Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS8881.roa
File: AS8881.roa (raw, json)
Hash identifier: cRCHDA8ZfMbTc1NfXUKkcHThdhvH+0XP1rp+yJ3ciNg=
Subject key identifier: 23:02:5B:EB:56:3E:20:5C:DB:75:7C:17:7A:1D:0E:07:2A:2C:9E:AB
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 57778ADFFA21B8C1DC5002F8892200A4F33EBB09
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS8881.roa
Signing time: Tue 25 Aug 2026 11:15:01 +0000
ROA not before: Tue 25 Aug 2026 11:10:01 +0000
ROA not after: Tue 24 Aug 2027 11:15:01 +0000
asID: 8881
IP address blocks: 191.96.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:77:8a:df:fa:21:b8:c1:dc:50:02:f8:89:22:00:a4:f3:3e:bb:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 25 11:10:01 2026 GMT
Not After : Aug 24 11:15:01 2027 GMT
Subject: CN=23025BEB563E205CDB757C177A1D0E072A2C9EAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:cc:29:a6:69:b3:c2:0b:5f:cf:07:dd:e8:d6:
87:e6:93:78:d9:4d:d8:0c:ed:6e:f9:11:d4:ec:79:
cb:de:0a:63:70:67:4e:5c:e3:73:91:1b:a3:f5:7a:
4c:1a:48:0a:b2:be:9d:da:12:10:cf:54:b1:34:9e:
98:37:b6:a4:e6:4d:ca:5c:81:06:4f:e0:c3:f2:82:
31:f5:92:a1:1d:5c:6b:00:3d:93:cf:44:47:90:b1:
33:85:df:a9:b1:79:e1:61:12:00:20:ae:28:c5:ff:
b5:d2:3e:92:54:fb:1f:39:fa:26:66:20:27:25:7a:
03:36:c4:2e:60:97:49:f2:25:c7:95:8c:05:54:2a:
89:24:29:f1:03:a3:e3:2e:14:5b:8a:dd:ad:3e:80:
7a:f3:ea:dc:e6:f1:cd:4c:47:60:77:da:4f:b6:3c:
41:5a:6e:2d:9f:06:e9:30:ee:c8:e1:6e:8d:5b:08:
74:2a:a7:8d:ec:70:eb:2c:67:d6:41:73:ef:95:15:
21:5a:b5:d4:eb:a2:f9:73:f7:bb:ca:05:1d:bb:fc:
56:1d:22:97:87:01:e3:7b:e8:80:6e:06:58:36:01:
ef:87:10:97:2c:0d:6e:63:ea:78:38:61:c6:37:b6:
12:dc:47:d5:fd:6e:38:19:ba:f8:be:4b:ce:5f:4e:
4e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:02:5B:EB:56:3E:20:5C:DB:75:7C:17:7A:1D:0E:07:2A:2C:9E:AB
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS8881.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.116.0/24
Signature Algorithm: sha256WithRSAEncryption
57:63:e2:d9:56:21:56:c5:6a:4c:a4:cf:9e:91:32:41:60:dc:
b3:a3:0b:9f:81:6d:2b:51:84:fd:75:82:9f:8c:b0:f6:f0:1f:
41:84:fb:ed:ce:f2:b0:c7:ea:43:d4:7f:17:35:41:17:fe:5c:
a9:ec:01:7d:64:cf:73:cc:52:c7:0e:95:d1:05:89:62:f9:3e:
af:23:b1:2e:39:0b:23:8e:2a:99:0c:32:e0:e9:63:af:1d:78:
4c:21:ae:9a:63:a5:a2:16:e8:6c:f5:a7:b7:91:ba:18:ab:b7:
56:40:fa:58:12:8a:bd:1c:f3:b1:d5:5a:19:d1:0c:41:16:16:
c9:c0:3c:6f:cc:df:db:2c:a6:5d:10:34:db:81:98:43:a6:b4:
c3:8c:7d:c5:da:24:d7:8b:d8:30:24:0f:62:70:e7:27:8a:b4:
2a:7d:cc:8b:33:a4:bd:ac:f5:0e:14:2a:9a:15:ab:ee:84:29:
68:2e:2c:10:0c:29:db:84:59:09:19:f5:0a:27:96:02:74:92:
31:5f:d8:56:9c:ec:e3:ef:f1:6c:79:27:88:b8:f1:73:e4:77:
c0:07:32:92:ad:cc:a6:81:38:7e:3e:17:a4:f5:7f:53:a1:54:
02:2f:5c:d0:ed:54:a3:9b:81:8c:51:c6:ba:bf:3e:e6:c4:ac:
98:f2:8d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 12:34:33 2026 by rpki-client