Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS38186.roa
File: AS38186.roa (raw, json)
Hash identifier: o3BORLo9rfWlt63Wj1uU2ybTUdKmC/mSadB39hVRSbA=
Subject key identifier: C3:4E:3F:E3:9C:84:A5:0A:9F:A4:7D:26:C6:1C:26:E0:12:C8:2E:E4
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 061B8E440BA387A1B9FDD8C5AA3520500C3E95E5
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS38186.roa
Signing time: Thu 10 Sep 2026 09:07:27 +0000
ROA not before: Thu 10 Sep 2026 09:02:27 +0000
ROA not after: Thu 09 Sep 2027 09:07:27 +0000
asID: 38186
IP address blocks: 141.11.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:1b:8e:44:0b:a3:87:a1:b9:fd:d8:c5:aa:35:20:50:0c:3e:95:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 10 09:02:27 2026 GMT
Not After : Sep 9 09:07:27 2027 GMT
Subject: CN=C34E3FE39C84A50A9FA47D26C61C26E012C82EE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:a3:14:61:4b:0d:fa:57:ae:a1:7e:71:c9:
f8:0e:63:a0:2b:65:b2:ec:9f:3c:7c:b7:2f:3a:fe:
a4:ce:4c:5c:c5:2b:79:b8:a5:80:48:cd:83:4e:5b:
61:97:43:81:4f:ef:29:da:46:66:e8:c8:97:13:fb:
f8:91:ce:4a:bb:d1:0b:cc:52:18:72:e6:98:ac:62:
d7:39:92:fb:e9:71:59:57:cd:89:be:af:94:8c:80:
ef:7b:40:5b:1b:29:9a:83:a1:24:d4:cb:60:5e:c5:
57:0e:52:4c:1f:a4:36:ec:69:c6:a1:43:d3:10:ef:
fe:d9:10:ce:9a:eb:38:5b:d5:b1:fb:af:33:e9:06:
e7:2e:d4:f3:dc:03:d8:2d:62:70:ba:15:14:08:cf:
0a:6f:66:85:6c:34:71:e8:25:c1:e2:c7:a6:13:12:
e6:54:e9:fd:8c:7a:48:93:d9:b2:bc:0d:fe:0c:1d:
0b:99:cf:0f:d6:b3:98:65:3a:c1:3d:d2:97:35:f8:
2d:55:e4:3d:32:67:95:eb:8f:3e:a3:f4:9c:71:fe:
98:53:67:85:27:0c:d8:2f:2e:7b:0e:bf:7f:f1:c2:
cb:ae:cb:01:57:0e:8f:32:b5:04:9c:41:06:84:47:
cf:e4:36:03:d6:2f:16:be:46:5c:92:26:89:5c:84:
f4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4E:3F:E3:9C:84:A5:0A:9F:A4:7D:26:C6:1C:26:E0:12:C8:2E:E4
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS38186.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.228.0/24
Signature Algorithm: sha256WithRSAEncryption
05:4e:fd:46:78:cf:3a:3e:c9:77:9f:81:46:68:ee:5c:e3:2d:
60:be:08:58:94:80:c5:53:1d:71:1a:d5:a8:6e:2e:c6:30:20:
cd:89:39:df:d6:b3:83:ce:b9:08:15:1b:cd:43:cf:c6:05:9e:
00:58:f0:c6:20:30:cc:0c:06:87:ce:fb:28:ad:25:c9:42:2f:
35:04:15:85:a8:26:98:2c:fb:bb:99:c1:4c:40:0c:52:c8:83:
e5:69:9b:1d:2e:01:d1:0d:8a:ac:c6:79:ba:5d:9c:1c:04:27:
ca:bc:fb:69:df:ed:bb:ec:e3:57:2d:c5:ad:3e:7d:06:c3:64:
db:21:f8:f9:70:0d:a9:85:a4:3d:6c:93:0c:e5:4a:c7:a3:68:
96:8f:8a:a6:d3:9c:98:a3:95:37:6b:7f:2f:fb:8e:b5:f3:dc:
95:b2:6d:8c:6b:a0:9b:53:5b:55:d6:bb:bb:b5:d4:7f:d6:85:
47:fb:bb:b2:7e:4b:cf:d5:96:2a:48:4d:fa:72:52:ac:30:c7:
5a:c1:8a:86:f1:0b:61:50:55:3d:36:9d:7e:10:b8:38:3d:02:
3d:2f:ca:f4:c2:bd:ea:c7:be:b3:db:32:d6:7b:fa:ae:c6:3d:
f6:ff:69:b9:a2:ff:24:14:de:40:4e:d8:a3:32:f0:4b:c5:59:
cd:d7:d8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:35:58 2026 by rpki-client