Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS39351.roa
File: AS39351.roa (raw, json)
Hash identifier: KKFwR4PhZHGOjVs/vXv6sROKnSqqri0PbKbq/9CH0sw=
Subject key identifier: 06:34:FA:8A:51:21:E2:F6:39:0D:46:96:47:D3:F5:54:05:A4:80:3F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3C4B6CB07B0C2721FD3E0264DABDD9116BFA8158
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS39351.roa
Signing time: Thu 15 Oct 2026 11:49:37 +0000
ROA not before: Thu 15 Oct 2026 11:44:37 +0000
ROA not after: Thu 14 Oct 2027 11:49:37 +0000
asID: 39351
IP address blocks: 82.38.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:4b:6c:b0:7b:0c:27:21:fd:3e:02:64:da:bd:d9:11:6b:fa:81:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 15 11:44:37 2026 GMT
Not After : Oct 14 11:49:37 2027 GMT
Subject: CN=0634FA8A5121E2F6390D469647D3F55405A4803F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:93:a5:90:52:46:4d:f2:be:73:7b:55:55:9e:
22:88:8a:96:84:60:53:0c:29:a3:8a:cd:01:ce:75:
26:fa:20:a3:a0:fa:f4:46:89:3f:e3:e7:3b:63:81:
17:20:e1:03:a9:e6:12:e0:18:a9:0b:ac:4f:f5:6b:
88:17:9c:24:07:1b:30:f6:0d:ad:56:d3:9d:55:af:
0b:fa:6a:68:a1:33:c0:af:b5:c2:78:54:3e:4f:9b:
52:07:e4:48:a9:f2:df:54:84:e9:b2:f0:e7:92:1f:
d6:66:fd:1d:9a:96:0b:56:35:6b:22:a5:8a:00:d8:
59:42:c0:8d:bb:ec:b1:73:c8:4b:9f:5f:7e:a6:71:
44:0a:24:68:06:48:73:41:37:f3:39:9f:3a:d1:07:
1d:d5:3a:94:3b:c7:c9:b1:c5:39:a8:99:2b:cc:5c:
12:8a:1e:14:ad:e9:9d:76:0f:ff:c0:ee:00:05:78:
8f:23:b7:57:6a:e5:4b:0b:70:85:a4:e0:15:f2:1a:
9e:2c:4d:da:65:7d:11:f6:cb:35:c9:f6:15:c4:92:
72:a9:c5:28:3d:d9:62:98:9f:a4:c7:5a:03:92:56:
03:16:45:44:56:0b:a6:0c:4c:55:a2:e1:49:29:6c:
8b:18:cc:24:03:16:6e:cb:f1:63:ae:d2:6b:1b:90:
87:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:34:FA:8A:51:21:E2:F6:39:0D:46:96:47:D3:F5:54:05:A4:80:3F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS39351.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.1.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:0a:c6:86:2f:f8:1a:fd:e2:ad:d7:36:df:35:46:60:a8:99:
8a:1c:59:35:f1:30:71:f4:da:2e:ba:30:32:d1:51:d3:48:9a:
65:85:5a:97:59:b5:b7:a6:00:de:80:25:f6:05:74:e4:76:0f:
9c:a6:bb:71:13:9d:d3:6c:52:e2:1b:9d:23:a6:1b:6e:fe:9c:
91:cc:18:30:3a:27:b1:a3:47:f5:de:13:e2:1b:4d:15:5f:47:
83:d5:62:6f:7d:44:d3:52:c0:ed:21:81:56:e5:a9:37:1f:72:
a7:11:1c:b1:c1:f9:b4:2a:93:ae:21:7b:c1:b6:a2:cc:6c:13:
ce:9d:9f:a4:68:8f:37:16:d7:dc:1b:30:d4:9f:00:93:45:29:
1f:21:aa:31:7a:12:d0:f3:de:a1:2b:ea:d8:94:47:81:de:50:
7e:21:c1:72:9b:be:44:33:d0:5c:08:91:f5:1d:02:75:b5:87:
56:1b:49:1a:d3:73:22:34:af:b9:92:fc:71:35:f8:0b:84:ed:
38:82:b9:d8:8b:1f:e5:2a:88:20:fb:c6:1f:c6:ca:16:3d:ec:
95:84:db:fa:21:07:85:8d:43:12:27:34:de:6d:de:3e:be:a9:
7b:ea:db:0a:73:f2:49:b5:65:7a:82:90:85:d7:1c:b9:08:2b:
0c:f7:96:2f
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUPEtssHsMJyH9PgJk2r3ZEWv6gVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjEwMTUxMTQ0MzdaFw0yNzEwMTQxMTQ5MzdaMDMxMTAvBgNV
BAMTKDA2MzRGQThBNTEyMUUyRjYzOTBENDY5NjQ3RDNGNTU0MDVBNDgwM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQk6WQUkZN8r5ze1VVniKIipaE
YFMMKaOKzQHOdSb6IKOg+vRGiT/j5ztjgRcg4QOp5hLgGKkLrE/1a4gXnCQHGzD2
Da1W051Vrwv6amihM8CvtcJ4VD5Pm1IH5Eip8t9UhOmy8OeSH9Zm/R2algtWNWsi
pYoA2FlCwI277LFzyEufX36mcUQKJGgGSHNBN/M5nzrRBx3VOpQ7x8mxxTmomSvM
XBKKHhSt6Z12D//A7gAFeI8jt1dq5UsLcIWk4BXyGp4sTdplfRH2yzXJ9hXEknKp
xSg92WKYn6THWgOSVgMWRURWC6YMTFWi4UkpbIsYzCQDFm7L8WOu0msbkIc7AgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUBjT6ilEh4vY5DUaWR9P1VAWkgD8wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzkzNTEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABSJgEw
DQYJKoZIhvcNAQELBQADggEBABoKxoYv+Br94q3XNt81RmComYocWTXxMHH02i66
MDLRUdNImmWFWpdZtbemAN6AJfYFdOR2D5ymu3ETndNsUuIbnSOmG27+nJHMGDA6
J7GjR/XeE+IbTRVfR4PVYm99RNNSwO0hgVblqTcfcqcRHLHB+bQqk64he8G2osxs
E86dn6RojzcW19wbMNSfAJNFKR8hqjF6EtDz3qEr6tiUR4HeUH4hwXKbvkQz0FwI
kfUdAnW1h1YbSRrTcyI0r7mS/HE1+AuE7TiCudiLH+UqiCD7xh/GyhY97JWE2/oh
B4WNQxInNN5t3j6+qXvq2wpz8km1ZXqCkIXXHLkIKwz3li8=
-----END CERTIFICATE-----
Generated at Sat Oct 17 05:55:48 2026 by rpki-client