Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e36312e302f32342d3234203d3e20383334.roa
File: 38352e3135382e36312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: T+ZvGwWhU/s6kZfiqIUvRVLogw9Wlj75wTAJzhn10mQ=
Subject key identifier: 93:71:F8:73:1E:82:87:BD:D0:AE:FB:A1:86:BD:BC:A9:0C:DE:18:7E
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 3DECABF4D02286B5B177C5BDA629E0A478B554B0
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e36312e302f32342d3234203d3e20383334.roa
Signing time: Thu 17 Sep 2026 00:00:41 +0000
ROA not before: Wed 16 Sep 2026 23:55:41 +0000
ROA not after: Thu 16 Sep 2027 00:00:41 +0000
asID: 834
IP address blocks: 85.158.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 13:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:ec:ab:f4:d0:22:86:b5:b1:77:c5:bd:a6:29:e0:a4:78:b5:54:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Sep 16 23:55:41 2026 GMT
Not After : Sep 16 00:00:41 2027 GMT
Subject: CN=9371F8731E8287BDD0AEFBA186BDBCA90CDE187E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:85:88:04:bb:81:05:2d:a8:63:49:f5:31:98:
e7:7d:2e:15:b1:d3:41:f6:20:bf:f3:02:fb:10:a4:
7e:48:3e:e1:28:e2:13:c4:8d:ea:03:0a:fd:77:2b:
2f:91:bf:df:51:40:3e:92:39:ae:ee:2a:45:1e:58:
05:95:6e:14:42:9e:0a:42:0e:25:3c:83:46:11:41:
27:7e:09:1f:03:df:02:6b:b1:d2:05:70:c7:9b:7b:
f0:0a:7e:aa:77:a7:da:31:51:bc:d3:78:51:a4:fc:
81:4b:be:04:da:20:83:ab:dc:b5:a7:14:ac:d2:56:
1b:00:c9:1c:c7:00:ad:4d:4f:c0:a6:c2:83:04:41:
9a:0f:27:22:ff:f5:e7:d5:ab:cd:33:1a:02:cb:12:
d5:22:eb:c2:8f:14:86:7e:96:bc:60:57:59:e1:76:
c2:65:ad:5a:a8:13:7a:3b:e1:c6:4b:4d:d0:69:15:
68:9e:08:4e:bd:45:7b:c8:cb:7e:9c:39:7c:b9:9c:
7c:bb:63:7e:15:7f:cc:60:1d:b2:67:5b:a7:79:33:
97:8c:17:b8:61:98:e1:c2:99:73:cf:ef:bd:99:8a:
0b:92:ec:19:f6:09:db:6b:df:b8:a2:72:35:e9:33:
5a:1e:ce:ea:b6:65:86:41:69:e7:48:0b:0b:6f:94:
b2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:71:F8:73:1E:82:87:BD:D0:AE:FB:A1:86:BD:BC:A9:0C:DE:18:7E
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e36312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.61.0/24
Signature Algorithm: sha256WithRSAEncryption
73:25:76:d0:f9:5a:fa:54:e5:4c:f3:c0:f4:40:81:d1:04:20:
53:b7:3e:0c:b0:29:61:32:94:87:e6:0a:f6:37:62:ff:87:ad:
f1:e1:1c:59:8a:80:29:4f:52:d2:f2:72:0d:a7:73:98:de:95:
f7:8b:47:7e:52:53:ce:d5:a5:9a:8b:81:1c:56:ff:19:19:37:
6d:1e:24:89:79:f2:e8:c0:7b:48:37:a0:10:e4:f7:27:3a:d2:
9f:26:72:52:77:51:bc:f1:1c:f4:d5:be:1e:b4:37:5d:2b:ae:
c2:94:a5:2b:36:6d:a6:2a:2d:28:e0:56:d2:65:3c:b5:b7:ba:
66:fc:d3:57:c2:d1:32:1b:16:2f:b5:1a:1b:54:ba:e7:2e:93:
e6:46:66:ab:d3:13:87:63:a0:8b:9b:55:99:48:dd:d4:a9:84:
45:43:ba:39:50:59:fe:56:53:ec:4e:f1:93:a6:c5:64:bd:7f:
4a:2c:ff:0d:26:e7:e7:df:0e:41:b3:08:94:ec:83:24:ec:f6:
53:5d:97:04:5f:2e:73:17:6a:7b:14:85:1d:73:21:fd:7a:3d:
1a:05:46:95:e9:52:79:fa:97:1b:db:1e:85:ba:16:67:f4:d7:
0c:12:0d:b8:a8:74:41:18:6a:2d:8b:c8:5b:f8:f0:6e:6c:18:
f8:f8:ad:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:27:29 2026 by rpki-client