Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e35382e302f32342d3234203d3e203232343237.roa
File: 38352e3135382e35382e302f32342d3234203d3e203232343237.roa (raw, json)
Hash identifier: CZWo+kW2ncZgLiLF7Y1+UHlR3ZOzslk8CVTJDPHPzeY=
Subject key identifier: 00:FF:7D:FC:7A:C8:7F:95:39:16:1D:D6:D9:7E:84:62:CF:FE:15:EF
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 29C7121003DDC6BB58EEC7F531DBA830970220B7
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e35382e302f32342d3234203d3e203232343237.roa
Signing time: Thu 19 Mar 2026 01:47:06 +0000
ROA not before: Thu 19 Mar 2026 01:42:06 +0000
ROA not after: Thu 18 Mar 2027 01:47:06 +0000
asID: 22427
IP address blocks: 85.158.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 02:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:c7:12:10:03:dd:c6:bb:58:ee:c7:f5:31:db:a8:30:97:02:20:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Mar 19 01:42:06 2026 GMT
Not After : Mar 18 01:47:06 2027 GMT
Subject: CN=00FF7DFC7AC87F9539161DD6D97E8462CFFE15EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:91:5d:9a:77:30:77:36:e9:e6:3d:82:2c:84:
99:67:31:b3:42:bf:22:3c:c1:f5:24:38:fd:4e:71:
84:e1:2d:9c:59:21:ca:aa:2a:b4:30:0c:bf:93:13:
da:83:d0:ee:e6:91:d5:2c:d2:81:90:0f:0d:37:f1:
35:aa:7c:68:f5:a6:09:89:9c:81:fe:0b:4c:c4:ca:
de:27:c2:94:94:2f:92:6a:7e:e5:84:ff:93:ff:36:
bf:b8:ef:60:93:f4:6c:d0:d8:a9:4e:42:b6:13:ca:
28:18:75:56:29:12:6d:eb:df:cb:43:02:f6:73:0c:
ee:aa:4f:13:fd:2b:3d:80:95:ef:5b:ce:14:c4:dc:
16:d4:62:31:76:28:b6:2e:93:a3:2f:b8:fc:03:bc:
ac:1c:a9:13:e5:d8:e7:de:6e:55:30:21:f0:94:de:
ec:51:9e:43:a8:83:e6:b0:2e:43:8f:54:55:a2:87:
73:74:da:52:15:2f:37:03:7f:0d:dc:23:43:e4:e5:
18:95:16:6e:0a:50:b7:b4:1e:a9:16:67:9c:58:b3:
a2:1c:eb:ad:fe:23:6c:36:09:3a:85:51:65:2a:3d:
e9:68:9a:5c:f7:c7:7a:f7:1d:ac:0a:a7:39:e2:1d:
1e:59:12:89:30:54:f4:ef:a7:e4:69:c0:25:41:41:
31:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FF:7D:FC:7A:C8:7F:95:39:16:1D:D6:D9:7E:84:62:CF:FE:15:EF
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e35382e302f32342d3234203d3e203232343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.58.0/24
Signature Algorithm: sha256WithRSAEncryption
34:41:35:87:1c:85:bb:9e:ac:92:e4:d6:15:7f:26:8a:cf:b3:
f4:a0:26:ba:a6:a9:dc:fb:60:cc:00:ac:0f:98:55:e4:83:ce:
c0:16:9b:40:e1:bf:d9:06:0a:8b:51:cb:08:da:d2:19:39:2b:
2f:42:cf:61:42:53:e7:ee:7e:6b:a3:d1:e7:1b:b0:c3:67:c9:
6c:e1:49:e2:37:57:86:ba:9c:48:0f:8c:91:ba:12:48:61:a5:
d8:f4:ea:93:78:b9:97:ba:80:f8:a1:b0:9b:fc:a0:16:f5:b1:
1b:c8:05:02:48:bd:a8:ec:79:c7:29:07:6e:91:7e:68:6b:23:
ca:cf:a6:80:06:9c:1e:f3:2e:bc:0f:2d:e6:a2:b9:6b:ec:fb:
d5:84:df:f8:1f:ec:d0:06:9b:de:a5:86:32:49:88:5a:b7:d1:
89:58:a7:7d:53:9b:ff:68:be:df:73:f2:5a:2e:a4:51:7d:74:
a3:a6:66:54:4c:6d:d3:9b:e4:e4:2b:16:8f:80:1a:00:00:ab:
f7:09:df:4e:87:cf:f8:73:ca:04:33:07:cd:bf:2f:55:e8:50:
fe:05:1c:34:df:24:ad:38:02:92:8f:6c:2c:9d:c0:12:8c:43:
e8:d7:34:fd:ea:e4:db:ef:19:10:95:39:b5:ab:9f:cd:ce:d9:
c7:81:d8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 09:34:12 2026 by rpki-client