Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS35661.roa
File: AS35661.roa (raw, json)
Hash identifier: ZXKgkHNd04wM4JQvCraRNiXUCNcKBrMp4O2FlBxrhXE=
Subject key identifier: 4E:D7:7B:14:91:45:34:C6:7F:F6:5D:A6:29:9E:0D:76:61:CC:F5:3A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2D3EB172D041F02C371DD0266D35C7DF356CB34D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS35661.roa
Signing time: Fri 19 Jun 2026 07:51:12 +0000
ROA not before: Fri 19 Jun 2026 07:46:12 +0000
ROA not after: Fri 18 Jun 2027 07:51:12 +0000
asID: 35661
IP address blocks: 84.75.12.0/22 maxlen: 22
84.75.20.0/22 maxlen: 22
2a13:9500:187::/48 maxlen: 48
2a13:9502::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:3e:b1:72:d0:41:f0:2c:37:1d:d0:26:6d:35:c7:df:35:6c:b3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 19 07:46:12 2026 GMT
Not After : Jun 18 07:51:12 2027 GMT
Subject: CN=4ED77B14914534C67FF65DA6299E0D7661CCF53A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:51:a7:0a:e4:a3:96:83:48:cd:9c:d9:29:1a:
66:a5:b8:6d:32:5c:40:87:b4:8a:e5:d7:af:ff:d3:
72:b4:6c:c9:7c:2e:b2:28:c1:1d:3d:d4:a5:8a:7d:
47:31:75:00:98:34:8d:10:d3:e3:3d:96:6b:06:f1:
8e:8b:4e:c4:37:e5:bc:62:39:bc:02:65:53:f6:43:
b7:12:c5:f5:29:e6:ee:05:f6:5d:86:b8:a6:0f:aa:
48:1f:ad:1d:d0:fc:ba:61:0c:99:be:21:8f:34:c3:
ac:74:88:11:f7:63:ea:89:2d:dd:8d:dd:ce:f8:df:
a4:98:ed:a6:33:f1:04:f5:2b:15:94:d2:f1:51:5b:
17:95:7c:ad:b3:24:50:32:ec:4b:de:42:fc:b4:5a:
9f:a9:90:fa:f6:9f:06:81:9d:a7:38:49:e7:65:86:
9c:91:18:0c:12:30:1e:19:ab:90:36:a7:fc:de:3c:
50:c2:d5:03:dd:a7:e6:6f:50:ff:63:6f:f0:65:e9:
23:f8:14:01:63:8a:e1:9e:4b:2f:6b:42:06:39:b3:
85:6c:bb:7e:cf:dd:6c:c2:41:2a:19:9b:15:60:4e:
1c:ef:cb:25:a1:60:66:2d:59:c1:8e:81:34:a7:67:
5a:41:2b:73:d7:74:cf:cf:7e:ab:50:05:d6:59:c3:
56:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D7:7B:14:91:45:34:C6:7F:F6:5D:A6:29:9E:0D:76:61:CC:F5:3A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS35661.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.12.0/22
84.75.20.0/22
IPv6:
2a13:9500:187::/48
2a13:9502::/32
Signature Algorithm: sha256WithRSAEncryption
78:6d:2a:93:76:1d:a6:32:44:72:c7:06:88:f6:0e:77:98:f7:
42:c3:ad:33:b0:e3:6b:32:fc:da:5e:8d:2e:06:6c:31:e0:5e:
c9:c6:44:9d:bf:bd:5e:40:b9:ba:cc:cc:ef:d9:05:12:77:d7:
d5:4b:07:20:21:eb:40:1e:db:7c:62:27:23:e1:e9:f3:90:d6:
c4:fc:6b:99:8e:e0:01:62:76:c6:81:64:92:c1:41:56:d1:d3:
8b:31:be:f8:aa:26:30:85:46:a2:2a:0f:d8:30:fa:68:2d:d5:
ae:4d:6c:7d:d3:e7:d6:ce:ff:16:5f:f4:dc:fa:da:14:da:d3:
a6:ac:7d:d1:d0:cd:15:6d:52:88:c8:91:f9:52:fe:ee:65:6c:
63:e7:52:7b:7a:6c:0f:d1:08:c3:0a:fa:46:45:3c:7e:1d:a4:
df:76:e5:38:b5:51:e0:d6:60:2f:80:22:3c:ff:f8:a6:a5:e0:
4e:c7:10:af:cd:31:d3:d7:6d:f1:25:3d:3f:34:f9:6c:26:03:
be:67:62:bf:f2:a1:40:84:85:cf:23:9d:95:ed:d3:56:c9:0e:
22:d8:d0:79:fd:68:24:1e:5a:ad:36:f7:53:ea:85:1f:d6:42:
d6:3d:1b:16:d8:3c:ce:f7:16:24:5e:61:17:6f:6e:90:63:7a:
21:47:15:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:19:21 2026 by rpki-client