Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS30088.roa
File: AS30088.roa (raw, json)
Hash identifier: fi5h1XhSVP5bIlglUWEflB5z/S2ablziBGRj7yb+JBE=
Subject key identifier: F4:A5:24:54:2F:E9:AF:17:8E:C5:0F:6A:08:17:F4:50:5A:CE:15:DB
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 41F36E081A1E2E70022F605D6EBA16CF6E3CDCA0
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS30088.roa
Signing time: Mon 07 Sep 2026 09:16:46 +0000
ROA not before: Mon 07 Sep 2026 09:11:46 +0000
ROA not after: Mon 06 Sep 2027 09:16:46 +0000
asID: 30088
IP address blocks: 212.17.226.0/24 maxlen: 24
212.17.227.0/24 maxlen: 24
212.17.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Sep 2026 12:38:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:f3:6e:08:1a:1e:2e:70:02:2f:60:5d:6e:ba:16:cf:6e:3c:dc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 7 09:11:46 2026 GMT
Not After : Sep 6 09:16:46 2027 GMT
Subject: CN=F4A524542FE9AF178EC50F6A0817F4505ACE15DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ea:e2:2c:ac:47:55:82:03:e4:4f:fc:de:ec:
7f:65:45:0d:c6:28:6b:97:2e:93:3d:42:21:72:82:
b3:d2:8f:89:2c:75:b1:be:63:5b:74:2b:ee:3b:db:
6d:43:88:0c:f2:6c:c9:24:f8:60:dd:14:58:0b:3a:
83:5d:09:00:5c:ce:87:3d:fb:92:c1:22:a6:aa:c8:
20:78:2c:35:ea:cc:84:c0:7d:25:5b:96:2d:34:a6:
2b:61:43:9f:b7:ab:8e:11:9a:c1:3e:bf:bb:64:0d:
3c:62:01:1d:4d:78:57:80:13:a2:03:7c:66:36:10:
b8:04:bc:4c:0f:a0:c5:ed:b9:84:e2:67:65:b3:dd:
17:0d:e5:d2:b4:e1:af:31:16:e4:55:38:19:56:43:
e5:c2:86:d4:25:61:1f:36:83:ce:9b:27:e1:87:af:
7e:77:d3:c0:54:76:fb:82:91:5a:01:9e:69:32:a3:
7e:a4:62:20:09:99:6e:1e:1e:11:ea:c0:95:1c:87:
78:58:c7:bf:bc:00:fa:6b:8b:8f:8f:17:e4:70:c2:
4d:32:1e:cb:8b:fb:42:e8:87:5a:d5:e8:1c:39:dd:
38:e3:f7:b7:12:13:6f:71:b5:d5:59:9e:c4:9b:dd:
56:c4:6e:f9:72:ee:68:f6:f1:95:63:70:4d:e1:2d:
11:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A5:24:54:2F:E9:AF:17:8E:C5:0F:6A:08:17:F4:50:5A:CE:15:DB
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS30088.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.17.226.0/23
212.17.233.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:30:df:c2:0b:0d:08:e5:c1:45:06:8e:05:f0:7e:70:96:50:
89:30:c5:d8:68:eb:31:52:89:aa:04:bf:8d:fd:bf:59:e2:9f:
70:f1:88:56:5e:da:78:2e:d6:00:a6:46:1c:94:c8:8c:f4:50:
72:10:1c:83:ae:87:01:3e:28:d9:7e:2a:7d:41:3c:54:e8:f6:
c2:af:18:30:68:e1:d6:79:32:70:1e:bf:65:e0:34:e4:df:1f:
4d:e3:a7:b4:b6:fe:53:fd:1d:dc:ab:ba:b9:9e:a5:13:1a:63:
a6:47:a0:16:99:32:0b:71:e2:6c:3f:9d:a6:ba:d9:94:44:f7:
1b:f0:74:e1:5d:4c:d2:d1:73:25:e5:f5:8d:cc:8a:2f:82:77:
bb:d0:c1:93:82:54:89:38:9b:e0:8b:47:de:9d:c2:b3:b4:4b:
38:8a:53:1d:d9:20:53:59:3b:de:34:b9:b8:46:2a:b7:6d:38:
9e:4f:2c:e0:25:da:23:e7:b3:03:98:eb:69:bd:78:3c:81:54:
09:3b:22:e8:2e:5f:5c:37:e3:46:df:0f:d7:f1:78:0a:69:2b:
5b:5f:70:3b:d8:dd:ae:00:03:b1:06:ec:b7:c0:75:c6:9d:e9:
90:ee:2f:a6:e1:d5:9a:a6:d1:21:9c:2c:7c:06:4a:be:94:b3:
00:6a:84:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 7 19:46:37 2026 by rpki-client