Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e35392e302f32342d3234203d3e20313432343633.roa
File: 38352e3135382e35392e302f32342d3234203d3e20313432343633.roa (raw, json)
Hash identifier: dnyjHl6gt7aVfJQWcbvqhYHr8LuD4k640inEMO7TFuI=
Subject key identifier: CC:BB:C2:5F:43:B8:9D:F2:2E:65:B1:8D:35:87:44:C2:E4:77:B9:7E
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 75BF3ECDE8A00F7D659B8ED20165293A152C4965
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e35392e302f32342d3234203d3e20313432343633.roa
Signing time: Fri 28 Aug 2026 09:01:32 +0000
ROA not before: Fri 28 Aug 2026 08:56:32 +0000
ROA not after: Fri 27 Aug 2027 09:01:32 +0000
asID: 142463
IP address blocks: 85.158.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:bf:3e:cd:e8:a0:0f:7d:65:9b:8e:d2:01:65:29:3a:15:2c:49:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Aug 28 08:56:32 2026 GMT
Not After : Aug 27 09:01:32 2027 GMT
Subject: CN=CCBBC25F43B89DF22E65B18D358744C2E477B97E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:09:11:04:54:67:c8:e0:15:24:8d:e8:bb:28:
16:87:35:76:1c:a5:cd:24:d8:c6:45:05:5e:da:cd:
43:b3:92:6d:a7:e5:8b:e0:35:4f:54:d4:99:62:5d:
b2:16:44:8b:ca:3b:11:d4:e9:b4:4f:da:65:33:9f:
ed:4b:3b:0c:94:1d:1b:83:0d:00:7c:db:f9:e2:98:
f3:b0:60:56:f6:56:f8:40:98:ac:6e:08:72:85:8b:
4a:ba:45:9a:16:b2:bd:22:df:b5:af:66:06:33:5a:
e9:f6:88:a4:cf:15:95:b8:f9:df:d1:a0:8c:9e:7d:
ef:72:a1:bd:ba:c6:88:3a:e9:1b:90:a0:24:bc:85:
3f:0e:2a:d6:3a:00:00:eb:a1:28:64:03:ca:0c:d2:
a8:fd:3b:7d:e9:63:8e:7d:99:59:f1:2b:09:ac:2c:
bd:03:7a:f3:bf:d4:78:ac:48:61:57:2e:d6:a8:c8:
7c:37:76:0c:5a:c0:97:35:dd:ba:a0:8c:11:b5:ab:
e9:a0:b2:6f:39:1f:9a:2a:3f:95:d4:3e:9f:ad:79:
88:d9:4f:08:f4:2b:07:75:71:e0:b6:b7:53:d7:b5:
3e:54:67:46:bb:e2:3e:39:d0:56:e1:57:15:aa:84:
cb:bf:b3:ea:ef:ad:cd:fe:a6:4b:03:5f:12:4b:a2:
c1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BB:C2:5F:43:B8:9D:F2:2E:65:B1:8D:35:87:44:C2:E4:77:B9:7E
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e35392e302f32342d3234203d3e20313432343633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.59.0/24
Signature Algorithm: sha256WithRSAEncryption
63:b9:85:71:b6:2c:80:0e:97:06:66:0e:51:66:62:f7:93:86:
26:6b:56:07:c9:90:5e:64:ed:f8:b7:5a:18:1c:15:4e:4d:38:
e0:fa:27:0c:78:3a:da:de:70:48:39:b6:fc:94:f5:2e:d1:96:
9d:c6:29:4f:07:16:d8:f5:29:15:0e:66:c0:c8:f3:99:93:6b:
89:1c:73:a8:05:e0:a5:4f:91:06:60:23:d6:d4:8f:c9:b5:90:
9c:b2:6a:b9:d7:1f:86:85:d6:0c:b8:a6:65:f1:eb:1a:ed:a0:
fa:9f:47:be:6d:9e:90:6c:eb:87:ec:3d:72:ca:ad:04:86:e6:
5b:75:45:87:22:4b:8e:bd:77:a4:a6:b3:26:d7:b6:8e:0f:a8:
e2:dd:a0:34:e5:68:a7:fb:4c:37:7f:e0:d2:d5:65:95:79:cd:
5c:8e:a0:9b:0d:59:9a:cd:0a:75:76:08:b5:44:7d:ed:bb:08:
10:ed:78:e1:c2:4e:4d:98:75:60:29:9f:68:0f:7e:f5:3b:b5:
76:54:b7:1e:03:d7:c8:2e:34:50:98:c6:88:71:c2:d4:cc:c7:
ba:0d:34:cf:e7:23:ac:c3:7b:c5:ab:0f:c1:21:d2:7a:89:d6:
e2:c0:28:12:69:db:16:f5:af:e1:03:4d:2d:23:98:b9:7a:d5:
95:79:14:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:21:19 2026 by rpki-client