Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS8888.roa
File: AS8888.roa (raw, json)
Hash identifier: BKisxWTjEzSSZdnv2IGJXfVvGCZrHVTHwMu/8mwZg50=
Subject key identifier: B3:5E:32:8D:9C:06:B4:85:78:E2:8A:09:14:3A:61:60:F4:2B:DA:39
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 0D1B9446B35077F768E6A3C966C38B1A8EC70BC3
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS8888.roa
Signing time: Tue 01 Sep 2026 16:49:31 +0000
ROA not before: Tue 01 Sep 2026 16:44:31 +0000
ROA not after: Tue 31 Aug 2027 16:49:31 +0000
asID: 8888
IP address blocks: 141.11.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:1b:94:46:b3:50:77:f7:68:e6:a3:c9:66:c3:8b:1a:8e:c7:0b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 1 16:44:31 2026 GMT
Not After : Aug 31 16:49:31 2027 GMT
Subject: CN=B35E328D9C06B48578E28A09143A6160F42BDA39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e7:51:41:77:a3:cf:d7:4a:38:5a:7c:0d:a2:
42:04:59:81:36:f2:56:10:d3:b2:a5:ab:2f:6b:8c:
6d:26:c8:42:16:99:e9:79:14:14:fc:b2:38:3f:aa:
32:80:fd:fd:b3:79:da:7b:ee:b1:9f:ef:51:cf:35:
ed:d7:f6:47:e2:31:1d:12:b9:4b:f1:66:60:ed:6b:
ea:e7:50:94:9c:59:8a:5c:13:8c:53:6a:78:3c:8d:
4e:d2:b2:32:d3:a0:3e:b3:bf:2b:c2:24:fc:e1:ee:
e0:9e:10:24:be:7b:18:5b:2a:e5:ec:86:82:3a:44:
2a:2c:af:0a:47:40:97:9f:46:b0:f1:95:86:35:8d:
bb:e0:d4:97:c4:93:ee:ea:65:19:67:7f:e1:43:96:
55:35:8f:ce:0f:b3:c6:9c:35:e5:c0:5f:01:70:2c:
58:3b:05:d8:7e:c8:2e:96:f7:79:68:40:3f:4d:69:
d2:55:c8:55:3e:be:d8:1c:34:d0:18:42:5c:a7:cf:
a9:3f:b5:21:aa:af:08:5a:d2:0f:7a:31:a3:a5:89:
f2:8b:81:57:d8:0d:cb:57:4a:4e:d5:3a:f4:8e:43:
2f:ab:96:f3:d9:c4:42:57:79:09:30:18:fd:5e:2f:
72:15:83:24:73:88:09:eb:ca:05:fe:05:17:f8:c2:
08:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5E:32:8D:9C:06:B4:85:78:E2:8A:09:14:3A:61:60:F4:2B:DA:39
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS8888.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.111.0/24
Signature Algorithm: sha256WithRSAEncryption
65:ba:84:fb:6f:5a:22:f0:ba:0b:60:9c:42:b9:08:9d:2a:37:
bc:1f:e3:e2:3b:61:ca:05:c4:53:4b:48:af:54:fc:57:e9:1a:
80:e6:63:31:13:d1:be:a2:98:97:ba:d0:f8:2b:51:6f:b7:2f:
98:24:3b:95:b7:a3:bc:a1:82:21:18:7c:44:22:40:8c:72:67:
1a:72:9d:29:c9:7e:6e:a2:84:e4:70:ae:6a:1e:f1:58:53:fe:
c1:03:46:f4:ff:ab:5e:a0:fc:a8:da:0a:e7:63:74:ae:43:ee:
57:43:ce:3e:ba:4d:0b:b2:b6:5b:98:eb:ab:90:6f:fc:fe:a7:
58:15:86:16:b9:84:b8:a7:64:e5:cf:4c:08:37:4d:7b:da:14:
9c:43:09:6d:48:c7:76:31:f0:02:92:6d:98:47:35:c5:81:d1:
5a:70:14:10:3b:52:a6:ee:dd:fe:74:cf:3b:4e:33:b8:67:e8:
7e:06:86:d0:2f:81:a7:e8:3a:2e:30:ea:bc:57:45:a1:84:4e:
e2:ba:04:79:f6:cb:3b:f4:81:cd:4d:c7:fc:f6:d0:50:ec:15:
a7:86:aa:81:f5:ae:1f:2d:0e:af:1e:2c:d6:dc:a1:50:5b:f4:
c3:0a:8d:7d:57:fb:a4:59:20:21:1d:e8:78:31:ea:61:07:3a:
95:e0:13:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:49:10 2026 by rpki-client