Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136352e302f32342d3234203d3e203137343937.roa
File: 36322e38342e3136352e302f32342d3234203d3e203137343937.roa (raw, json)
Hash identifier: q4sTs2iyIVfXDx0+YBSbo7EknZHqHW/jgcW5YPlUhYk=
Subject key identifier: 20:3B:D7:47:43:EC:09:DA:28:C6:3C:CB:11:80:50:AD:C4:91:C2:A7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4224B275A3ED3216B1BE66AE01C02FF53AF5FAA0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136352e302f32342d3234203d3e203137343937.roa
Signing time: Wed 01 Apr 2026 12:01:12 +0000
ROA not before: Wed 01 Apr 2026 11:56:12 +0000
ROA not after: Wed 31 Mar 2027 12:01:12 +0000
asID: 17497
IP address blocks: 62.84.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:24:b2:75:a3:ed:32:16:b1:be:66:ae:01:c0:2f:f5:3a:f5:fa:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 1 11:56:12 2026 GMT
Not After : Mar 31 12:01:12 2027 GMT
Subject: CN=203BD74743EC09DA28C63CCB118050ADC491C2A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a2:9c:f3:46:d8:90:f5:33:58:b7:f9:f1:88:
f6:6a:85:ce:38:5a:d0:a3:5c:a3:c4:50:3a:2c:57:
64:bc:ac:f9:a9:29:db:b4:48:c8:0a:86:a3:46:fc:
02:45:3b:b9:28:b7:7c:1e:05:a4:58:0c:0b:db:72:
95:6d:2d:f0:1b:82:42:79:38:47:4a:21:1f:91:cf:
28:c2:35:28:54:b1:4f:47:cc:67:ab:33:60:cb:d2:
38:42:1f:3c:2f:2d:cc:40:69:50:17:84:ac:a8:76:
4a:43:7f:4c:b8:74:50:2d:44:83:c0:9b:74:8c:36:
c1:42:78:c0:b1:a4:7c:53:ac:3b:a3:bb:f4:56:3b:
b4:b4:eb:ea:f9:d4:a5:4b:91:dc:61:76:4b:9d:18:
32:f2:77:ea:bb:21:41:8f:19:b3:f4:c1:5c:60:56:
fc:47:da:9f:06:4b:7d:ea:01:f5:bf:60:2a:a5:53:
ce:79:4c:a1:59:a3:27:27:28:dc:2b:aa:6b:b5:2c:
62:07:66:2a:e0:f3:d7:a9:0c:74:aa:5c:12:eb:9b:
01:55:bc:57:92:d2:e8:1b:47:d5:3c:39:78:74:df:
23:9f:fa:a7:d3:17:14:a5:75:f1:e5:d9:2e:98:44:
bf:e6:67:fc:4f:f9:b9:83:c1:99:7d:f9:c0:58:46:
f3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3B:D7:47:43:EC:09:DA:28:C6:3C:CB:11:80:50:AD:C4:91:C2:A7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136352e302f32342d3234203d3e203137343937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.165.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:a1:bf:c1:bf:1e:c2:3b:c6:5f:23:f5:45:a2:a6:ea:cb:b2:
18:ec:f5:2a:f0:4e:2b:28:2f:25:f4:b2:b3:57:a7:82:f6:e0:
19:8d:7e:51:5c:5e:81:07:54:8b:3a:ab:98:61:c2:80:8e:68:
bd:d3:3a:97:87:93:d7:1a:e7:ac:f5:4d:48:5f:d7:24:ea:22:
41:52:d5:30:c3:a6:28:66:6a:49:d1:45:b8:99:86:51:59:74:
05:75:59:4a:bc:f5:3a:c0:24:0e:6c:fd:bb:4a:dc:c2:8e:fb:
6f:f7:d8:40:37:4d:14:69:1a:a7:4b:c3:d6:bc:bc:ae:19:11:
ed:74:40:79:4f:b0:06:9f:bd:e3:26:8f:37:56:f9:74:7e:24:
79:83:43:60:f5:d8:54:c8:8d:56:ae:65:a3:52:ae:22:53:7d:
eb:8b:18:81:23:0f:d0:a9:fe:ec:19:c6:a7:de:bf:f7:46:c9:
75:f9:c6:2e:68:b2:fc:5d:82:3f:7a:a9:d4:c8:11:24:48:0a:
3a:44:91:0e:01:16:4a:db:d1:01:3d:f3:73:e1:a3:0c:f3:49:
2a:13:fe:77:4f:63:77:7d:02:91:8a:2b:4e:38:dc:fa:24:61:
b8:06:43:da:9f:35:75:90:c6:da:a5:26:57:60:9d:99:d4:b9:
ea:47:d2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:26:26 2026 by rpki-client