Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS35758.roa
File: AS35758.roa (raw, json)
Hash identifier: RA1DNdAZA0WcBJgN7OYnMNP9ETIZC/tyxZ5dMYT9tD0=
Subject key identifier: FE:7E:03:CC:45:3F:B5:BF:D3:15:BA:A9:28:2E:1B:FE:80:3A:66:83
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3BF3F7997C84933E7E937EB54D2F043F8189A04E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS35758.roa
Signing time: Mon 13 Apr 2026 06:47:05 +0000
ROA not before: Mon 13 Apr 2026 06:42:05 +0000
ROA not after: Mon 12 Apr 2027 06:47:05 +0000
asID: 35758
IP address blocks: 148.135.200.0/24 maxlen: 24
203.100.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:f3:f7:99:7c:84:93:3e:7e:93:7e:b5:4d:2f:04:3f:81:89:a0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 13 06:42:05 2026 GMT
Not After : Apr 12 06:47:05 2027 GMT
Subject: CN=FE7E03CC453FB5BFD315BAA9282E1BFE803A6683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9e:5a:68:13:df:5d:4c:41:9a:1a:22:2c:6e:
57:0d:43:ba:f6:c2:11:b6:8c:b2:0e:51:3c:fd:b3:
32:c9:e1:8f:7f:f7:f6:59:f1:b9:19:af:1e:cd:19:
69:b0:2e:0d:95:f3:e5:e3:dd:bd:b0:fb:d3:f4:7b:
71:98:66:db:42:dc:38:a9:67:37:d9:70:30:40:2a:
d0:10:56:0d:0a:66:b2:02:e9:50:99:26:82:f4:dc:
c1:4b:8c:79:d0:a9:87:ff:94:ad:b8:2a:a7:63:9e:
50:07:39:dd:dd:62:55:73:32:c7:1e:85:0a:6f:b8:
91:c1:7b:3a:b1:d3:10:e7:d5:be:00:24:33:4c:e2:
a9:57:12:a4:c2:1f:f2:14:5b:49:dd:35:98:a2:9a:
33:2e:40:15:bb:4d:96:a0:86:2a:51:99:d4:d3:d2:
08:1b:44:c2:c5:46:ce:57:ef:2c:39:d4:a0:ad:85:
e1:e5:80:13:c9:6f:55:6b:3c:cb:fe:12:78:d4:76:
b3:fc:37:24:d7:7e:c7:0a:23:b1:93:fa:36:1e:cb:
ac:06:4d:9c:ee:ae:d6:c7:cd:6c:cd:bb:22:da:61:
19:13:dd:5c:8c:cd:54:98:58:58:cf:27:6b:36:7b:
f0:50:8c:21:95:f6:fd:71:e6:b3:17:27:8f:05:f4:
62:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7E:03:CC:45:3F:B5:BF:D3:15:BA:A9:28:2E:1B:FE:80:3A:66:83
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS35758.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.200.0/24
203.100.212.0/22
Signature Algorithm: sha256WithRSAEncryption
00:3d:3f:7c:bc:e5:5a:be:3a:03:f5:e5:41:8c:5a:a8:2d:90:
95:af:63:c8:00:9f:99:b8:68:38:9f:e9:df:e8:1a:8c:4e:4d:
b6:e9:61:60:8b:94:0e:fb:8d:c9:28:93:94:45:c2:ca:5b:0a:
5f:7e:be:05:60:c7:9f:91:8c:5a:1c:62:73:b0:df:5c:16:f6:
6f:b1:f4:88:20:10:11:52:43:3f:76:eb:e0:5e:40:d0:61:db:
6b:32:49:45:69:bc:ec:4c:1d:16:cb:6f:5a:15:ce:46:b1:54:
b6:86:31:34:5d:e2:54:25:0d:06:ff:e4:ab:91:17:a4:22:c1:
eb:32:30:38:82:c0:e4:31:62:c0:61:24:7d:17:dd:43:a1:24:
83:ed:b6:50:ea:c8:79:a1:81:73:c9:3c:22:3e:b4:3a:35:72:
e7:dc:43:c4:66:0f:d5:ca:79:48:e4:f3:15:bd:5c:8e:8b:99:
8f:e1:f3:0d:60:89:c6:2d:4c:42:a9:a3:46:96:db:37:68:04:
c6:fa:22:45:08:c7:e0:9e:3a:5d:09:95:db:26:92:e3:1f:34:
81:59:cc:42:bb:e9:6c:5e:0e:4f:d0:40:64:32:2f:7e:c7:d1:
95:4f:d0:23:d4:ea:16:06:6c:b2:20:ca:2a:5f:35:15:4c:3f:
ec:50:9b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:11:40 2026 by rpki-client