Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS35661.roa
File: AS35661.roa (raw, json)
Hash identifier: cv5J8lJPa/qk0hk02iRdkMqc0soyvZKZ3sdC1MMdNBE=
Subject key identifier: 3B:FB:3C:31:87:D2:7D:40:D9:F5:A7:DF:5A:BD:DE:DF:94:98:E7:F3
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 43D6DA70213AE705743A1D76BC5EA3700660A9B6
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS35661.roa
Signing time: Sun 13 Sep 2026 21:34:42 +0000
ROA not before: Sun 13 Sep 2026 21:29:42 +0000
ROA not after: Sun 12 Sep 2027 21:34:42 +0000
asID: 35661
IP address blocks: 2a14:7583:5a00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:d6:da:70:21:3a:e7:05:74:3a:1d:76:bc:5e:a3:70:06:60:a9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 13 21:29:42 2026 GMT
Not After : Sep 12 21:34:42 2027 GMT
Subject: CN=3BFB3C3187D27D40D9F5A7DF5ABDDEDF9498E7F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3a:a1:1f:0e:fb:87:25:82:a1:89:07:ff:49:
ef:19:23:a9:3b:f2:17:b9:96:9a:67:f6:6a:54:96:
dd:dd:f0:88:0e:e4:bc:39:b8:5d:e8:db:c9:2f:7a:
cb:59:8b:20:b9:4c:a0:a1:5a:83:9f:26:6b:c9:ac:
65:80:44:5c:cf:52:ce:18:af:3b:84:e9:2f:01:a0:
e4:32:65:5c:08:51:3f:c9:f1:2b:8b:e5:fc:81:6a:
6e:30:f1:00:7d:da:9c:f9:13:34:ee:b0:a5:ad:fd:
54:45:5f:ed:47:c9:10:bd:71:c3:83:d1:03:54:d2:
1d:e9:e7:54:11:10:9f:5f:d2:72:92:90:d7:e1:10:
93:f3:40:94:9c:61:e2:6c:d4:fa:54:ba:d5:41:6a:
44:7a:a1:02:29:bf:89:7a:aa:92:93:05:61:32:75:
33:20:b8:a2:65:2e:4e:2f:53:9a:13:82:e8:a4:79:
40:43:64:e1:f8:03:5d:52:b1:ca:94:95:c3:41:3e:
bc:12:3e:88:cf:ba:9b:d2:52:dd:5e:8d:23:d0:f2:
36:83:ae:e7:6e:e0:f8:b3:db:99:7f:91:c7:0e:7a:
9e:0c:5d:98:a4:a3:e5:5e:77:62:6c:d6:04:1f:2a:
f7:ce:47:95:8f:d5:f5:c8:42:fa:90:81:55:c5:df:
7d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FB:3C:31:87:D2:7D:40:D9:F5:A7:DF:5A:BD:DE:DF:94:98:E7:F3
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS35661.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:5a00::/40
Signature Algorithm: sha256WithRSAEncryption
61:42:00:73:b4:a4:46:84:4d:3b:70:f0:8a:2b:50:83:51:7a:
a5:ed:12:b9:15:b2:02:6d:99:12:6e:cc:ca:c1:a8:f2:68:cb:
19:da:2b:aa:77:47:56:b5:35:18:27:51:ef:3b:a0:73:6e:89:
14:c8:7b:c6:c3:8f:96:ea:e0:4a:f7:0c:2d:93:7d:a4:e1:43:
d2:a7:ce:da:a0:23:52:5c:aa:2e:9b:9a:67:05:12:6f:94:12:
08:b0:2f:2f:78:c0:48:0f:e9:ef:ca:cd:8c:45:aa:81:f3:7b:
1b:1f:a6:45:f7:35:e0:88:eb:cd:4d:dc:ad:77:0a:22:be:38:
1f:3e:44:23:b4:b5:ee:ae:90:a7:50:ce:1d:b9:8b:66:1e:ad:
02:ee:6f:92:15:33:83:b4:62:d1:0f:42:01:e4:3a:6d:b6:02:
92:76:9b:b2:87:18:30:46:bb:12:fe:96:9e:91:b7:e1:07:f0:
94:87:70:db:13:06:f4:52:2d:63:9b:01:59:7b:3a:f9:18:46:
45:c3:8c:5f:26:aa:03:34:64:e6:fa:bd:76:54:51:b1:8a:26:
6c:c9:c6:13:17:44:70:4e:24:b5:43:a3:b8:0c:2e:f6:df:ab:
81:ce:5d:41:ea:21:bb:f7:96:58:40:14:7f:cc:20:ed:c7:6c:
f7:15:13:31
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUQ9bacCE65wV0Oh12vF6jcAZgqbYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA5MTMyMTI5NDJaFw0yNzA5MTIyMTM0NDJaMDMxMTAvBgNV
BAMTKDNCRkIzQzMxODdEMjdENDBEOUY1QTdERjVBQkRERURGOTQ5OEU3RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaOqEfDvuHJYKhiQf/Se8ZI6k7
8he5lppn9mpUlt3d8IgO5Lw5uF3o28kvestZiyC5TKChWoOfJmvJrGWARFzPUs4Y
rzuE6S8BoOQyZVwIUT/J8SuL5fyBam4w8QB92pz5EzTusKWt/VRFX+1HyRC9ccOD
0QNU0h3p51QREJ9f0nKSkNfhEJPzQJScYeJs1PpUutVBakR6oQIpv4l6qpKTBWEy
dTMguKJlLk4vU5oTguikeUBDZOH4A11SscqUlcNBPrwSPojPupvSUt1ejSPQ8jaD
rudu4Piz25l/kccOep4MXZiko+Ved2Js1gQfKvfOR5WP1fXIQvqQgVXF3333AgMB
AAGjggILMIICBzAdBgNVHQ4EFgQUO/s8MYfSfUDZ9affWr3e35SY5/MwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMzU2NjEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqFHWD
WjANBgkqhkiG9w0BAQsFAAOCAQEAYUIAc7SkRoRNO3DwiitQg1F6pe0SuRWyAm2Z
Em7MysGo8mjLGdorqndHVrU1GCdR7zugc26JFMh7xsOPlurgSvcMLZN9pOFD0qfO
2qAjUlyqLpuaZwUSb5QSCLAvL3jASA/p78rNjEWqgfN7Gx+mRfc14IjrzU3crXcK
Ir44Hz5EI7S17q6Qp1DOHbmLZh6tAu5vkhUzg7Ri0Q9CAeQ6bbYCknabsocYMEa7
Ev6WnpG34QfwlIdw2xMG9FItY5sBWXs6+RhGRcOMXyaqAzRk5vq9dlRRsYombMnG
ExdEcE4ktUOjuAwu9t+rgc5dQeohu/eWWEAUf8wg7cds9xUTMQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:05:22 2026 by rpki-client