Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS38136.roa
File: AS38136.roa (raw, json)
Hash identifier: hbs0wwp2Mh80O7/mXOYje75Svm/GCaPEb363F8xjiAw=
Subject key identifier: 3F:35:8C:59:EA:87:C1:DE:A5:E2:70:A2:17:DF:9F:70:53:A7:3E:D4
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2EC1FFDEDA8B1C1465DF5CB7EFFCB62C2C332FF7
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS38136.roa
Signing time: Tue 13 Oct 2026 09:49:36 +0000
ROA not before: Tue 13 Oct 2026 09:44:36 +0000
ROA not after: Tue 12 Oct 2027 09:49:36 +0000
asID: 38136
IP address blocks: 82.22.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 15:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:c1:ff:de:da:8b:1c:14:65:df:5c:b7:ef:fc:b6:2c:2c:33:2f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 13 09:44:36 2026 GMT
Not After : Oct 12 09:49:36 2027 GMT
Subject: CN=3F358C59EA87C1DEA5E270A217DF9F7053A73ED4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:30:c9:2c:73:a5:21:8f:c8:85:83:d0:0b:76:
a4:5d:74:c4:cf:51:2c:6f:31:63:10:a4:7c:8d:44:
27:0d:9d:ab:d3:fd:d4:89:b1:01:12:51:35:41:53:
c2:9d:7d:e4:da:6a:7a:10:85:d3:59:6a:69:61:e9:
1e:b4:94:b7:9a:dd:9f:35:ac:04:af:0a:86:ce:7b:
20:c9:75:54:9a:d4:20:47:ac:3a:79:88:58:ef:4e:
28:c5:48:e5:92:d4:05:23:3a:62:77:60:fb:e2:b5:
23:a2:2c:bb:ae:07:59:64:48:4e:9d:36:f2:a9:ae:
de:0e:08:95:cb:6c:ff:5c:70:53:3b:01:f8:14:0f:
ad:d4:51:b7:6d:d3:7e:9f:75:72:94:5f:3d:b8:f1:
e2:61:43:f0:3d:72:92:3f:27:11:9f:0e:28:63:f1:
9a:e9:e3:4c:77:5a:1a:8b:a0:61:86:fd:23:e7:f1:
7e:8d:c3:72:53:ea:10:c7:f9:e5:3f:d7:bf:16:17:
07:21:44:72:e7:59:a1:6f:d9:f1:ce:1c:39:e1:e8:
92:bc:56:85:0b:33:b7:21:66:fc:81:97:bf:9c:09:
36:ac:c2:62:d0:47:dc:0d:36:a6:3e:73:e6:ff:d5:
74:53:92:d3:84:22:f3:6f:53:60:19:9b:07:05:89:
18:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:35:8C:59:EA:87:C1:DE:A5:E2:70:A2:17:DF:9F:70:53:A7:3E:D4
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS38136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.30.0/23
Signature Algorithm: sha256WithRSAEncryption
75:07:89:40:07:47:63:05:29:f3:bf:e5:51:7c:b2:d1:41:3a:
7a:ec:99:51:05:02:e2:e7:51:60:f6:86:31:b9:63:8d:aa:12:
f2:94:30:95:fc:02:e6:f6:fe:60:a5:6a:18:ad:43:44:01:3d:
3f:32:3b:63:07:4b:c8:8c:76:9e:3c:bc:ac:23:b1:16:54:05:
44:3e:31:e7:1a:da:99:fc:2e:26:06:33:99:cd:1d:64:4c:8c:
f1:c3:1f:62:8b:56:6e:8b:a7:68:a3:06:48:f8:c2:29:04:12:
fd:25:1b:ca:fc:89:8b:c0:2c:8b:b8:6b:35:d8:ce:b3:2f:d5:
41:98:7e:92:24:df:05:d3:4f:bf:17:a1:9b:ad:99:12:05:91:
32:13:dd:54:5a:79:3b:e0:a4:20:9f:6b:e0:f1:b3:11:c9:4e:
79:f0:d2:91:69:29:93:d7:21:f7:2e:71:22:e5:c0:43:56:ec:
62:5c:3d:95:ce:b5:47:2b:13:3f:5e:f4:7e:d7:71:78:cc:83:
1d:ce:64:90:c7:63:07:15:bf:07:aa:0a:6e:a9:17:c4:53:39:
df:ba:fa:0b:56:1a:89:35:2f:aa:54:12:1b:f9:b2:2c:23:f8:
5e:e2:b6:4d:bc:28:28:7d:8b:59:3e:21:91:49:d6:0f:a0:c3:
9b:7c:64:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 02:44:06 2026 by rpki-client