Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS30088.roa
File: AS30088.roa (raw, json)
Hash identifier: 1IJyKlTiTM7mLdyKcEuaKwUcUecO+/KbZvx6JO461ZQ=
Subject key identifier: D9:32:16:59:4B:89:8C:04:60:A2:A9:3B:EC:A3:5B:02:AE:65:91:41
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 5A17E302061DEB5A1F1698BFD264A34BE3AAAB60
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS30088.roa
Signing time: Mon 07 Sep 2026 09:17:01 +0000
ROA not before: Mon 07 Sep 2026 09:12:01 +0000
ROA not after: Mon 06 Sep 2027 09:17:01 +0000
asID: 30088
IP address blocks: 181.41.196.0/24 maxlen: 24
181.215.88.0/24 maxlen: 24
181.215.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Sep 2026 15:10:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:17:e3:02:06:1d:eb:5a:1f:16:98:bf:d2:64:a3:4b:e3:aa:ab:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 7 09:12:01 2026 GMT
Not After : Sep 6 09:17:01 2027 GMT
Subject: CN=D93216594B898C0460A2A93BECA35B02AE659141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c6:94:de:57:ce:5f:aa:65:5a:41:55:76:5e:
1a:a1:47:85:2e:d8:d3:22:69:9a:6b:6c:73:65:bc:
1f:5e:6d:94:1f:95:d9:5e:4b:78:09:8a:67:1c:1c:
7e:66:8a:7b:bf:fa:76:f7:e4:51:65:5d:60:c6:60:
de:21:07:4b:19:78:90:b8:a4:62:6f:8d:15:4f:d5:
87:41:12:8b:c4:5c:b6:e7:c1:07:29:d7:d1:36:17:
1c:54:c3:ad:b1:7b:a1:96:a4:17:bb:49:46:22:68:
39:b0:e9:89:de:0f:1a:76:7d:49:1b:8a:fa:3b:c8:
88:67:c5:51:f9:96:fd:ef:ec:e8:82:bc:7d:2f:ba:
ed:7f:a1:4c:a5:ab:8b:86:1a:42:3e:5e:6a:9c:fd:
d2:51:a9:24:75:92:5a:4b:87:51:7b:62:e0:15:1e:
11:8d:24:6a:d7:80:6b:33:63:ea:9f:0a:a0:c4:fe:
42:fb:cf:32:62:4f:f8:45:18:ed:dd:04:5e:65:71:
ed:6c:11:84:ef:8c:68:94:42:53:0c:a0:1c:8e:21:
3e:89:9b:8b:ba:c2:66:62:bb:4b:87:04:ff:2b:8c:
ca:c7:71:f9:48:b0:9d:46:5b:92:3b:8f:33:82:bc:
c4:cc:c6:83:fe:5f:0c:0a:3a:8d:e1:4e:87:29:74:
c8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:32:16:59:4B:89:8C:04:60:A2:A9:3B:EC:A3:5B:02:AE:65:91:41
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS30088.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.196.0/24
181.215.88.0/24
181.215.114.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:09:e0:1f:08:aa:2e:9b:0e:17:5b:b1:3c:b3:d6:40:3a:c0:
2b:80:f3:66:53:d7:77:88:43:1f:c4:de:a3:ff:f0:64:7b:f0:
7a:ef:ef:7e:00:b2:fb:e8:62:6f:ab:de:af:10:c0:58:20:ef:
14:10:aa:c0:98:79:29:b4:47:bd:a3:eb:53:59:c6:08:43:45:
82:8c:e4:fd:20:6b:07:05:39:69:da:87:82:e8:d3:94:8d:89:
e9:ce:cf:84:17:37:f5:6c:90:b4:68:27:59:cc:b3:3e:f2:7e:
62:06:46:f8:a8:eb:5c:29:68:69:58:64:c3:39:f2:3f:5e:1c:
b7:ec:dd:3d:e2:31:f1:14:b7:9a:4e:74:aa:e1:23:2c:a4:c5:
fd:7b:24:7d:06:df:4a:72:79:35:1b:bd:3e:20:86:99:43:42:
9a:53:2a:d6:59:82:07:66:9c:35:0b:2e:06:0c:5d:1e:96:9f:
04:77:ab:4a:3f:33:f4:f4:c7:c1:00:54:28:6c:56:dd:5a:6f:
6e:b4:0c:c0:d6:fe:50:14:5f:ec:4b:4a:81:10:d1:39:df:91:
de:7a:34:91:08:26:de:98:7c:9b:15:55:fe:47:e2:eb:fe:f0:
a8:17:6b:1f:6c:44:db:7f:a0:3c:50:ab:39:ab:c1:b0:43:12:
db:0e:d8:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 7 19:46:39 2026 by rpki-client