Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS35793.roa
File: AS35793.roa (raw, json)
Hash identifier: 6KPepIxTssqNjdjzjINI0ASKLCigF7CRFpylhPBuCMc=
Subject key identifier: 2B:F7:0A:25:26:F4:4C:A7:47:91:BA:13:DB:8A:B0:3F:4E:41:02:5C
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 181AC1191FC010200F2A2E7C5507554D05F82D14
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS35793.roa
Signing time: Fri 05 Jun 2026 12:01:12 +0000
ROA not before: Fri 05 Jun 2026 11:56:12 +0000
ROA not after: Fri 04 Jun 2027 12:01:12 +0000
asID: 35793
IP address blocks: 84.75.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 15:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:1a:c1:19:1f:c0:10:20:0f:2a:2e:7c:55:07:55:4d:05:f8:2d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 5 11:56:12 2026 GMT
Not After : Jun 4 12:01:12 2027 GMT
Subject: CN=2BF70A2526F44CA74791BA13DB8AB03F4E41025C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a7:15:13:99:01:1b:ae:e6:7b:57:3e:52:43:
72:54:8c:08:75:2c:b3:78:ab:a5:3d:c0:c6:c4:9e:
58:36:74:45:60:07:8f:40:2b:fd:6d:17:5a:bc:6e:
18:d3:c6:f5:b0:1c:93:46:4e:cc:bb:45:7e:f6:53:
66:f0:a5:17:58:51:7d:32:d1:41:68:2d:22:4d:58:
f0:cf:5e:4c:90:3b:bc:32:33:a0:57:13:00:57:07:
53:02:03:ea:ab:33:95:2e:ee:9d:c8:b1:3d:d8:c8:
9c:43:4c:f1:0c:e5:c5:67:fe:23:71:ef:3e:8e:c4:
7c:1e:25:77:d3:72:89:7f:a2:ff:e2:68:c0:33:93:
31:3d:60:57:b7:bd:25:25:47:7f:90:54:12:fc:b9:
3a:1f:97:67:df:11:34:5c:7c:7e:d0:04:db:09:cd:
b4:e8:88:31:b4:5f:09:9a:86:d8:bd:56:50:41:93:
9e:59:26:3c:f0:d7:f7:7f:94:40:af:83:0e:d8:f1:
aa:51:aa:5c:a7:0f:fb:52:30:81:d3:16:42:a2:53:
43:09:61:53:e2:a4:4d:e4:69:7d:47:20:0a:0f:be:
c2:df:5e:f5:2c:ff:13:1c:2d:6c:0e:6b:d6:2d:eb:
f8:dd:52:24:29:7a:bf:8d:29:a7:d4:4e:79:cf:d6:
fc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F7:0A:25:26:F4:4C:A7:47:91:BA:13:DB:8A:B0:3F:4E:41:02:5C
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS35793.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.174.0/23
Signature Algorithm: sha256WithRSAEncryption
84:24:01:c2:ed:a0:40:4b:ae:57:7e:ba:d7:d6:31:83:9a:37:
d0:2b:70:01:51:47:14:74:af:8b:22:9a:44:6e:f3:25:e8:b2:
9c:f0:da:a2:6e:5e:28:7e:66:d8:a6:ea:cc:c8:13:fc:6a:02:
bc:fa:be:2f:b9:2d:ff:53:a0:73:03:dc:eb:c7:f3:e8:ef:ed:
a8:b5:4c:64:55:e6:ce:78:07:b3:6f:65:7d:69:7d:8b:f0:8b:
f0:a8:44:0c:f5:ae:d1:2a:94:cd:51:0c:05:2b:f8:23:8f:2f:
07:8d:c7:78:06:81:2b:aa:74:f9:32:f4:cf:d1:23:86:22:9e:
b5:af:2e:f2:c6:05:a7:31:92:18:f3:47:5c:66:16:6f:1f:d4:
31:3e:e1:1c:13:c3:28:46:24:5b:f7:19:c4:97:a3:e0:6f:0a:
11:fe:17:f6:cf:51:84:23:89:69:39:46:e1:8f:16:f5:53:83:
ea:db:3f:a1:cb:9c:19:66:ae:83:bf:91:c5:21:4b:f9:fc:f5:
11:9f:22:d0:17:01:15:d0:e8:cb:47:7b:98:37:bb:7a:8a:24:
2c:f2:4a:9e:e4:6f:52:6c:f8:37:f9:dd:ef:a9:1e:24:53:aa:
ec:1d:9b:f7:dc:bd:67:23:78:9c:63:81:d8:94:8e:ef:ca:cf:
1b:14:15:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:53:51 2026 by rpki-client