Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e36322e302f32332d3234203d3e20383334.roa
File: 38352e3135382e36322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: lfT7RDvaqGpw2ZhzqJGqDMr+DrIHQDwtf9DpI/XCNLQ=
Subject key identifier: 86:BC:34:D4:B5:1B:F1:56:67:E9:B5:E9:73:D9:D0:2C:55:65:AF:4F
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 472BDF6FFC44EF80162913A102C444D1E223AFB5
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e36322e302f32332d3234203d3e20383334.roa
Signing time: Mon 12 Oct 2026 00:07:35 +0000
ROA not before: Mon 12 Oct 2026 00:02:35 +0000
ROA not after: Mon 11 Oct 2027 00:07:35 +0000
asID: 834
IP address blocks: 85.158.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 21:24:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:2b:df:6f:fc:44:ef:80:16:29:13:a1:02:c4:44:d1:e2:23:af:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Oct 12 00:02:35 2026 GMT
Not After : Oct 11 00:07:35 2027 GMT
Subject: CN=86BC34D4B51BF15667E9B5E973D9D02C5565AF4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1f:43:c5:1d:d5:62:32:a8:8f:1e:38:0d:09:
a9:72:c0:07:d2:e2:3e:e3:af:f9:84:a3:2e:c2:33:
55:8e:1d:f8:c1:fe:e0:b1:13:e9:bf:25:e3:5f:bf:
1f:f6:08:6d:40:6f:a4:46:5a:27:22:81:f9:6a:f3:
5a:e5:ff:f2:06:b3:4f:4f:b0:d9:df:61:18:bb:60:
f8:16:cd:f5:8c:f0:d5:8c:ed:bf:2d:91:d9:7f:38:
63:bd:08:45:c0:27:91:f6:db:60:5b:80:13:13:eb:
fa:f5:f5:65:9e:c0:60:df:ca:f6:9a:7c:bf:07:08:
eb:b5:1a:e3:37:4d:ea:26:6a:d2:f4:e2:4c:c7:41:
8d:8d:3c:85:e0:a2:fe:df:3f:cb:53:f9:de:8b:8e:
e1:88:c8:6f:e1:c5:18:c5:f6:e2:e1:ca:07:7c:31:
91:14:05:e3:6f:ea:b5:33:e6:5a:11:fa:8c:d4:1b:
f3:22:d1:d6:e5:4a:ce:65:12:a3:a0:3e:7e:7a:e8:
57:ac:5c:a3:f3:dc:20:28:5c:e0:8f:5d:ed:79:f8:
79:80:29:e8:12:9a:74:58:86:86:14:7c:ce:ac:ab:
c6:a8:75:dc:21:55:f1:c9:e9:96:dc:46:bf:61:16:
41:a0:04:3e:3b:72:cd:f8:41:c1:cc:83:14:a8:76:
74:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BC:34:D4:B5:1B:F1:56:67:E9:B5:E9:73:D9:D0:2C:55:65:AF:4F
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e36322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.62.0/23
Signature Algorithm: sha256WithRSAEncryption
53:99:36:04:6c:e7:05:4c:16:22:58:f2:41:86:c0:84:f2:74:
26:d6:f3:d1:f0:7d:52:67:b7:e4:80:c3:45:5e:2a:58:8f:55:
0f:40:32:54:d1:4e:b3:22:e6:68:2c:26:1e:a9:cb:79:e4:e9:
34:60:14:4b:d6:9e:14:52:21:65:35:fc:bd:6a:22:d0:25:57:
0b:fc:94:bd:af:b8:d1:dc:18:d3:ab:a1:3f:2b:e5:3a:ba:77:
c9:6a:89:31:de:00:ed:2d:35:cd:39:e0:71:bf:15:bf:23:90:
37:d3:40:05:e0:04:9f:f8:10:ea:b0:1c:e3:15:e8:8f:6d:58:
43:aa:44:00:83:46:a3:b0:54:25:93:3c:6a:16:fe:28:ef:96:
2f:44:4e:f8:f4:36:6e:05:bc:56:b1:7e:ed:bf:92:69:1f:b1:
c9:71:ea:0f:62:08:0d:c5:19:83:19:51:77:a5:31:b7:b7:e9:
29:2a:78:6a:89:4e:bc:e7:bd:76:cf:5b:44:7d:ed:1b:f1:de:
4b:6a:9d:17:2c:17:ff:42:ab:76:65:25:a5:4b:5b:ef:2f:4d:
5e:a2:13:f4:bd:4d:1d:59:31:9c:71:14:e3:9a:bf:7b:c1:32:
6f:9d:1e:13:80:7d:ea:e6:5d:5b:cd:59:09:6f:97:3b:2e:a0:
de:9d:e4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 13:36:08 2026 by rpki-client