Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS8881.roa
File: AS8881.roa (raw, json)
Hash identifier: yZYTjuRKnLkpEvYY0pS/1rnoLPgq9RpMpXzm6pBRQlA=
Subject key identifier: D9:59:09:F9:47:77:4E:F1:98:BB:2D:1E:D8:15:9C:E9:2E:2C:48:A5
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 1A36BFD78F40097D47ED8F78F6440D16C9C48063
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS8881.roa
Signing time: Tue 27 Oct 2026 11:38:43 +0000
ROA not before: Tue 27 Oct 2026 11:33:43 +0000
ROA not after: Tue 26 Oct 2027 11:38:43 +0000
asID: 8881
IP address blocks: 90.96.96.0/22 maxlen: 24
90.96.100.0/22 maxlen: 24
90.96.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 20:10:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:36:bf:d7:8f:40:09:7d:47:ed:8f:78:f6:44:0d:16:c9:c4:80:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 27 11:33:43 2026 GMT
Not After : Oct 26 11:38:43 2027 GMT
Subject: CN=D95909F947774EF198BB2D1ED8159CE92E2C48A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:13:04:1e:ba:72:0e:c9:5e:fb:40:00:37:3c:
1f:cc:5e:f3:8b:cb:2d:08:52:a8:a4:ab:92:f2:c8:
21:34:91:c9:c4:0e:73:c3:72:4d:39:50:06:e3:80:
10:9f:bf:cd:2d:01:cd:9e:8c:f7:d6:97:ff:c0:85:
50:99:66:05:df:09:af:e3:69:aa:8e:6e:b0:fd:42:
c0:9d:12:f6:ce:12:95:7a:41:c6:98:3e:6e:13:89:
80:1f:15:6e:ce:fa:fd:8a:03:f6:a3:74:2d:c7:0f:
ca:bc:87:e4:8f:e0:71:74:c6:ea:d5:a5:be:1c:2d:
ca:c9:43:8a:63:7e:f1:d8:44:3f:80:85:c2:7a:22:
34:01:aa:aa:07:81:82:bd:b1:d1:17:a2:cc:09:c1:
f6:e5:74:bc:34:8f:64:9f:8f:0d:d3:0e:1e:8b:ef:
24:69:bb:c6:8a:2a:08:5e:d1:90:53:70:51:fc:e4:
18:df:c4:83:ba:85:c5:68:3f:ce:d4:c4:91:71:7e:
9c:8d:34:71:cf:a5:3a:40:29:54:c5:f0:fa:59:92:
b1:f3:49:af:61:38:25:7a:1c:ba:ae:56:11:55:74:
0e:17:1a:a0:f9:04:db:1b:32:ef:4f:f7:d0:64:60:
89:b8:2a:96:69:3d:96:06:5d:c5:f1:5e:8c:cc:e9:
8f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:59:09:F9:47:77:4E:F1:98:BB:2D:1E:D8:15:9C:E9:2E:2C:48:A5
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS8881.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.96.96.0-90.96.107.255
Signature Algorithm: sha256WithRSAEncryption
35:bf:02:2e:d4:ef:ba:0c:b9:8b:b2:0c:57:26:8c:c2:72:6c:
5f:95:24:8e:c4:62:91:f7:f4:e7:c3:08:91:2b:13:b6:7e:48:
1b:c3:68:17:1b:43:fe:15:7b:d8:a8:e4:72:98:16:82:9a:14:
ae:46:0e:ab:f6:37:be:b9:02:81:16:63:94:a2:f5:9b:8e:86:
dd:ec:8b:be:db:6d:6b:b9:36:be:47:10:9f:50:2f:41:19:bb:
1c:45:a0:fe:da:2f:fd:27:fb:d2:1e:9b:e4:4f:f4:86:01:69:
a9:b2:80:02:3e:a9:da:29:7c:0b:a5:05:78:37:86:de:ec:06:
58:85:17:e6:55:1d:1c:81:12:aa:7c:eb:43:35:a3:68:88:c0:
e5:47:cf:5b:39:00:8a:fa:ba:d7:30:79:64:4b:a9:bc:9f:79:
a6:7c:42:70:f8:75:2b:cf:1b:20:be:c3:26:c6:95:6c:42:1a:
64:42:d1:61:88:51:b5:8b:71:27:2f:00:48:67:af:59:67:50:
e6:1e:f2:79:41:d6:b0:23:3b:46:f2:8f:6a:ab:f0:86:4d:87:
3e:81:47:d2:4f:6a:eb:05:eb:4b:f7:8c:c9:65:99:d5:2d:2d:
42:01:78:68:a5:37:70:70:2b:29:75:26:ca:25:1d:42:70:45:
bf:ee:03:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 07:32:36 2026 by rpki-client