Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e39332e33342e302f32342d3234203d3e20383334.roa
File: 3138352e39332e33342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: bzynC5Xop/JP90XVAtnfle3yN+r4XYfmC4YmMbcIvMc=
Subject key identifier: ED:FA:68:57:3C:DF:AC:B4:9A:DD:C9:62:48:81:9E:A3:B5:55:1A:92
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 46CFBF30FDF222E96B9F0F0D6351F6A79FA5F2AA
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e39332e33342e302f32342d3234203d3e20383334.roa
Signing time: Tue 03 Nov 2026 00:03:38 +0000
ROA not before: Mon 02 Nov 2026 23:58:38 +0000
ROA not after: Tue 02 Nov 2027 00:03:38 +0000
asID: 834
IP address blocks: 185.93.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 21:24:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:cf:bf:30:fd:f2:22:e9:6b:9f:0f:0d:63:51:f6:a7:9f:a5:f2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Nov 2 23:58:38 2026 GMT
Not After : Nov 2 00:03:38 2027 GMT
Subject: CN=EDFA68573CDFACB49ADDC96248819EA3B5551A92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3a:28:57:b3:7b:8e:88:ed:e3:b7:63:08:ac:
0a:df:3d:5c:d6:2a:7d:86:2f:b5:2f:47:6d:fe:99:
f2:66:e2:c9:9e:f7:dd:34:d5:b7:09:7e:94:a8:29:
a9:e0:72:02:8b:52:31:d0:97:b4:80:3e:be:ed:b2:
10:1a:c3:c2:99:6b:ca:a9:62:72:51:7a:e5:ee:99:
01:84:d7:35:26:e2:c8:89:d6:41:7a:54:cd:c4:da:
9c:12:ec:cf:6e:a3:2b:01:0c:cf:d0:56:b3:ad:99:
19:2c:fc:18:26:5d:14:a0:52:45:37:43:d7:16:6a:
e8:06:45:ea:f1:26:ba:47:e4:e6:c0:2d:7a:0c:00:
57:4f:d6:b4:2c:44:cd:7d:3a:ac:bd:bb:9e:4d:4c:
58:bd:9e:83:5f:f1:cf:5f:6b:69:af:66:dc:30:eb:
76:a5:18:36:1d:0f:93:2a:11:a9:8b:72:0c:df:96:
50:d7:ef:07:f9:82:c2:86:3c:a4:fc:21:fc:47:16:
7a:a6:ec:03:25:5c:1d:2e:ca:5a:91:70:b6:cf:c7:
72:13:88:46:c2:21:6b:6a:3d:b7:6f:8c:cf:01:d4:
c2:35:80:95:86:bc:d6:e0:08:89:eb:38:d8:64:27:
fe:b1:64:bf:e9:a0:80:f9:70:e0:28:00:73:09:33:
d7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FA:68:57:3C:DF:AC:B4:9A:DD:C9:62:48:81:9E:A3:B5:55:1A:92
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e39332e33342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.34.0/24
Signature Algorithm: sha256WithRSAEncryption
66:7b:96:58:9c:0e:73:48:d4:6f:26:81:53:88:76:81:39:9e:
e0:45:c8:20:50:85:66:72:13:51:b7:fa:3a:fe:f8:ec:fb:28:
87:d8:77:e7:03:96:d3:40:07:2f:ec:19:c2:c1:ab:60:03:8b:
64:42:f5:1f:49:5d:39:74:f3:32:55:fe:bd:c4:69:8a:23:96:
f8:01:13:c5:44:9a:5b:59:fb:7c:4f:67:ff:6d:83:ee:2c:25:
91:32:55:bd:8e:3e:86:1b:16:3c:a0:ac:06:61:a3:72:fb:b8:
9d:14:68:01:c0:a0:78:72:2a:d8:84:5b:9b:e7:dc:ed:ed:ca:
4a:31:19:81:d8:0d:6e:98:12:2b:42:0f:a5:3a:e0:77:44:c5:
c2:4a:5e:83:93:19:37:77:e9:c8:fc:63:ae:76:93:f2:64:59:
f4:f6:86:1f:ed:cb:ca:41:25:a4:31:ec:60:1f:73:4e:08:0d:
d1:b7:72:29:20:cc:f3:b2:7c:c8:2e:fd:4b:aa:7a:c2:92:cb:
b4:72:dd:8b:c0:9f:7d:4e:39:b5:bc:6b:d1:16:6b:0e:92:67:
42:c9:95:09:20:27:75:dc:1b:f9:a2:6b:1d:87:01:d2:3e:a6:
0d:f3:2a:f6:ec:fc:ba:d6:b2:58:6a:8f:56:89:97:65:60:27:
f9:d3:07:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:42:43 2026 by rpki-client