Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/38362e3131302e3234332e302f32342d3234203d3e203239343035.roa
File: 38362e3131302e3234332e302f32342d3234203d3e203239343035.roa (raw, json)
Hash identifier: +f51ZZBf9NkOVMQhrwv8QxlQbFeYhMSfw/1KOCVjv/M=
Subject key identifier: 19:E3:C2:67:AE:88:3B:31:9B:4A:F1:BA:54:CB:C0:11:B3:62:C2:07
Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Certificate serial: 389D3AE25DB7CAB6DAC7C4237D895C719D96CDF5
Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/38362e3131302e3234332e302f32342d3234203d3e203239343035.roa
Signing time: Tue 08 Sep 2026 07:20:28 +0000
ROA not before: Tue 08 Sep 2026 07:15:28 +0000
ROA not after: Tue 07 Sep 2027 07:20:28 +0000
asID: 29405
IP address blocks: 86.110.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:9d:3a:e2:5d:b7:ca:b6:da:c7:c4:23:7d:89:5c:71:9d:96:cd:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Validity
Not Before: Sep 8 07:15:28 2026 GMT
Not After : Sep 7 07:20:28 2027 GMT
Subject: CN=19E3C267AE883B319B4AF1BA54CBC011B362C207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:da:f0:d7:45:54:6d:42:84:02:64:aa:3a:00:
5c:d5:c6:2e:aa:ef:23:80:d8:fd:91:7f:a5:85:eb:
7e:43:40:79:e2:4c:0f:cb:22:4b:f6:b6:31:5f:fa:
cf:a0:39:cc:1a:40:c8:71:e4:81:e7:9e:e5:c7:ba:
1e:a8:1e:ab:d9:17:2f:82:20:fa:a6:6e:0c:06:b0:
0a:3b:cd:b5:8e:4d:26:37:03:09:b9:08:4d:a9:44:
4b:58:9d:e9:86:d4:10:18:18:36:94:77:31:d1:d0:
28:ef:45:08:ee:e6:c5:48:5d:72:19:58:21:ad:22:
ee:e8:9c:39:76:ea:ae:24:50:e7:6b:83:ea:52:9c:
64:e4:ef:a5:31:35:59:f9:13:da:d0:3b:1d:e9:8d:
a3:a6:fa:02:f4:f6:c9:d6:63:9c:c6:15:7d:22:1c:
0d:af:47:68:1c:bf:e9:fe:a6:8e:40:d9:12:36:33:
7d:e9:8a:b1:e6:ac:fd:75:77:73:88:c3:8e:c6:4e:
7b:e9:9d:f2:69:5e:0f:d0:5c:61:2a:5c:e0:c3:88:
18:46:9f:f8:54:1c:1f:fd:c5:8a:de:6d:71:54:31:
e5:49:44:d0:8b:d0:6c:15:c8:09:7d:1c:cd:5f:95:
4f:45:80:7b:06:2a:fb:73:77:7f:9b:49:d5:fb:28:
2d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E3:C2:67:AE:88:3B:31:9B:4A:F1:BA:54:CB:C0:11:B3:62:C2:07
X509v3 Authority Key Identifier:
keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/38362e3131302e3234332e302f32342d3234203d3e203239343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.243.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ed:bb:98:e3:84:cf:f3:82:49:07:33:04:65:00:8c:65:35:
0a:25:7a:42:d6:3c:92:17:b3:ea:a8:c5:46:2e:42:3d:8f:57:
51:e0:6f:4a:c7:63:05:fb:99:0a:1c:8a:82:ac:fc:b2:96:4d:
71:52:b8:36:6a:46:c7:43:40:e0:88:2c:b2:6c:3a:83:0b:7d:
f4:e8:18:63:bc:00:96:77:a3:33:4e:d6:3d:4b:cc:18:7f:be:
0f:05:51:9a:a2:ab:07:9c:9a:a9:80:1c:36:5c:0a:8d:a0:02:
40:22:99:e2:ca:de:aa:98:aa:03:78:d1:6c:42:3e:81:1e:67:
cc:39:1e:fe:a5:18:02:4d:71:80:28:00:c4:a2:26:2d:dd:58:
a8:d0:1b:fe:bd:ab:da:66:90:ae:2e:3c:3d:33:29:50:52:b5:
9b:dd:80:cb:37:db:51:8e:19:22:3a:be:76:50:d6:8a:9d:4b:
9b:20:cb:54:1d:b8:fd:9e:57:47:d2:c3:d8:55:2c:bc:03:e7:
77:17:e5:62:43:16:c7:2c:c5:6c:bb:aa:e5:da:70:92:de:23:
c3:cd:10:94:d5:ad:0d:21:97:fe:ab:19:42:80:97:0b:b8:ad:
7e:8a:90:5d:af:9d:53:6b:c5:2b:4c:53:c1:41:77:8d:2f:4b:
58:76:12:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:03:13 2026 by rpki-client