Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/38362e3131302e3234382e302f32342d3234203d3e203239343035.roa
File: 38362e3131302e3234382e302f32342d3234203d3e203239343035.roa (raw, json)
Hash identifier: jkNhjwzhqphtd387aGK5KWwfcNq8xmY5Fe084eh7yWY=
Subject key identifier: 66:4D:D2:02:4E:AF:44:E5:8B:A1:AF:90:D2:C1:08:AD:38:F0:BF:7C
Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Certificate serial: 0FD76FD9D07B4F717290A8AD81E4B076311F6743
Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/38362e3131302e3234382e302f32342d3234203d3e203239343035.roa
Signing time: Tue 08 Sep 2026 07:20:31 +0000
ROA not before: Tue 08 Sep 2026 07:15:31 +0000
ROA not after: Tue 07 Sep 2027 07:20:31 +0000
asID: 29405
IP address blocks: 86.110.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:d7:6f:d9:d0:7b:4f:71:72:90:a8:ad:81:e4:b0:76:31:1f:67:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Validity
Not Before: Sep 8 07:15:31 2026 GMT
Not After : Sep 7 07:20:31 2027 GMT
Subject: CN=664DD2024EAF44E58BA1AF90D2C108AD38F0BF7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e0:e0:b1:68:2d:31:cf:fe:c5:7e:b7:2e:5f:
8d:01:5c:99:d3:c8:c5:27:db:ce:cb:f8:93:af:5e:
46:04:6a:9f:23:23:90:bc:8e:36:5d:50:4b:d4:90:
34:91:67:6b:17:ab:71:0f:1d:74:a0:37:d6:a2:d3:
7e:c0:fc:e9:4e:c6:72:1c:49:83:8b:6d:38:dc:7b:
10:39:ee:63:e6:40:36:04:f9:59:e9:60:e7:73:8c:
a3:85:a4:3d:39:78:5a:81:59:af:4a:40:b3:59:79:
79:c5:69:0e:83:6c:19:30:9f:4a:c7:f8:7f:5d:d6:
31:13:c3:22:86:2b:ef:9d:72:c6:2c:59:90:fc:b9:
a1:f8:50:af:f7:54:d0:f4:39:8d:3d:17:a0:44:6a:
36:bb:71:9e:21:c0:77:8e:9e:69:6a:50:46:fa:da:
f5:96:d1:41:65:cd:6b:0e:f3:7f:8d:4f:38:b4:6f:
d9:22:71:db:a1:ff:66:ca:55:05:f7:8a:33:2b:a4:
ff:a5:21:21:0f:31:91:79:26:b5:ff:13:8d:95:b1:
19:e3:14:e8:70:e9:c9:91:09:3c:d1:84:f8:9a:b7:
f5:b4:15:d5:75:ff:2f:01:58:24:73:b7:f6:90:ba:
9a:59:33:2e:9e:45:ce:a5:d1:06:44:2e:18:0f:2b:
94:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4D:D2:02:4E:AF:44:E5:8B:A1:AF:90:D2:C1:08:AD:38:F0:BF:7C
X509v3 Authority Key Identifier:
keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/38362e3131302e3234382e302f32342d3234203d3e203239343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.248.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:05:73:67:d1:1c:0b:12:0b:1c:55:78:b7:21:5c:45:a7:df:
4c:be:4f:4b:2b:de:79:fd:3f:3e:be:b3:b1:94:e1:67:ed:47:
32:af:a5:06:fa:5b:9a:8b:ac:28:8a:9a:40:e7:c9:9b:96:36:
2d:53:c5:db:43:df:5b:e2:04:4a:cb:35:a5:32:3b:c8:b6:25:
f7:e2:fe:53:77:06:77:74:77:3b:92:a2:eb:4a:25:90:bb:88:
e1:4d:e3:7d:14:0c:82:4a:e5:b8:8d:4a:f1:2c:56:90:70:83:
3b:a3:42:82:98:a8:84:b6:03:e4:3a:f8:37:fd:8b:3b:2a:ac:
c0:06:0e:f7:9b:2a:ec:ae:c0:9e:35:71:71:f0:ff:59:ad:d1:
e2:b6:9f:26:72:85:f8:8a:1b:e4:aa:30:86:ae:5c:84:88:18:
b6:ff:62:62:e5:cc:b2:f6:36:be:17:95:68:83:8d:22:39:58:
9c:89:69:4e:1b:f3:e1:51:8c:ca:c3:e0:83:25:d1:5d:6d:2e:
7e:e0:a3:d5:03:9f:0a:6e:7a:41:f0:f1:3b:7e:29:c6:03:35:
47:fc:e0:e9:e2:40:d3:da:c8:48:09:1f:d0:02:74:39:ec:e9:
55:ba:5b:4c:fc:82:8d:2d:44:b4:1d:06:5f:b4:d8:95:95:93:
2f:7a:d9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:00:55 2026 by rpki-client