Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS35200.roa
File: AS35200.roa (raw, json)
Hash identifier: qGxDEB2xNb5G4WznBvLveYKmNLki7NhLIUfvY2Et0AQ=
Subject key identifier: 0E:69:6A:A9:C3:EB:65:CB:9F:F2:3F:94:BE:E5:CC:7B:3F:9D:4D:C5
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 68EC33A60314A67780090B84AE5918D27B454CA5
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS35200.roa
Signing time: Thu 06 Aug 2026 15:08:25 +0000
ROA not before: Thu 06 Aug 2026 15:03:25 +0000
ROA not after: Thu 05 Aug 2027 15:08:25 +0000
asID: 35200
IP address blocks: 82.22.56.0/24 maxlen: 24
82.22.58.0/24 maxlen: 24
82.26.120.0/24 maxlen: 24
82.26.140.0/24 maxlen: 24
82.38.33.0/24 maxlen: 24
82.38.99.0/24 maxlen: 24
82.38.182.0/24 maxlen: 24
82.39.144.0/24 maxlen: 24
82.39.153.0/24 maxlen: 24
82.39.184.0/24 maxlen: 24
82.39.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:ec:33:a6:03:14:a6:77:80:09:0b:84:ae:59:18:d2:7b:45:4c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 6 15:03:25 2026 GMT
Not After : Aug 5 15:08:25 2027 GMT
Subject: CN=0E696AA9C3EB65CB9FF23F94BEE5CC7B3F9D4DC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:59:36:33:16:3f:39:cf:91:c4:5f:8a:f1:5a:
d2:40:b6:25:0f:e9:93:85:a5:95:54:65:8b:06:27:
c4:0e:fe:39:a1:72:7e:c2:79:3e:42:33:de:66:71:
d3:d7:a5:e7:09:78:85:89:47:4d:26:50:d5:79:17:
31:3d:b6:50:cd:3c:58:56:d2:7a:ce:af:07:50:3e:
49:67:a3:7e:e2:6c:2f:93:86:a2:b3:c8:2e:9b:d8:
de:f8:f1:fd:dc:ff:f3:91:12:b8:07:a1:60:c7:f7:
c7:f8:2d:47:0d:ce:67:5c:29:29:d8:9e:d5:77:3f:
dc:d6:87:43:28:3a:9f:6c:7a:67:f8:b5:25:dc:3a:
60:73:f1:4d:0d:49:2f:ed:53:f0:86:b0:b3:1e:87:
84:fd:b9:31:17:dd:0f:9c:69:af:6b:15:17:95:b8:
a2:e0:29:30:ab:45:0e:6a:1b:da:13:06:08:fe:78:
a3:c7:ab:22:3f:21:cb:28:d1:cd:71:54:bc:86:ed:
c5:b8:32:6f:68:45:c3:b2:7c:6e:13:af:8f:3c:27:
ab:f2:d6:2f:c6:74:3e:9a:7f:4a:48:09:f8:a7:f0:
21:bc:db:7a:12:b8:9f:72:de:09:9b:ff:fb:3e:67:
5c:34:db:bf:e9:a4:cd:4a:19:3f:ff:df:ff:87:76:
0b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:69:6A:A9:C3:EB:65:CB:9F:F2:3F:94:BE:E5:CC:7B:3F:9D:4D:C5
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS35200.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.56.0/24
82.22.58.0/24
82.26.120.0/24
82.26.140.0/24
82.38.33.0/24
82.38.99.0/24
82.38.182.0/24
82.39.144.0/24
82.39.153.0/24
82.39.184.0/24
82.39.204.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:97:ff:60:c2:c9:39:54:46:00:b4:44:db:66:e3:09:1a:23:
47:ff:81:b5:e5:a1:67:2c:9a:87:2c:11:db:b7:b5:a5:53:c9:
57:28:ca:ab:e9:6b:b3:d1:ce:b7:98:f0:78:ad:78:59:6c:c1:
63:2e:3c:ee:70:c0:c9:02:91:f0:67:fb:e1:f9:b3:e9:e2:50:
e2:c6:62:14:99:c2:a0:dd:d8:fa:1d:8f:75:50:94:5a:ca:16:
49:d5:56:05:91:3b:84:43:51:18:10:f8:51:2e:b5:df:b9:35:
68:1c:31:3c:78:41:09:43:ee:c3:31:db:71:00:3d:1b:06:f5:
27:07:02:51:61:c7:a5:88:2f:df:a5:65:52:2c:77:1f:ed:a4:
08:f8:de:eb:44:8b:2c:56:c8:77:b8:4d:b7:a6:8c:65:fa:2d:
9c:b5:2e:bf:7b:cb:3a:59:5a:47:59:8b:2a:93:c6:29:53:3f:
df:95:cc:2c:b7:b6:76:8c:05:20:1c:f3:e4:7e:89:9c:54:a6:
c0:0f:36:29:06:da:e1:4d:92:0b:41:92:a0:db:6e:ac:cc:51:
01:48:56:5a:bc:43:a6:1a:f9:ea:d3:80:55:3d:32:e7:17:d2:
1e:a6:97:65:d0:dc:95:75:d5:22:76:3e:9c:3c:3a:b4:62:a4:
12:34:40:4a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 26 23:09:48 2026 by rpki-client