Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS35661.roa
File: AS35661.roa (raw, json)
Hash identifier: RJRMOlhu+Y0mD5sBYCvqoYh3P4e50anrA8hlSUOY7mI=
Subject key identifier: 8B:32:22:8F:D7:47:E6:EB:31:BA:24:9C:E0:6D:CC:81:A0:EA:38:2A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 112BB8003AE4D6301DC09F65C2DCF65D26E95931
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS35661.roa
Signing time: Thu 01 Oct 2026 19:29:08 +0000
ROA not before: Thu 01 Oct 2026 19:24:08 +0000
ROA not after: Thu 30 Sep 2027 19:29:08 +0000
asID: 35661
IP address blocks: 150.241.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:2b:b8:00:3a:e4:d6:30:1d:c0:9f:65:c2:dc:f6:5d:26:e9:59:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 1 19:24:08 2026 GMT
Not After : Sep 30 19:29:08 2027 GMT
Subject: CN=8B32228FD747E6EB31BA249CE06DCC81A0EA382A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e8:c6:04:32:63:66:ea:fd:4d:97:e3:bc:ce:
7b:75:98:2d:6d:4d:30:e3:d0:17:31:68:df:8b:b9:
99:a1:f5:8c:29:06:7c:e3:a7:27:41:cc:24:7c:77:
31:c2:bf:8e:15:b7:f0:d6:1f:96:c3:6c:bb:3e:bd:
13:93:a4:69:3a:dc:b2:c1:fb:3e:06:07:c3:23:99:
59:35:5c:08:3a:38:fb:6e:8c:17:e5:3e:e6:90:69:
ab:1b:89:7c:7c:b7:67:14:67:e9:6d:c1:e7:db:f7:
20:8d:44:4b:6b:9b:c1:e4:43:28:83:dd:39:22:e0:
d1:6b:28:1e:f0:d3:33:71:e8:2c:ba:83:e2:98:8d:
27:4f:d5:fc:1a:f9:2b:3f:1c:1e:76:58:41:0a:d5:
6d:7d:47:69:3e:f3:a8:7f:15:58:51:a9:98:df:2a:
31:49:9d:2b:6f:e5:cf:17:08:f3:5b:49:18:4b:fa:
18:be:0d:1b:f6:6f:dd:88:e3:7c:5e:46:96:f2:f7:
8d:4d:2d:1e:45:2f:f9:f5:95:a0:ba:12:bc:2d:67:
01:1a:b5:3f:0c:d5:41:8d:6b:25:ae:54:09:fe:78:
7a:18:9b:d3:d5:54:8e:f2:cc:63:19:92:1f:12:17:
03:25:22:93:87:ed:02:0f:00:46:ca:f3:cf:2a:e4:
f4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:32:22:8F:D7:47:E6:EB:31:BA:24:9C:E0:6D:CC:81:A0:EA:38:2A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS35661.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.243.0/24
Signature Algorithm: sha256WithRSAEncryption
96:f2:f1:54:58:4c:c5:2e:93:24:03:c2:49:86:dd:93:fb:3a:
e5:d8:7d:d9:5a:e1:62:80:3b:54:2b:3f:42:99:a7:54:fd:1a:
ed:89:48:3a:c3:15:c9:5b:67:40:8b:7f:ba:a8:0f:02:c2:3f:
60:8e:6e:66:c3:9c:c9:53:9f:38:ca:02:e9:df:8f:be:e9:e7:
70:8e:d1:87:1e:a1:68:5c:01:d8:90:ba:f2:2c:9b:13:11:a5:
0d:70:3f:54:28:15:13:52:eb:1a:2c:a2:78:18:a5:21:ed:cb:
00:d1:fd:3c:9d:33:b7:9d:1b:3d:f0:18:23:4e:bc:af:38:c4:
43:c8:55:93:86:b1:9b:1f:4e:85:f5:b4:59:32:34:f7:67:fb:
31:e1:3e:96:27:6d:f3:c8:d6:c4:79:bb:5c:5f:d9:39:79:74:
72:56:74:00:74:bd:04:39:c0:7b:39:1b:ca:4c:3b:41:50:78:
56:d2:93:7b:43:d7:92:dc:b9:fd:38:3a:55:e0:f0:ac:a9:96:
6c:3b:a3:41:56:bc:47:82:fc:1c:cb:ec:0a:7e:7d:af:c6:b9:
9b:ff:02:a0:20:a2:f9:f5:fc:7e:d4:d5:11:90:c7:55:ff:50:
c0:ce:8f:02:72:55:ad:b3:6a:c0:fd:34:ff:9a:56:06:a6:1a:
b0:65:d2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:30:43 2026 by rpki-client