Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS30088.roa
File: AS30088.roa (raw, json)
Hash identifier: v3YCrwbwD/rYDAOchZdGwp8IRCivDDT6k3MjS0Lbp/A=
Subject key identifier: EE:A4:20:D6:3E:12:8A:0D:94:DA:E8:1B:B7:AC:B3:B8:38:30:28:66
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3DE33D5A36CCE5D8FAA85AC1F11FAF1DEE71F1E1
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS30088.roa
Signing time: Mon 07 Sep 2026 09:16:32 +0000
ROA not before: Mon 07 Sep 2026 09:11:32 +0000
ROA not after: Mon 06 Sep 2027 09:16:32 +0000
asID: 30088
IP address blocks: 95.135.164.0/24 maxlen: 24
178.93.86.0/24 maxlen: 24
178.93.95.0/24 maxlen: 24
178.94.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:e3:3d:5a:36:cc:e5:d8:fa:a8:5a:c1:f1:1f:af:1d:ee:71:f1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 7 09:11:32 2026 GMT
Not After : Sep 6 09:16:32 2027 GMT
Subject: CN=EEA420D63E128A0D94DAE81BB7ACB3B838302866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3c:1f:ca:96:be:fd:ac:73:9f:12:bd:ab:88:
ae:ff:f1:4f:00:66:71:34:35:73:f2:8f:b8:94:84:
f3:92:c4:47:c6:1b:de:63:af:df:b6:ba:69:c5:53:
0f:cb:fb:55:33:5f:d1:17:95:a7:ac:95:d5:19:2b:
66:3d:0b:55:35:e1:65:1c:ba:66:29:85:79:13:ae:
da:96:56:91:e1:e0:c0:3a:7c:0d:eb:35:56:77:20:
1a:49:3f:6b:a5:e0:0c:be:d7:61:0f:06:a4:de:fc:
9b:8e:9c:6e:4f:7c:cb:91:b3:d6:3e:d2:4d:66:e1:
4b:ef:d4:09:73:66:37:9f:0c:23:67:be:95:96:6a:
53:64:cb:c0:cb:fa:42:68:a7:1a:e4:88:84:21:57:
d5:d4:25:c7:d7:51:58:35:1e:cb:29:f7:10:9c:ec:
ec:95:27:41:4c:12:aa:aa:ea:c6:d9:ed:b6:bc:a6:
35:e2:91:95:68:ed:b9:da:81:41:fb:bb:ab:f4:f8:
7c:79:1b:52:c5:f0:d1:73:e7:e6:28:6f:7a:bb:b6:
bc:3e:a5:4d:62:47:93:4e:eb:a0:51:f1:45:f3:29:
af:66:2e:24:1f:7e:b9:87:4d:33:38:07:3b:f8:56:
a0:74:89:9e:31:d0:e6:f2:c7:ae:2c:3b:f4:ab:dc:
6b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A4:20:D6:3E:12:8A:0D:94:DA:E8:1B:B7:AC:B3:B8:38:30:28:66
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS30088.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.164.0/24
178.93.86.0/24
178.93.95.0/24
178.94.179.0/24
Signature Algorithm: sha256WithRSAEncryption
47:de:38:d3:6e:1f:06:5d:47:94:c3:80:95:3d:1b:f7:84:42:
e9:91:97:55:2f:71:c3:ad:06:39:e9:0c:d9:f7:57:29:0d:d5:
b5:8f:84:46:96:39:50:eb:21:f8:41:64:4e:b1:80:26:5a:f7:
5e:74:2b:52:30:62:63:89:46:02:16:39:92:26:f4:6e:4b:a4:
cc:12:b5:5f:5e:2e:73:7f:73:6d:d8:c6:31:b8:35:63:80:70:
f8:66:3e:5d:8b:b3:41:ad:93:b9:82:43:78:45:92:62:79:41:
c2:36:58:63:19:f6:c9:9a:3d:2b:20:a4:ad:fa:d5:a2:47:5d:
5d:d6:aa:4b:81:09:30:13:ad:b7:2b:d4:77:0d:bc:f8:e0:ba:
18:93:65:d7:d2:ac:71:93:cf:84:3e:4b:ce:c9:3e:4e:02:30:
72:7a:05:ad:3e:7a:b0:8a:f6:6a:ea:b5:9f:d0:74:ac:71:27:
bb:9d:c1:3b:34:b7:f7:1a:a7:07:65:f9:8e:11:d9:0a:c5:93:
e6:d2:ee:dc:f3:01:24:14:c8:33:34:f4:15:c7:c4:97:ef:4e:
8d:75:06:c4:ee:ee:53:91:a1:83:f3:ba:e9:57:73:b5:ce:64:
15:48:ae:0d:29:7e:f5:aa:78:3b:32:35:cb:4c:bd:6d:03:d8:
15:de:59:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 7 18:02:01 2026 by rpki-client