Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS35661.roa
File: AS35661.roa (raw, json)
Hash identifier: AVgB9sP93UjiDSY94keJoyewW7BqdokKioImYx1ZU8E=
Subject key identifier: CF:1C:31:F7:CA:6B:A9:B4:8A:9C:3C:21:F8:6A:2C:9A:81:C7:3E:A8
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 26443D95BEDCAF2C8195CCD6E5409C1CCE32259B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS35661.roa
Signing time: Tue 18 Aug 2026 12:02:23 +0000
ROA not before: Tue 18 Aug 2026 11:57:23 +0000
ROA not after: Tue 17 Aug 2027 12:02:23 +0000
asID: 35661
IP address blocks: 178.95.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Aug 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:44:3d:95:be:dc:af:2c:81:95:cc:d6:e5:40:9c:1c:ce:32:25:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 18 11:57:23 2026 GMT
Not After : Aug 17 12:02:23 2027 GMT
Subject: CN=CF1C31F7CA6BA9B48A9C3C21F86A2C9A81C73EA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c3:0d:94:6b:07:eb:96:d5:7e:57:70:08:5a:
c9:cd:10:83:af:38:be:d4:1b:b7:70:ff:91:72:46:
18:ab:01:f4:24:81:42:c1:cf:86:81:0d:3f:6c:37:
da:95:5c:cb:88:7c:13:66:31:40:ce:53:3a:24:b3:
3f:85:0b:93:83:2f:f7:00:6e:bd:a2:21:58:dc:f5:
8f:24:2c:4f:d9:92:04:5b:38:78:ff:8a:04:cc:18:
03:c5:68:7c:00:4a:15:8b:ce:99:cc:87:72:55:97:
2a:bc:d4:06:1f:c1:56:04:f8:46:d1:75:58:2c:07:
3a:eb:9d:81:5d:a3:3f:81:5d:f2:ce:32:99:d1:bf:
5a:30:d2:4e:6f:fa:a1:16:44:8f:fb:8b:7a:37:82:
c0:1a:11:9a:fd:9d:a3:ff:c0:13:7f:3f:42:34:6f:
b3:a5:0e:0f:57:9c:2d:93:1c:7d:e8:9e:b7:8c:fc:
2d:c9:3e:0b:58:ea:62:a0:bb:93:ef:f5:10:f6:63:
0a:cf:94:f8:75:4e:93:17:74:20:17:a6:b1:ee:95:
57:cf:b3:bc:47:a7:32:65:73:b9:e6:a8:6f:16:98:
78:4f:0a:34:1d:05:d4:b7:89:ca:c3:df:61:8c:69:
fc:f5:23:22:ef:90:af:8a:57:74:70:f7:5e:e8:26:
aa:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1C:31:F7:CA:6B:A9:B4:8A:9C:3C:21:F8:6A:2C:9A:81:C7:3E:A8
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS35661.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.95.112.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:9a:fb:a7:8d:8f:12:7b:cf:21:13:b0:fb:b9:94:04:76:e8:
a1:7b:af:c0:ec:e4:ec:5a:bf:96:85:58:98:9d:9e:96:a3:96:
44:6d:72:85:df:90:96:5d:15:c1:bc:7c:e2:89:a5:41:a2:12:
6c:70:59:be:89:ee:df:41:53:d9:91:47:87:f3:45:3d:94:60:
67:5a:d5:da:5c:ea:5e:d4:79:a5:38:f0:89:da:df:bf:8e:3f:
e6:38:97:77:51:20:a8:5f:38:71:ce:d2:7d:9a:21:09:fc:d6:
cc:35:cc:b7:71:2c:71:8e:12:f5:54:8a:52:83:90:a3:59:21:
9a:78:bc:e4:2e:2d:62:a0:53:68:3c:1a:94:13:92:57:ea:8f:
22:db:bb:64:7d:b0:98:a5:d6:0d:81:ed:30:5a:ee:5f:4c:e6:
45:08:b4:6b:d0:e6:e6:10:9d:fc:4f:73:0f:8c:7e:aa:c4:a9:
0b:c6:eb:2c:74:ad:f3:93:7d:38:f7:39:89:ae:f3:a1:03:40:
f1:4b:8d:4a:97:56:89:f1:17:ae:2d:a4:70:22:4c:70:84:0c:
5d:c8:44:43:63:17:6b:f5:a4:5b:70:e4:71:cd:73:08:fb:97:
7b:4a:2e:bc:6c:91:82:32:7c:f8:b7:a2:6d:8b:da:6b:01:03:
5d:20:8a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 17:37:13 2026 by rpki-client