Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS30088.roa
File: AS30088.roa (raw, json)
Hash identifier: oosJwh1ziueUtsZ8YBitv/y4VZyqoIEz3BmA9h7ALik=
Subject key identifier: 2E:8B:5C:B5:61:CA:92:B5:04:E5:B3:22:78:64:54:06:82:F5:E0:BF
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 17354A95031F7672CCEE527BF82F20CE4EEC9FB6
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS30088.roa
Signing time: Thu 10 Sep 2026 07:24:27 +0000
ROA not before: Thu 10 Sep 2026 07:19:27 +0000
ROA not after: Thu 09 Sep 2027 07:24:27 +0000
asID: 30088
IP address blocks: 188.221.77.0/24 maxlen: 24
188.221.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:35:4a:95:03:1f:76:72:cc:ee:52:7b:f8:2f:20:ce:4e:ec:9f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 10 07:19:27 2026 GMT
Not After : Sep 9 07:24:27 2027 GMT
Subject: CN=2E8B5CB561CA92B504E5B3227864540682F5E0BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:99:c4:7e:b6:68:8e:2a:f2:76:b5:32:88:1e:
35:89:d7:b6:f9:99:e6:4d:0c:82:0e:ca:f1:7a:a0:
2d:0c:94:08:8e:18:92:43:e3:26:e7:9c:07:fa:b1:
f3:b0:f9:ac:19:3f:95:63:a4:10:69:b1:ff:be:ef:
44:cd:b2:54:ba:fe:35:7c:ac:ec:d4:14:e5:b0:75:
f4:d7:b5:79:c1:6b:89:26:ad:aa:26:f8:ca:f2:9c:
9b:7d:6b:6e:71:be:d3:a2:4a:f0:15:03:13:76:38:
6f:d2:34:e3:47:4d:f0:2e:0a:ba:7f:c0:dd:46:61:
d5:b1:6d:66:45:1a:7d:8b:c3:c9:3e:9e:c3:1f:3a:
6f:63:0c:10:1c:44:aa:05:4a:ef:c6:b1:97:f7:18:
0c:45:12:3f:af:0e:1a:0a:8b:91:8a:86:93:29:2e:
43:71:6e:45:3b:c1:77:c4:a5:58:7f:c5:c5:b2:4b:
55:34:91:95:40:ce:32:0a:af:dc:b9:83:7c:ed:fe:
bc:3a:bb:2f:79:cf:3b:86:9f:20:1b:07:5c:f3:54:
4d:a8:88:58:27:5d:d9:2e:5d:61:f0:38:1d:fb:dc:
2d:d0:4b:cf:70:a0:8f:e3:af:47:3c:86:f8:17:52:
6c:ad:97:1f:8d:91:b2:28:2f:a5:27:61:87:60:64:
69:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8B:5C:B5:61:CA:92:B5:04:E5:B3:22:78:64:54:06:82:F5:E0:BF
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS30088.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.221.77.0/24
188.221.79.0/24
Signature Algorithm: sha256WithRSAEncryption
04:65:85:b6:78:26:30:cc:24:2c:5b:4d:7b:8a:4d:36:0e:c3:
f3:68:24:1c:d0:8a:46:7a:ca:6b:3d:fe:34:8b:9d:20:80:1f:
01:60:7e:c7:b9:73:8a:0f:75:cb:ce:d8:bd:96:95:e7:3a:0a:
aa:6a:f9:00:6b:5d:50:d7:5f:ec:74:38:51:92:15:b1:f4:6d:
f4:f6:a4:fa:b3:09:d9:58:98:6c:95:ea:76:03:09:ac:db:0b:
77:fb:36:2b:ca:9c:04:8e:8c:7c:fb:fc:d9:de:2a:8f:c2:18:
bf:11:48:49:10:30:5b:62:c6:21:90:30:0b:cb:66:e7:24:04:
e1:69:b8:d1:f8:df:65:a7:98:32:40:9f:d4:ee:71:1e:d3:1f:
ca:22:39:65:54:13:11:5e:bc:eb:91:89:f7:5a:b5:44:0f:02:
b7:f2:27:d7:96:58:bb:1c:13:22:7e:5b:a3:0d:3d:2c:aa:11:
4a:e4:ee:44:4b:e6:8b:cd:f2:26:e4:85:ae:b1:00:98:a3:b1:
22:b1:02:ac:17:dc:8a:52:7d:43:9f:8f:dc:1a:89:41:a8:b8:
f1:89:cd:60:b1:18:0c:47:d3:9d:37:3e:71:cf:1d:14:f3:d6:
79:76:11:f3:43:0e:27:2a:32:7d:f9:f4:a2:f5:39:c6:2d:bd:
e0:0c:2f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:14:08 2026 by rpki-client