Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS35200.roa
File: AS35200.roa (raw, json)
Hash identifier: /CKKZIFT2xW4SVf6f9Qk4z8z6Z1Ffe4sspZ4b3aoGX8=
Subject key identifier: 63:AB:D6:BE:1C:DE:8D:B5:23:59:E9:76:76:73:74:CF:C8:C2:BC:43
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 70EF305EF04F0053BB6857879C3A93E8BF83C986
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS35200.roa
Signing time: Thu 06 Aug 2026 15:08:00 +0000
ROA not before: Thu 06 Aug 2026 15:03:00 +0000
ROA not after: Thu 05 Aug 2027 15:08:00 +0000
asID: 35200
IP address blocks: 179.61.181.0/24 maxlen: 24
181.215.25.0/24 maxlen: 24
181.215.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:ef:30:5e:f0:4f:00:53:bb:68:57:87:9c:3a:93:e8:bf:83:c9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 6 15:03:00 2026 GMT
Not After : Aug 5 15:08:00 2027 GMT
Subject: CN=63ABD6BE1CDE8DB52359E976767374CFC8C2BC43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ff:88:db:a5:6c:c2:38:c6:1d:a9:84:c8:43:
d6:8a:c8:90:ec:de:4c:03:6c:5e:23:8b:d8:fb:29:
e9:4c:24:aa:51:f0:a7:e4:f2:53:0f:1d:36:75:99:
48:15:d2:f8:0f:e3:87:35:ef:ad:6a:5d:d8:42:98:
75:d2:c3:37:41:88:bb:be:25:e2:50:21:7b:32:15:
7b:19:9c:59:e1:9c:76:a3:6c:40:12:eb:96:f5:d7:
e8:69:f7:91:99:e6:c3:59:e6:2b:4e:9b:3e:98:bd:
f6:0b:8e:a9:05:e8:c3:f2:a9:04:38:46:4b:56:b1:
48:e2:d5:41:87:31:c9:57:ce:dc:b7:49:e4:5a:04:
89:9c:4a:45:ac:54:de:b0:a0:cc:93:94:b9:00:05:
68:30:49:93:b4:d8:b6:93:07:1b:7c:db:fc:84:ee:
1a:5f:3b:5a:b7:5b:d4:e7:ac:38:7e:ea:35:c5:f4:
01:a5:b2:e9:c3:97:1c:1b:35:d9:d6:34:2d:f1:b8:
13:99:9e:f7:e2:b5:9f:f5:6d:0c:24:04:96:a8:70:
91:c3:28:fe:05:53:19:a3:7a:bb:52:f2:af:f4:ac:
3c:b3:cb:70:76:bb:16:f8:32:26:80:5e:db:31:09:
83:71:3e:58:58:d7:10:23:b0:d5:cf:b1:39:50:90:
a9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AB:D6:BE:1C:DE:8D:B5:23:59:E9:76:76:73:74:CF:C8:C2:BC:43
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS35200.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.181.0/24
181.215.25.0/24
181.215.140.0/24
Signature Algorithm: sha256WithRSAEncryption
64:fc:45:3a:5e:f3:ad:88:ca:06:11:38:4b:5a:af:a4:a0:da:
12:96:3f:96:13:de:0b:9c:96:13:11:50:c5:73:ba:21:84:64:
a1:a8:61:ba:19:c9:29:a3:7e:eb:03:46:db:7c:33:78:fb:16:
80:e1:5e:50:b7:eb:27:86:6c:b8:18:00:d1:b7:72:00:e1:8a:
5d:7c:f2:33:d9:e9:80:f0:e9:b4:29:ac:23:50:00:2c:8f:58:
6b:4e:aa:a8:f5:e3:df:a3:11:7f:ce:3b:a9:ce:a2:39:e6:15:
c6:08:2f:eb:1b:1a:eb:e6:e3:5c:8b:6b:ae:49:d3:88:ec:88:
f2:d5:8c:15:5d:6a:15:e6:4f:29:56:34:aa:77:5a:21:e4:48:
3a:7a:77:29:6a:96:07:5e:c3:3f:30:3e:04:ed:ad:87:b3:9e:
b6:e2:99:10:e2:fe:0d:13:cd:a5:59:67:cc:ad:ce:fa:32:3d:
6c:83:45:20:e3:d2:db:68:09:02:3a:de:41:2f:66:a3:f2:3c:
fd:80:ea:be:ce:57:fc:7d:71:a4:09:17:b1:46:a2:1d:51:14:
2b:29:09:c0:24:bb:01:5d:8a:47:cd:a8:66:bb:a7:79:ad:32:
cc:03:2b:23:53:41:37:81:97:ca:4a:d6:c7:0b:60:98:2e:52:
3b:3b:de:91
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 26 18:12:33 2026 by rpki-client