a:3f:38:90:8c:
86:6e:61:15:31:14:bf:15:65:f3:8b:55:f1:a6:20:
e4:36:88:94:4e:2f:af:56:3e:9b:2b:c9:f0:f5:76:
fd:0f:37:e7:75:32:09:48:74:6c:f2:2c:42:6b:70:
b5:73:88:4e:9e:b9:d1:11:0a:bf:9a:05:ff:51:35:
b5:2e:52:4f:ef:ab:87:91:b0:d2:31:d2:2f:24:ad:
b7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FD:B2:4E:8C:D6:7E:F9:28:80:9E:E4:55:28:3F:C3:B5:3B:E5:CF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e382e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.8.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:ae:7b:8f:84:07:7d:81:c5:ce:3e:bb:b4:89:f2:18:57:b6:
7e:2c:71:ce:fe:31:ac:38:fe:ef:af:36:9d:eb:14:96:bf:1a:
17:00:0a:68:04:f1:f0:1a:df:89:21:ca:0f:e8:1a:c6:ca:f2:
e1:0a:7a:4d:a7:8c:1e:02:b6:c1:7c:74:ce:4d:bc:74:b2:50:
ad:4c:2c:bb:05:52:86:de:34:21:78:0f:06:3f:87:39:08:88:
d7:c7:ce:02:4c:91:d3:f5:91:00:8b:35:06:b2:2d:0b:46:e0:
38:4b:f4:01:9a:b7:7f:84:dc:3e:a8:45:06:46:07:53:ac:68:
92:58:3e:ee:4a:c0:79:bd:41:05:44:cf:d3:98:5f:c6:f9:75:
81:44:94:92:0c:f3:c4:69:32:67:d4:0b:15:c6:c0:69:7b:ac:
7e:98:c9:4c:c0:84:71:f4:82:cd:86:62:70:65:13:6d:14:68:
86:71:3b:1b:d9:41:f9:99:47:85:61:6a:da:3a:25:37:5a:6f:
7a:7b:0f:1d:91:e4:f9:f1:d5:af:0c:ce:96:5b:d9:b6:0d:46:
a8:5c:57:7b:5c:a6:6c:61:c9:e0:25:9a:52:a3:18:c5:b4:aa:
2f:05:22:33:96:06:dd:8b:a8:cc:3a:15:ca:8d:27:5e:e9:82:
82:de:e7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:26:27 2026 by rpki-client