Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136312e302f32342d3234203d3e2039333034.roa
File: 36322e38342e3136312e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: EQ53t7rpK28mBemxuxjGeuiVAYg6tm9BOwmQC2UpXik=
Subject key identifier: 57:7D:D5:D9:ED:9C:0F:F8:71:1C:35:62:69:B7:A6:CB:91:1D:D7:97
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0FC5CB65FE10A0F3A267599D3CC55CB3F01CFFB4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136312e302f32342d3234203d3e2039333034.roa
Signing time: Wed 09 Sep 2026 18:19:32 +0000
ROA not before: Wed 09 Sep 2026 18:14:32 +0000
ROA not after: Wed 08 Sep 2027 18:19:32 +0000
asID: 9304
IP address blocks: 62.84.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:c5:cb:65:fe:10:a0:f3:a2:67:59:9d:3c:c5:5c:b3:f0:1c:ff:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 9 18:14:32 2026 GMT
Not After : Sep 8 18:19:32 2027 GMT
Subject: CN=577DD5D9ED9C0FF8711C356269B7A6CB911DD797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1e:ac:04:5e:c2:7f:6d:c2:ee:dd:a2:a6:f8:
02:2e:00:a6:30:cf:7f:df:c3:88:94:cd:12:83:94:
4d:64:e7:52:ba:c9:af:53:91:b1:29:d8:a2:43:9c:
64:70:20:72:ff:13:07:c8:06:a2:5f:30:e2:ce:d7:
97:a6:20:ef:f1:dd:91:f8:a7:17:7a:b6:ec:51:7e:
fa:a6:cd:0d:12:7b:cb:69:32:04:e6:7c:9a:b4:54:
c4:47:82:7a:a1:cd:14:59:05:40:8b:b6:c8:5c:ac:
9e:6e:6c:c9:ee:a4:61:9d:75:24:50:eb:e2:c6:0d:
f0:ba:cc:c3:6b:0f:ff:02:20:f1:85:8d:73:09:ab:
ff:e1:29:28:15:fa:97:b0:7b:6b:96:8d:99:e1:23:
83:2f:d4:77:3f:ec:49:ea:b3:82:d5:2d:44:16:0a:
9f:be:5e:c9:77:d1:55:1d:1d:87:3d:8a:0e:5d:cc:
3b:88:69:6d:2d:d5:94:58:31:b8:b4:44:06:b6:d9:
43:07:4f:b5:80:5d:39:e7:e6:be:1f:13:ae:c3:45:
fe:25:5b:0f:a5:c0:3c:8b:89:84:7d:98:21:d3:aa:
aa:3a:4a:c9:8b:a0:a3:93:fb:f0:b1:fa:81:2a:e1:
dd:d4:c3:d3:1e:a0:ce:2a:14:a3:da:55:5c:fe:18:
41:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7D:D5:D9:ED:9C:0F:F8:71:1C:35:62:69:B7:A6:CB:91:1D:D7:97
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136312e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.161.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:23:a6:61:ce:74:ec:f4:90:f8:ba:a1:71:3c:b6:5b:b8:d3:
95:2b:b4:9f:29:db:f3:89:22:70:73:15:38:f4:66:69:b3:bd:
42:61:a3:66:5c:0e:98:1a:f7:c2:65:a4:15:18:5e:fa:3a:55:
b3:ce:8b:cd:f4:86:73:b4:87:de:3a:e6:42:16:f9:16:f6:d6:
74:b8:ba:28:74:09:e0:e9:cf:9b:3d:62:3b:6a:2d:d9:94:6c:
5c:80:d4:be:ee:56:90:7e:6a:5b:af:1f:e1:8c:c7:30:af:52:
10:c0:18:7a:d3:2d:a6:b3:9d:e9:f1:3d:cf:16:4a:5a:74:b9:
b7:49:a0:45:ee:fd:86:85:3b:ce:12:5c:45:9c:1b:40:76:30:
57:d2:53:1e:36:05:fa:a0:0d:37:4e:66:d9:35:c1:4d:02:53:
87:45:ee:2a:2f:04:44:e6:c7:de:12:7a:d8:cf:a5:5d:80:ab:
23:be:3e:47:46:66:1d:d7:36:e7:23:4f:bf:14:39:e7:ea:dc:
8c:3c:1a:37:f2:2d:82:31:61:ef:4f:3d:84:e5:2c:89:a6:0e:
f8:63:fd:be:ca:e0:34:cb:8f:18:71:d4:57:95:7f:0c:6e:c4:
fa:e5:ca:a9:6b:5e:72:02:ef:4e:3b:e2:48:3b:49:75:13:2d:
12:58:58:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:29:46 2026 by rpki-client