Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS30088.roa
File: AS30088.roa (raw, json)
Hash identifier: NEgSRmv+lCVgMAL8EN1at2miep4YHowde0dZ46Uctms=
Subject key identifier: 90:94:6C:BB:DC:E9:1D:34:4B:43:1F:B0:7D:AF:87:F8:27:1B:A6:AE
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 29F22CCC14709D5A9F5C42E94F0DE299F2F1FC34
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS30088.roa
Signing time: Mon 07 Sep 2026 09:17:27 +0000
ROA not before: Mon 07 Sep 2026 09:12:27 +0000
ROA not after: Mon 06 Sep 2027 09:17:27 +0000
asID: 30088
IP address blocks: 155.117.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Sep 2026 11:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:f2:2c:cc:14:70:9d:5a:9f:5c:42:e9:4f:0d:e2:99:f2:f1:fc:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 7 09:12:27 2026 GMT
Not After : Sep 6 09:17:27 2027 GMT
Subject: CN=90946CBBDCE91D344B431FB07DAF87F8271BA6AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:89:c9:ab:01:2e:73:af:ea:70:81:af:7e:
ac:bc:24:ce:4e:cc:6b:00:b9:33:e8:17:23:28:66:
98:2d:59:f6:0d:68:f8:94:05:2b:df:96:d0:9c:37:
86:01:a3:bf:26:42:ed:5d:61:66:8c:6d:2c:c5:24:
c1:db:76:c0:a0:46:53:f7:b2:94:be:32:3b:7e:9e:
29:28:a7:4f:aa:9b:7c:6d:88:bc:09:22:93:6c:55:
6a:f7:0c:13:5f:ab:bf:92:6a:37:be:b6:3b:c0:63:
01:9b:2e:51:c9:f6:a1:19:52:16:f9:57:45:17:88:
88:4a:09:a7:1e:86:c3:28:62:43:14:d5:cd:b2:a9:
da:ac:8d:2b:61:9c:c4:5c:ef:06:03:fd:81:90:0b:
ee:5a:9b:9b:30:ea:41:14:44:58:8b:f9:35:ed:35:
d4:85:06:37:70:3a:46:34:ad:23:3f:15:6a:1f:d2:
80:20:4e:69:69:a1:6f:df:bf:42:e9:03:92:7c:a2:
7c:05:52:fa:16:83:3f:94:ec:ca:69:46:09:89:8e:
3d:59:1d:8b:6f:d7:b8:df:9d:5f:81:8f:ce:33:93:
15:88:6b:55:6b:77:62:95:60:48:fa:26:2f:ea:4b:
a8:5d:eb:6c:83:16:11:00:78:b4:98:90:35:f6:e9:
c1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:94:6C:BB:DC:E9:1D:34:4B:43:1F:B0:7D:AF:87:F8:27:1B:A6:AE
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS30088.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.245.0/24
Signature Algorithm: sha256WithRSAEncryption
07:04:7a:50:bc:3d:10:92:3a:72:14:90:8f:45:99:43:71:85:
2c:a9:f8:6b:74:d5:50:42:c6:a4:ef:5f:ed:42:52:03:ae:4b:
5d:1c:9a:f0:97:12:3f:47:d6:8a:87:25:d9:2b:0f:4e:fc:70:
07:ed:ab:0c:6e:77:b7:19:69:6c:98:9a:93:89:15:21:68:10:
08:0c:f7:c9:bd:75:6e:1e:a5:d0:53:44:23:d2:b5:4a:09:7c:
79:e3:93:de:5d:98:82:d8:9d:89:af:e9:cd:20:b9:e2:21:25:
b8:3b:95:5f:4e:d1:b3:c9:9c:e5:27:34:c3:5e:7c:b3:5e:0e:
43:d8:39:63:80:2d:44:2c:61:47:d2:a3:0f:6a:ab:9e:e7:e0:
e7:7d:19:08:ba:d1:eb:df:9d:55:3d:03:0c:a0:41:f1:95:2f:
c7:1c:1d:d3:b1:38:30:09:2f:92:e9:da:1b:0a:63:7a:53:65:
11:a4:06:3d:47:8e:d4:0c:a9:2d:a6:a9:8a:12:f3:a7:9c:ea:
97:d6:ee:c0:77:1b:97:05:b2:e8:c7:e5:64:ca:79:29:e6:54:
e3:02:ab:46:7f:06:5d:35:d3:42:1a:a9:de:7b:1a:0d:de:fc:
c5:96:be:15:0f:42:e5:b9:09:9a:76:1d:d5:67:5c:32:e3:3b:
98:ab:f2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 7 19:46:04 2026 by rpki-client