Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/38362e3131302e3234312e302f32342d3234203d3e203239343035.roa
File: 38362e3131302e3234312e302f32342d3234203d3e203239343035.roa (raw, json)
Hash identifier: psnZte3+Q299US8D2WamKfH/o+Xxqk26yh9SNQ4KUJw=
Subject key identifier: 71:34:C0:AC:EB:FA:88:DB:4B:0E:E2:89:4F:24:3A:31:FC:B0:DF:AC
Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Certificate serial: 7BC1D0A83EDD981A95E3FD599391B0A06369A4A0
Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/38362e3131302e3234312e302f32342d3234203d3e203239343035.roa
Signing time: Tue 08 Sep 2026 07:20:32 +0000
ROA not before: Tue 08 Sep 2026 07:15:32 +0000
ROA not after: Tue 07 Sep 2027 07:20:32 +0000
asID: 29405
IP address blocks: 86.110.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:c1:d0:a8:3e:dd:98:1a:95:e3:fd:59:93:91:b0:a0:63:69:a4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Validity
Not Before: Sep 8 07:15:32 2026 GMT
Not After : Sep 7 07:20:32 2027 GMT
Subject: CN=7134C0ACEBFA88DB4B0EE2894F243A31FCB0DFAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b0:1a:f2:2e:8d:18:1c:61:4a:f8:1e:ab:51:
20:94:70:42:a5:4d:30:8f:dd:12:35:d5:1b:57:7f:
3f:94:22:05:3d:76:ef:2d:43:16:66:13:e2:83:85:
90:ae:86:15:8d:d2:4f:16:4f:f7:f5:bd:47:a3:1b:
78:00:46:6c:9b:d1:22:07:04:41:61:d1:25:ed:02:
7a:39:fb:ef:b9:d4:fc:82:f3:e6:92:89:7b:c6:34:
f2:b0:8d:30:11:e2:da:82:df:af:69:96:59:fe:cc:
b2:51:76:54:28:99:c5:f6:a4:eb:c5:9d:c6:56:a0:
39:61:cf:66:4b:61:50:a3:79:87:90:99:e4:af:aa:
c1:7c:cf:16:00:38:5e:c6:5a:61:64:25:06:b6:58:
9f:e4:79:6b:54:07:5f:01:be:9f:27:70:2b:f6:99:
13:18:4b:cd:7b:07:4d:fe:c4:ba:06:ca:2f:73:ea:
f5:57:e7:6d:88:a5:cc:3f:e0:61:43:4e:22:0d:cd:
c5:51:0d:12:27:8b:28:48:78:b4:0a:cd:d4:2a:99:
71:2f:21:ec:f3:55:a3:0e:98:3f:19:49:66:bd:60:
cd:69:6e:32:08:2b:86:8c:40:cf:35:1a:b9:86:71:
71:db:14:5a:bc:d6:1a:ff:8b:33:ba:0f:0e:db:71:
bd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:34:C0:AC:EB:FA:88:DB:4B:0E:E2:89:4F:24:3A:31:FC:B0:DF:AC
X509v3 Authority Key Identifier:
keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/38362e3131302e3234312e302f32342d3234203d3e203239343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.241.0/24
Signature Algorithm: sha256WithRSAEncryption
93:d4:13:68:60:18:01:59:b6:39:07:5a:a1:bc:83:ea:d2:02:
3f:b2:92:ed:3d:84:70:3b:f5:66:fa:41:86:96:a4:3b:75:0a:
84:f4:f8:1a:60:45:7d:b0:46:7a:3f:9b:30:05:c0:70:61:b9:
b1:74:1d:9c:99:db:22:e8:aa:c2:1e:f9:3a:dc:30:da:59:dc:
34:42:f6:cf:18:28:30:d5:8b:d1:83:aa:a5:94:74:d5:3a:93:
c3:b9:e5:e6:0f:0f:78:37:8e:8a:49:70:ac:2a:e1:29:ac:20:
a6:a6:11:13:67:f4:42:ad:bb:4c:84:68:04:d7:da:14:d8:ca:
ae:14:21:e1:a6:59:2c:1a:e1:c2:53:62:5c:f1:03:c2:84:01:
77:b1:c0:32:29:48:4d:52:68:db:c8:1a:03:92:cb:7d:2f:30:
2a:d2:fe:48:9d:e1:d9:48:a8:ec:79:b7:11:47:a4:87:d1:31:
73:f3:04:2e:24:76:c6:07:fe:32:aa:28:39:68:5a:3a:12:2d:
45:42:cd:91:51:45:38:9c:7c:5a:48:ce:08:a7:22:35:d1:15:
58:b2:5b:2d:8d:ae:91:24:82:d8:7f:99:da:86:19:84:f6:71:
d2:46:a8:c1:2b:8f:6e:20:83:5f:a6:3a:34:fc:cd:b6:9e:10:
01:c9:bc:8c
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUe8HQqD7dmBqV4/1Zk5GwoGNppKAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWMwY2UzZTZhOWRiY2ZhMjUxZTU2ZTUwMDJlYzRiYmJj
YjA1Yjg2NjAeFw0yNjA5MDgwNzE1MzJaFw0yNzA5MDcwNzIwMzJaMDMxMTAvBgNV
BAMTKDcxMzRDMEFDRUJGQTg4REI0QjBFRTI4OTRGMjQzQTMxRkNCMERGQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNsBryLo0YHGFK+B6rUSCUcEKl
TTCP3RI11RtXfz+UIgU9du8tQxZmE+KDhZCuhhWN0k8WT/f1vUejG3gARmyb0SIH
BEFh0SXtAno5+++51PyC8+aSiXvGNPKwjTAR4tqC369plln+zLJRdlQomcX2pOvF
ncZWoDlhz2ZLYVCjeYeQmeSvqsF8zxYAOF7GWmFkJQa2WJ/keWtUB18Bvp8ncCv2
mRMYS817B03+xLoGyi9z6vVX522Ipcw/4GFDTiINzcVRDRIniyhIeLQKzdQqmXEv
IezzVaMOmD8ZSWa9YM1pbjIIK4aMQM81GrmGcXHbFFq81hr/izO6Dw7bcb15AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUcTTArOv6iNtLDuKJTyQ6Mfyw36wwHwYDVR0j
BBgwFoAUrAzj5qnbz6JR5W5QAuxLu8sFuGYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzVhMGVmZjItYjQ1Yy00MjlmLTkwMDEtMjM0MWQ0NmI2
M2UwLzAvQUMwQ0UzRTZBOURCQ0ZBMjUxRTU2RTUwMDJFQzRCQkJDQjA1Qjg2Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JBemo1cW5iejZKUjVXNVFBdXhMdThz
RnVHWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzVhMGVmZjIt
YjQ1Yy00MjlmLTkwMDEtMjM0MWQ0NmI2M2UwLzAvMzgzNjJlMzEzMTMwMmUzMjM0
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM5MzQzMDM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
Vm7xMA0GCSqGSIb3DQEBCwUAA4IBAQCT1BNoYBgBWbY5B1qhvIPq0gI/spLtPYRw
O/Vm+kGGlqQ7dQqE9PgaYEV9sEZ6P5swBcBwYbmxdB2cmdsi6KrCHvk63DDaWdw0
QvbPGCgw1YvRg6qllHTVOpPDueXmDw94N46KSXCsKuEprCCmphETZ/RCrbtMhGgE
19oU2MquFCHhplksGuHCU2Jc8QPChAF3scAyKUhNUmjbyBoDkst9LzAq0v5IneHZ
SKjsebcRR6SH0TFz8wQuJHbGB/4yqig5aFo6Ei1FQs2RUUU4nHxaSM4IpyI10RVY
slstja6RJILYf5nahhmE9nHSRqjBK49uIINfpjo0/M22nhABybyM
-----END CERTIFICATE-----
Generated at Thu Sep 10 13:03:07 2026 by rpki-client