Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS35487.roa
File: AS35487.roa (raw, json)
Hash identifier: W2NmL1sr0annHAeHXN9pVec/cO/bx7yxKnHz4VnJhdU=
Subject key identifier: BA:18:27:62:C2:12:24:39:48:4B:5F:1C:C3:C1:85:A0:AA:EF:A3:BC
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 77CDB3241032EC29266796A662685AA02C04C7A2
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS35487.roa
Signing time: Wed 29 Jul 2026 15:25:12 +0000
ROA not before: Wed 29 Jul 2026 15:20:12 +0000
ROA not after: Wed 28 Jul 2027 15:25:12 +0000
asID: 35487
IP address blocks: 177.177.0.0/19 maxlen: 32
201.50.0.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 19:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:cd:b3:24:10:32:ec:29:26:67:96:a6:62:68:5a:a0:2c:04:c7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 29 15:20:12 2026 GMT
Not After : Jul 28 15:25:12 2027 GMT
Subject: CN=BA182762C2122439484B5F1CC3C185A0AAEFA3BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7a:23:07:47:c7:8a:e4:d1:c9:62:b9:4f:45:
5b:db:e5:9d:4f:f9:b8:0b:60:ed:a8:56:5b:70:aa:
d2:26:8f:19:2e:90:1d:9d:93:4e:5f:55:a6:33:0c:
6a:b5:68:5a:e3:9f:d9:ab:82:06:5a:9a:21:27:f0:
8a:98:20:a7:1e:82:14:d8:64:2b:96:f7:53:74:46:
c2:51:ef:8c:0a:9d:40:aa:5a:1e:45:df:d7:e2:8d:
79:08:4b:84:c8:7d:1b:75:7d:16:c9:08:79:0d:cf:
07:e9:03:86:f9:a7:c5:fe:f5:e0:d4:a8:60:43:0b:
c4:69:07:4d:db:3d:a0:55:15:a9:24:4b:b5:c2:f9:
55:2d:c1:c9:a2:1b:65:07:98:06:f4:d5:57:d3:ac:
64:88:16:18:eb:87:e0:6d:9c:01:c5:cd:a6:d2:37:
4a:06:3e:e3:48:7a:7c:e9:4e:18:25:39:2d:68:09:
c0:ef:45:8b:f9:1d:98:71:c4:f0:97:7d:f2:dc:25:
f2:9a:b8:49:da:8f:0b:ed:88:fe:b5:63:d3:e1:08:
c8:70:3a:08:df:e2:46:df:10:f8:74:0a:07:95:cd:
fb:26:77:19:84:06:e6:c1:59:c8:27:8a:d1:ee:47:
23:60:44:1b:91:68:39:12:11:ff:c4:be:85:5b:13:
23:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:18:27:62:C2:12:24:39:48:4B:5F:1C:C3:C1:85:A0:AA:EF:A3:BC
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS35487.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.177.0.0/19
201.50.0.0/20
Signature Algorithm: sha256WithRSAEncryption
5d:ce:c4:50:3d:46:1a:eb:ea:0c:b3:32:df:62:bc:84:d1:31:
d3:9f:d7:31:ed:5f:5a:6f:5e:3a:d5:a7:09:fa:9a:0e:ca:95:
4f:7d:6a:e6:7a:54:2b:a0:74:43:99:c5:8b:32:58:c3:c4:68:
f3:ea:6f:00:14:29:a7:fb:67:f4:9f:03:c1:f2:f0:3d:ad:c4:
21:96:80:cb:8b:d1:fa:f5:c5:25:a3:c4:90:83:3e:a9:f0:28:
2e:92:9f:db:d9:81:02:2e:2c:19:fa:34:ea:99:ab:39:d5:fd:
08:38:72:bf:dd:3b:3d:54:a3:7e:74:f3:93:3b:44:dd:b2:e6:
44:25:69:fd:e2:c8:fe:d6:52:69:61:e2:1c:76:72:c8:2f:33:
ab:af:c4:ff:e2:a1:3d:1f:3c:96:d4:2d:01:13:b8:e3:69:47:
2e:d4:77:d6:9d:7f:8b:07:8f:53:37:c9:3d:b4:eb:f7:14:15:
33:9d:0a:83:73:f2:41:43:2d:66:77:b4:d6:ba:46:e3:ef:3c:
c7:cd:84:cf:0f:b9:92:d1:07:0c:c8:b3:62:90:86:77:76:f3:
b3:ff:8a:62:85:1a:8e:81:1c:6f:0a:99:07:9e:3d:75:ef:f1:
13:65:63:a4:1b:87:df:d4:c2:fa:e3:77:f5:6a:d4:6b:cc:b3:
c9:b4:24:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 04:09:01 2026 by rpki-client