Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS35661.roa
File: AS35661.roa (raw, json)
Hash identifier: L8b2aoOL2baOZwVSx8g6reIV+DfBTyGJD0dS8KfP82g=
Subject key identifier: B3:53:F1:2E:EF:43:ED:0B:FB:49:7C:D1:CD:5F:F7:F1:04:35:D3:84
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2279DF9177E725B226684D534E2D8523ADCE0C62
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS35661.roa
Signing time: Sun 18 Oct 2026 05:52:56 +0000
ROA not before: Sun 18 Oct 2026 05:47:56 +0000
ROA not after: Sun 17 Oct 2027 05:52:56 +0000
asID: 35661
IP address blocks: 84.75.12.0/22 maxlen: 22
84.75.20.0/22 maxlen: 22
2a13:9500:187::/48 maxlen: 48
2a13:9500:1f4::/48 maxlen: 48
2a13:9502::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:79:df:91:77:e7:25:b2:26:68:4d:53:4e:2d:85:23:ad:ce:0c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 18 05:47:56 2026 GMT
Not After : Oct 17 05:52:56 2027 GMT
Subject: CN=B353F12EEF43ED0BFB497CD1CD5FF7F10435D384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:49:0b:89:dd:6c:08:b0:72:5e:ea:50:9b:9f:
ad:e3:a8:e4:f1:30:94:b2:c1:5b:2b:9d:97:57:9d:
13:6f:12:86:8b:d0:a8:b9:7b:4a:c9:c0:76:36:9c:
1b:eb:98:0b:ef:50:bd:5b:7e:42:3c:f0:d5:a0:ce:
0e:ad:6e:45:b2:ef:55:70:da:0e:28:54:48:1a:ca:
7b:4f:64:ad:ec:26:4d:7c:23:c1:5a:8a:56:c3:1e:
12:f4:96:db:0c:21:a3:28:0d:f0:10:27:de:f3:64:
bf:93:bb:a2:e9:62:39:80:89:f3:a6:b6:a3:28:29:
26:ba:7f:6c:3f:2b:c1:b2:f1:2c:33:4d:f2:13:01:
b7:0b:a4:a3:c1:f0:e1:ba:54:8c:bd:18:d8:4a:2b:
e3:35:f3:88:92:88:65:c3:7c:a2:31:10:ee:c7:da:
47:14:04:64:eb:23:0e:02:fd:b1:4e:73:32:77:ab:
34:21:9c:29:0f:19:96:3e:21:59:55:16:99:e3:28:
e9:09:92:ca:91:ce:bc:b9:f3:6c:2b:9e:16:04:66:
24:ce:fe:a9:26:68:ab:df:e4:bc:97:f7:12:3e:0f:
ff:49:35:95:87:41:09:d2:f5:a1:5a:7b:6f:07:f4:
0f:ae:2d:10:02:b1:86:8e:41:68:34:b3:85:21:5b:
6b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:53:F1:2E:EF:43:ED:0B:FB:49:7C:D1:CD:5F:F7:F1:04:35:D3:84
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS35661.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.12.0/22
84.75.20.0/22
IPv6:
2a13:9500:187::/48
2a13:9500:1f4::/48
2a13:9502::/32
Signature Algorithm: sha256WithRSAEncryption
74:4e:4e:43:22:62:25:a4:b6:bb:06:7f:9e:71:20:90:57:37:
3d:13:d6:ea:e5:9e:fa:19:c7:3e:e9:0c:d4:0c:f7:ab:ee:d2:
a1:21:44:7c:25:f1:7a:64:18:c0:ff:80:ea:48:a9:6e:a4:d0:
61:3a:4a:bf:71:a7:8f:f2:d9:db:1f:93:29:e2:8f:48:47:0b:
6d:19:f6:73:ca:19:b4:ef:a4:ab:43:5c:ab:7e:18:a3:dc:e6:
90:96:72:1e:cb:29:26:85:af:b5:71:4b:9e:32:e5:ca:6b:4e:
8e:fe:ba:67:ca:af:b7:de:f4:23:18:37:59:fb:72:a0:76:54:
0f:3d:af:db:b0:cc:c7:19:2b:a6:0e:e4:fe:90:c2:e9:13:d0:
d7:4e:a6:21:81:83:b8:c6:b9:18:19:7f:a2:c5:d1:10:f9:d0:
f6:e6:1d:86:f3:43:8b:69:87:53:79:cc:07:98:4a:75:ab:bf:
ad:a3:73:12:c8:c6:39:3d:44:93:70:21:90:8f:d6:bb:e7:52:
e2:a3:07:31:9e:2e:5c:52:8e:26:0e:0a:65:4f:56:aa:20:0e:
6e:ee:84:a4:b9:8a:df:0e:0f:a2:c6:9c:2c:28:ed:c0:3d:36:
88:fd:b8:43:a9:97:24:60:e5:4f:03:d9:4a:5f:07:26:0e:eb:
e1:70:af:ad
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUInnfkXfnJbImaE1TTi2FI63ODGIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjEwMTgwNTQ3NTZaFw0yNzEwMTcwNTUyNTZaMDMxMTAvBgNV
BAMTKEIzNTNGMTJFRUY0M0VEMEJGQjQ5N0NEMUNENUZGN0YxMDQzNUQzODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0SQuJ3WwIsHJe6lCbn63jqOTx
MJSywVsrnZdXnRNvEoaL0Ki5e0rJwHY2nBvrmAvvUL1bfkI88NWgzg6tbkWy71Vw
2g4oVEgayntPZK3sJk18I8FailbDHhL0ltsMIaMoDfAQJ97zZL+Tu6LpYjmAifOm
tqMoKSa6f2w/K8Gy8SwzTfITAbcLpKPB8OG6VIy9GNhKK+M184iSiGXDfKIxEO7H
2kcUBGTrIw4C/bFOczJ3qzQhnCkPGZY+IVlVFpnjKOkJksqRzry582wrnhYEZiTO
/qkmaKvf5LyX9xI+D/9JNZWHQQnS9aFae28H9A+uLRACsYaOQWg0s4UhW2sRAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUs1PxLu9D7Qv7SXzRzV/38QQ104QwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzU2NjEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwRgYIKwYBBQUHAQcBAf8ENzA1MBIEAgABMAwDBAJUSwwD
BAJUSxQwHwQCAAIwGQMHACoTlQABhwMHACoTlQAB9AMFACoTlQIwDQYJKoZIhvcN
AQELBQADggEBAHROTkMiYiWktrsGf55xIJBXNz0T1urlnvoZxz7pDNQM96vu0qEh
RHwl8XpkGMD/gOpIqW6k0GE6Sr9xp4/y2dsfkynij0hHC20Z9nPKGbTvpKtDXKt+
GKPc5pCWch7LKSaFr7VxS54y5cprTo7+umfKr7fe9CMYN1n7cqB2VA89r9uwzMcZ
K6YO5P6QwukT0NdOpiGBg7jGuRgZf6LF0RD50PbmHYbzQ4tph1N5zAeYSnWrv62j
cxLIxjk9RJNwIZCP1rvnUuKjBzGeLlxSjiYOCmVPVqogDm7uhKS5it8OD6LGnCwo
7cA9Noj9uEOplyRg5U8D2UpfByYO6+Fwr60=
-----END CERTIFICATE-----
Generated at Mon Oct 26 09:47:36 2026 by rpki-client