Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137322e302f32342d3234203d3e20323134363737.roa
File: 36322e38342e3137322e302f32342d3234203d3e20323134363737.roa (raw, json)
Hash identifier: gTsR6Fr3nGhtpap8REfufn/jeAAZ1yVIupnzTi0s8JQ=
Subject key identifier: AE:E6:11:A8:15:15:03:94:5C:58:68:02:BD:E2:A6:2C:93:CD:FA:86
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1A26F13465B49A086F518985FFE994146F531614
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137322e302f32342d3234203d3e20323134363737.roa
Signing time: Thu 16 Apr 2026 16:23:44 +0000
ROA not before: Thu 16 Apr 2026 16:18:44 +0000
ROA not after: Thu 15 Apr 2027 16:23:44 +0000
asID: 214677
IP address blocks: 62.84.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:26:f1:34:65:b4:9a:08:6f:51:89:85:ff:e9:94:14:6f:53:16:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 16 16:18:44 2026 GMT
Not After : Apr 15 16:23:44 2027 GMT
Subject: CN=AEE611A8151503945C586802BDE2A62C93CDFA86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fe:4b:95:d8:14:dd:ff:3c:42:9e:8d:71:4f:
d1:6f:db:b9:aa:bc:33:b4:28:e0:e5:a8:db:a1:06:
b9:90:65:a3:5c:6f:13:67:8d:2a:8b:ee:c8:4f:0a:
4a:e9:6f:6b:70:70:0d:ae:74:30:40:b8:5c:b6:85:
c8:e4:10:b1:c3:d1:8c:67:12:24:a1:50:69:43:46:
9e:32:9d:10:d3:60:14:6e:2e:0d:4e:a5:d2:52:1f:
9f:9b:30:b5:d1:8c:2a:40:ec:ce:24:4d:b1:c5:12:
c2:15:54:7b:32:9a:e1:44:fa:c3:68:bc:e1:4a:4c:
cb:db:fb:02:c3:37:bf:ef:b9:c7:2e:af:60:53:ec:
6b:b9:07:fc:d9:e8:6e:48:4f:90:1d:dd:08:c4:b8:
8a:e4:04:c5:45:e9:7a:a3:3d:f8:d3:9e:3f:68:f8:
16:53:81:9f:b9:a2:a5:38:7e:b7:8a:32:b4:99:ec:
cf:57:68:40:2d:35:0b:64:02:50:af:7d:16:ab:ec:
df:a7:a0:20:40:68:7f:57:4b:c5:7c:f2:1d:78:f5:
3b:ef:c2:99:bf:ec:af:d3:20:94:04:98:56:c7:e4:
14:a0:02:05:69:73:57:47:2e:d6:5d:54:e4:b1:6f:
23:42:a3:8e:dd:ff:ed:9c:47:61:6d:71:98:b2:d7:
8d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E6:11:A8:15:15:03:94:5C:58:68:02:BD:E2:A6:2C:93:CD:FA:86
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137322e302f32342d3234203d3e20323134363737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.172.0/24
Signature Algorithm: sha256WithRSAEncryption
75:7c:70:ca:a1:0f:13:88:a5:3d:f8:c7:35:ff:24:12:68:dd:
84:e8:da:a0:81:2c:a1:87:11:1f:ae:01:06:0c:cf:10:8a:2e:
49:41:35:f5:bc:2b:31:1b:ff:d7:f8:5d:4f:b4:b9:b7:f4:f2:
fe:93:a4:96:a8:b4:97:f9:1f:19:9a:91:a0:a3:9f:fd:2a:d8:
ce:57:48:71:b4:9d:e8:03:ab:54:2a:da:1b:15:d5:44:21:2a:
d4:71:0e:54:6d:70:70:e1:d9:3c:4f:38:b0:64:03:09:c1:20:
aa:1c:aa:dd:e4:cf:80:a1:2a:d7:07:1e:b5:db:b4:c3:f6:9c:
4e:8a:64:57:57:38:60:85:e5:93:b9:6f:aa:57:df:2b:18:77:
11:6e:a4:e1:0d:d2:f7:f1:fb:f2:07:f5:01:fe:b2:91:d2:42:
39:d3:a7:85:89:45:51:08:ff:51:12:b4:9e:da:28:b2:0c:5e:
52:99:6e:d1:26:35:7b:d8:95:90:d7:bc:0b:b4:b6:55:ee:41:
bb:3e:a9:ca:91:f5:bf:58:5a:01:a3:b9:8f:45:e6:df:c0:a5:
f1:ee:b3:9b:44:22:41:82:e9:0b:52:d0:3b:5f:7e:b3:d6:5b:
48:92:40:3f:20:0e:dd:27:e9:b4:22:95:3c:db:95:16:95:3c:
cd:7c:6a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:25:26 2026 by rpki-client