Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/38362e3131302e3232342e302f31392d3234203d3e203239343035.roa
File: 38362e3131302e3232342e302f31392d3234203d3e203239343035.roa (raw, json)
Hash identifier: b0zChgdz1vIMVhWdR5HGNfcD59h2BRuUdpFR8SjQgf4=
Subject key identifier: 90:6C:19:5C:7D:66:86:48:65:CF:90:B3:4E:FD:A1:D1:3E:57:AE:90
Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Certificate serial: 3517BBE9CF01CDF10BBD982F1B6D72A1AC617240
Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/38362e3131302e3232342e302f31392d3234203d3e203239343035.roa
Signing time: Tue 08 Sep 2026 07:20:32 +0000
ROA not before: Tue 08 Sep 2026 07:15:32 +0000
ROA not after: Tue 07 Sep 2027 07:20:32 +0000
asID: 29405
IP address blocks: 86.110.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:17:bb:e9:cf:01:cd:f1:0b:bd:98:2f:1b:6d:72:a1:ac:61:72:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Validity
Not Before: Sep 8 07:15:32 2026 GMT
Not After : Sep 7 07:20:32 2027 GMT
Subject: CN=906C195C7D66864865CF90B34EFDA1D13E57AE90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0e:ad:1a:33:d6:78:a0:4f:81:3d:55:0d:df:
c3:26:df:26:47:ec:8e:e5:a6:ec:32:59:36:8d:68:
5d:31:a7:b8:8d:90:7a:48:38:ca:0d:b4:2f:f1:20:
f1:df:79:24:e0:8c:99:ba:9a:8f:e4:2a:e1:b3:28:
66:e2:91:e9:36:97:e1:08:2d:af:16:44:38:cf:35:
5a:c7:d0:35:f8:47:8a:73:b1:e5:7c:59:76:40:b2:
c8:32:d2:62:0d:2f:9f:ed:65:75:a4:41:82:d9:ec:
50:a1:c1:6c:1e:b2:f1:09:6c:cc:69:90:2b:96:65:
9d:c2:0e:dc:c4:8b:89:16:9f:dc:3b:f9:8b:a5:bf:
3e:d6:5c:8f:48:2a:9f:f8:bc:3a:78:6f:db:ad:48:
8a:a3:da:94:2e:1d:b7:6c:0d:df:20:f7:92:77:88:
b4:9a:07:5f:9e:13:0e:5d:17:8b:6a:a0:b6:83:fd:
cc:3c:95:19:5a:e8:55:a9:1a:5f:fe:bc:fd:0d:9c:
4d:a8:7f:d8:16:6d:0c:6b:04:88:d3:75:d4:28:14:
04:54:13:b7:3b:96:c9:0b:c0:52:5c:3b:08:f7:00:
42:c8:d0:57:50:9e:7e:53:84:4d:c1:df:c8:46:da:
45:13:5b:b2:3f:5e:16:51:b8:fa:76:17:1a:38:c0:
9a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6C:19:5C:7D:66:86:48:65:CF:90:B3:4E:FD:A1:D1:3E:57:AE:90
X509v3 Authority Key Identifier:
keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/38362e3131302e3232342e302f31392d3234203d3e203239343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.224.0/19
Signature Algorithm: sha256WithRSAEncryption
7a:f5:67:79:f5:d0:a0:44:af:02:b4:a7:ce:ef:d5:26:a1:87:
10:84:ec:44:d8:89:ad:fe:c8:8f:61:99:d6:09:92:89:3b:65:
0f:1e:9a:5a:81:0d:10:c4:6a:5c:a1:49:e1:48:67:6e:c8:87:
8f:17:79:65:25:79:01:85:80:bc:28:9b:43:32:4d:ea:d7:53:
2d:05:58:6d:62:34:10:65:45:b7:b4:14:f1:4d:0f:33:c9:f8:
fa:70:01:92:36:21:c4:80:9f:46:6c:da:8f:a5:93:54:35:11:
50:ec:a3:78:a2:73:9d:5f:cc:52:db:2c:b9:9e:1e:ac:13:bb:
0e:3f:eb:bb:7d:7d:72:62:ae:b3:11:b1:1f:f1:2e:dd:ef:14:
0c:58:1f:9a:f1:ec:0f:ac:31:37:c8:7e:37:af:04:e3:47:6e:
83:12:9a:eb:5e:90:9e:8c:49:96:fd:36:a1:ab:9f:2d:51:fe:
b8:a2:8b:20:b7:7e:61:f9:ba:99:2e:b7:84:b5:ea:b5:9e:c5:
1c:d9:4a:21:db:b5:ef:60:3d:77:a8:32:6e:e1:60:18:d7:e2:
d7:ac:a9:06:b3:81:70:9d:bb:5c:11:aa:52:7a:47:29:66:f9:
6f:1d:2c:93:f2:07:e5:c8:f1:ef:91:c4:19:c7:63:63:37:33:
a7:43:5a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:24:29 2026 by rpki-client