Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS35661.roa
File: AS35661.roa (raw, json)
Hash identifier: +iuB+ajn2UCdlXrYNNvaWqXct9jU4LqEeKmVBRYf9Wo=
Subject key identifier: A7:37:4D:6F:A7:1E:2F:FA:9C:B2:59:36:D5:BC:7D:D1:47:74:B2:7E
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 44262BE6C35B154B792C94D0AC36FA529F28ECFB
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS35661.roa
Signing time: Wed 06 May 2026 21:54:35 +0000
ROA not before: Wed 06 May 2026 21:49:35 +0000
ROA not after: Wed 05 May 2027 21:54:35 +0000
asID: 35661
IP address blocks: 2a14:7583:5a00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:26:2b:e6:c3:5b:15:4b:79:2c:94:d0:ac:36:fa:52:9f:28:ec:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 6 21:49:35 2026 GMT
Not After : May 5 21:54:35 2027 GMT
Subject: CN=A7374D6FA71E2FFA9CB25936D5BC7DD14774B27E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:42:c1:bf:7e:bd:19:54:fa:fe:38:67:bb:1f:
49:c3:67:08:a8:02:95:28:57:8d:12:0b:6b:c1:21:
7a:40:dd:89:b6:6c:08:cd:db:35:1d:21:ed:6e:a9:
1a:83:5a:32:84:cc:38:4c:9b:e2:ef:74:48:89:8e:
56:38:af:94:a7:2b:c3:24:53:cb:84:8a:27:ba:1b:
44:4e:07:55:f5:0c:78:dd:ff:93:9a:26:10:5f:33:
9b:00:67:6f:99:ee:9d:87:4b:b2:9a:11:3d:a1:74:
19:93:82:4a:f8:2b:fa:12:11:e1:5d:6c:ff:6f:d1:
5c:7e:76:8c:e8:d1:ab:c5:fc:37:fd:c8:73:ae:54:
5d:29:25:7b:cd:0a:11:e6:86:07:c4:5e:aa:95:78:
de:25:1d:e7:c5:2a:56:61:af:d2:46:39:8b:78:9b:
49:b1:07:99:42:86:0f:36:13:63:3a:dd:dc:63:74:
2c:05:a9:ad:ee:0a:f4:8f:64:e2:92:ea:f4:d8:11:
ae:08:b3:fd:e3:62:b8:fc:f8:de:e1:ed:06:2f:bd:
26:89:fd:01:ee:e5:b0:d2:1c:45:cc:13:8b:60:5b:
a5:40:45:81:de:6c:c3:a0:42:a3:c2:f4:4f:10:6d:
93:7d:7c:27:d3:72:1b:e3:eb:2b:c3:7f:8d:59:9c:
77:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:37:4D:6F:A7:1E:2F:FA:9C:B2:59:36:D5:BC:7D:D1:47:74:B2:7E
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS35661.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:5a00::/40
Signature Algorithm: sha256WithRSAEncryption
40:1c:e9:ef:65:c8:f1:0f:ed:5e:3e:2c:c5:44:bf:6a:e0:c4:
f3:54:7f:03:54:15:1c:79:f3:a5:4d:b5:3f:c4:66:a7:c7:3a:
38:d3:ef:ed:c0:40:14:75:44:d7:8a:b0:c8:35:9c:51:63:81:
37:b8:9b:24:4a:53:47:72:0b:36:5f:9b:82:29:21:85:11:79:
0e:d7:24:e9:33:90:eb:a8:64:40:15:e2:3f:cc:b5:79:91:0b:
37:fb:da:d5:b5:56:6f:e8:cd:a4:dc:91:af:2e:72:f6:d5:54:
38:b0:96:2a:1d:71:7f:0a:d5:f6:9c:12:08:c2:9c:ec:76:cf:
13:48:db:9a:59:1f:8a:1b:de:f7:3a:70:2d:b1:1b:ab:47:40:
aa:40:1a:d9:bf:38:c2:8b:6f:a9:d9:6c:e5:9b:c7:ec:3b:fc:
41:1e:a6:af:7a:44:cd:6c:e6:a0:cf:51:9a:2f:fa:30:2c:5f:
92:61:15:36:ae:e6:95:3f:1a:93:1b:73:3a:74:42:df:26:af:
e8:48:db:08:ca:b6:54:9d:e6:a6:05:71:05:e0:85:64:d0:d8:
bf:cd:94:68:45:9c:d0:e1:13:92:68:c7:09:98:fa:08:c9:6c:
b9:40:6a:6a:be:01:24:41:36:e0:cc:4b:80:39:e6:a2:1d:aa:
00:ca:3d:73
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIURCYr5sNbFUt5LJTQrDb6Up8o7PswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA1MDYyMTQ5MzVaFw0yNzA1MDUyMTU0MzVaMDMxMTAvBgNV
BAMTKEE3Mzc0RDZGQTcxRTJGRkE5Q0IyNTkzNkQ1QkM3REQxNDc3NEIyN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyQsG/fr0ZVPr+OGe7H0nDZwio
ApUoV40SC2vBIXpA3Ym2bAjN2zUdIe1uqRqDWjKEzDhMm+LvdEiJjlY4r5SnK8Mk
U8uEiie6G0ROB1X1DHjd/5OaJhBfM5sAZ2+Z7p2HS7KaET2hdBmTgkr4K/oSEeFd
bP9v0Vx+dozo0avF/Df9yHOuVF0pJXvNChHmhgfEXqqVeN4lHefFKlZhr9JGOYt4
m0mxB5lChg82E2M63dxjdCwFqa3uCvSPZOKS6vTYEa4Is/3jYrj8+N7h7QYvvSaJ
/QHu5bDSHEXME4tgW6VARYHebMOgQqPC9E8QbZN9fCfTchvj6yvDf41ZnHcPAgMB
AAGjggILMIICBzAdBgNVHQ4EFgQUpzdNb6ceL/qcslk21bx90Ud0sn4wHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMzU2NjEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqFHWD
WjANBgkqhkiG9w0BAQsFAAOCAQEAQBzp72XI8Q/tXj4sxUS/auDE81R/A1QVHHnz
pU21P8Rmp8c6ONPv7cBAFHVE14qwyDWcUWOBN7ibJEpTR3ILNl+bgikhhRF5Dtck
6TOQ66hkQBXiP8y1eZELN/va1bVWb+jNpNyRry5y9tVUOLCWKh1xfwrV9pwSCMKc
7HbPE0jbmlkfihve9zpwLbEbq0dAqkAa2b84wotvqdls5ZvH7Dv8QR6mr3pEzWzm
oM9Rmi/6MCxfkmEVNq7mlT8akxtzOnRC3yav6EjbCMq2VJ3mpgVxBeCFZNDYv82U
aEWc0OETkmjHCZj6CMlsuUBqar4BJEE24MxLgDnmoh2qAMo9cw==
-----END CERTIFICATE-----
Generated at Tue May 12 22:05:55 2026 by rpki-client