Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136332e302f32342d3234203d3e20393834.roa
File: 36322e38342e3136332e302f32342d3234203d3e20393834.roa (raw, json)
Hash identifier: 3ixzDRmSYaJe2PkNXV5cdQU+rrbQBK94tYTLmlemN/I=
Subject key identifier: 72:30:85:F9:57:26:0F:27:34:5C:49:3E:F2:5B:AA:76:6F:5A:1C:E6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6E2C2021835E25787EC0CDD76795CE824B0F0555
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136332e302f32342d3234203d3e20393834.roa
Signing time: Thu 05 Feb 2026 19:28:32 +0000
ROA not before: Thu 05 Feb 2026 19:23:32 +0000
ROA not after: Thu 04 Feb 2027 19:28:32 +0000
asID: 984
IP address blocks: 62.84.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:2c:20:21:83:5e:25:78:7e:c0:cd:d7:67:95:ce:82:4b:0f:05:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 5 19:23:32 2026 GMT
Not After : Feb 4 19:28:32 2027 GMT
Subject: CN=723085F957260F27345C493EF25BAA766F5A1CE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:af:7f:2b:f0:8c:99:f0:77:89:e2:f3:13:c0:
99:60:4e:47:8b:34:17:ee:10:53:99:80:6e:a4:45:
d7:0d:ad:7a:81:06:17:fa:07:6d:b7:6e:35:5d:fd:
af:d6:33:70:2c:7a:b4:e1:ac:92:7f:4a:7e:48:d3:
3a:66:41:87:9b:49:4d:d0:05:00:0f:21:05:36:30:
f9:b0:98:7f:76:7a:d8:0e:27:e4:ad:26:6b:44:40:
62:a9:f7:44:6e:9e:99:48:6b:a0:56:9b:c2:bf:11:
67:7c:1c:a5:60:7c:70:eb:95:d1:19:aa:16:40:4d:
85:2a:5e:a6:c2:ae:02:1c:3b:b8:42:66:d9:42:8a:
f1:62:0b:90:e0:b6:08:50:a1:25:65:81:06:cd:bd:
06:69:33:b9:cd:f8:c4:af:0a:d7:47:37:03:3f:2f:
14:8c:26:cf:a2:ed:31:85:ff:18:10:d5:32:f2:4a:
48:79:78:ed:f1:0a:8e:43:47:8c:02:ea:c9:e5:25:
d4:05:a1:07:9f:7f:85:81:30:84:6f:e8:c8:df:c6:
63:32:d5:dc:8f:24:ce:4e:c4:4e:aa:0b:f0:37:4a:
9a:bd:9f:b3:76:d5:9e:59:0c:60:5d:a1:96:c8:77:
f0:0c:ad:45:86:8a:cd:23:6d:8c:e4:ae:e9:31:01:
17:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:30:85:F9:57:26:0F:27:34:5C:49:3E:F2:5B:AA:76:6F:5A:1C:E6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136332e302f32342d3234203d3e20393834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.163.0/24
Signature Algorithm: sha256WithRSAEncryption
31:39:c2:c1:83:46:5d:02:06:b1:be:92:5b:2c:c5:18:5c:af:
6f:a7:af:15:48:3c:77:00:c5:da:08:55:68:b1:b7:28:17:ea:
44:bf:b0:82:e9:bc:7a:ad:97:55:74:7c:3c:27:cd:86:41:81:
e1:13:8e:67:d5:f1:85:d4:a9:2c:e3:a0:4e:48:e2:2c:36:3d:
e2:58:c9:fe:ac:ec:07:14:9d:84:b7:87:c0:06:ad:db:c8:6b:
64:e3:86:56:5d:c5:a0:d9:c9:62:a2:bb:22:46:ad:95:e6:b7:
86:66:a4:eb:a4:ec:69:e3:46:80:c3:3a:8e:f3:61:f9:23:1f:
45:17:3b:ff:59:5b:77:46:c2:9a:3f:40:af:bd:b4:cc:4c:26:
ee:61:72:a0:12:20:3a:e1:ce:88:e4:cc:06:c9:35:5a:a7:0c:
2f:2a:50:4d:3a:cf:76:1a:5d:55:e4:39:5e:9b:b6:15:55:d1:
3f:ac:3a:93:ea:c1:ad:55:5e:d4:02:f6:5a:0b:51:98:e7:52:
74:88:cc:ad:74:1f:bd:a2:4d:ae:36:29:fc:1a:3d:64:2e:0b:
9e:35:dd:64:f4:d9:94:ff:bb:1a:18:74:c3:26:4f:25:51:3f:
96:71:4a:61:c6:ea:71:6d:52:cd:f7:51:88:ca:bc:74:3a:a9:
3c:23:78:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:20:20 2026 by rpki-client