Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230352e302f32342d3234203d3e20323138383632.roa
File: 38352e3233372e3230352e302f32342d3234203d3e20323138383632.roa (raw, json)
Hash identifier: n+z49k1kQTrIxFviReztGFPpq5+kvSqoxrbZmLmRzTA=
Subject key identifier: 8F:A6:DE:38:ED:4F:18:9A:50:B7:EB:38:11:52:1A:78:03:25:9E:0F
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 21AD779C1CE6749C8767D199736E24CCD41D40CB
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230352e302f32342d3234203d3e20323138383632.roa
Signing time: Mon 07 Sep 2026 06:21:28 +0000
ROA not before: Mon 07 Sep 2026 06:16:28 +0000
ROA not after: Mon 06 Sep 2027 06:21:28 +0000
asID: 218862
IP address blocks: 85.237.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 10:23:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ad:77:9c:1c:e6:74:9c:87:67:d1:99:73:6e:24:cc:d4:1d:40:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Sep 7 06:16:28 2026 GMT
Not After : Sep 6 06:21:28 2027 GMT
Subject: CN=8FA6DE38ED4F189A50B7EB3811521A7803259E0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:4a:13:18:e6:ae:d7:06:e9:f8:9c:7d:d9:
e9:2a:3d:a3:28:e2:7d:60:f2:8b:4b:7d:79:7a:a6:
e6:08:00:e6:95:5a:98:90:e8:6d:99:5b:3f:90:25:
b8:c9:a7:48:eb:ad:56:1e:1d:40:d4:ec:cc:14:19:
01:4e:5e:1e:cf:63:d4:90:69:2d:bf:95:d9:59:b8:
61:c4:32:cc:e4:e7:2a:1d:40:fb:d7:8d:92:5d:d7:
da:88:73:9c:04:40:38:1a:de:c6:54:87:33:cc:d3:
8f:db:3a:dc:90:2a:e3:44:bf:38:c2:a4:e7:80:98:
07:e3:2e:ec:6d:fb:4d:db:40:c1:c6:3d:af:fb:1d:
de:ad:78:0a:9c:72:4f:a2:ae:3d:77:91:ab:30:8c:
a5:19:a7:5a:0f:2d:06:c3:75:85:f8:fe:58:55:15:
e4:c7:76:39:27:3d:43:c1:3a:eb:c0:75:21:f9:81:
d1:13:25:76:3a:67:cb:fb:77:3d:b4:11:71:87:16:
ba:96:33:08:af:70:a4:19:ea:8d:51:9b:7d:9c:de:
bb:4a:e4:37:aa:70:e9:cf:07:51:75:b4:ac:13:a5:
cc:fe:08:34:73:68:23:8e:35:93:f9:d6:de:6d:91:
d3:da:cb:c9:45:d1:77:fd:40:c8:91:2b:16:7b:b4:
1a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A6:DE:38:ED:4F:18:9A:50:B7:EB:38:11:52:1A:78:03:25:9E:0F
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230352e302f32342d3234203d3e20323138383632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.205.0/24
Signature Algorithm: sha256WithRSAEncryption
18:0a:13:5c:9f:5e:ba:45:04:51:e2:84:aa:c7:b4:ca:30:80:
ac:5c:d2:1a:91:1a:45:91:36:29:ef:16:63:c7:56:c9:7e:c5:
29:0b:46:c3:a3:b6:ef:0f:6c:7d:dd:7c:98:3f:ef:d2:70:8b:
62:99:37:d4:f4:1a:5e:92:b3:3c:ac:13:d1:07:b0:8d:0d:e3:
14:9b:eb:dc:54:7e:f4:e3:17:36:0b:18:14:2a:02:48:92:36:
56:46:b6:bd:ff:02:33:01:4c:df:73:83:e2:82:3b:84:46:af:
d2:41:60:63:d4:77:3e:48:42:d5:5d:80:b5:ff:77:65:9e:03:
8c:74:42:df:34:d1:f5:26:9e:26:b4:0c:5d:31:e7:6c:03:18:
ae:79:70:7d:39:e4:e5:d5:16:dc:c7:13:36:bd:6c:1d:89:d8:
9e:db:cf:37:33:6a:65:98:aa:0e:64:b1:43:84:ce:b1:d6:1f:
a9:bf:5b:ed:54:22:08:56:a0:2f:26:4e:f2:55:2d:4f:86:d8:
82:71:17:bd:9f:d9:eb:61:74:00:c1:e2:e8:c6:2f:e6:1e:2a:
0a:3f:20:db:2b:c1:45:68:16:50:f8:74:eb:49:ab:43:52:be:
04:b6:3e:e6:74:ea:18:41:51:e8:c1:86:f9:54:89:bf:64:37:
08:01:e1:bc
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUIa13nBzmdJyHZ9GZc24kzNQdQMswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2
ZmJhYmI4ZDAeFw0yNjA5MDcwNjE2MjhaFw0yNzA5MDYwNjIxMjhaMDMxMTAvBgNV
BAMTKDhGQTZERTM4RUQ0RjE4OUE1MEI3RUIzODExNTIxQTc4MDMyNTlFMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBpEoTGOau1wbp+Jx92ekqPaMo
4n1g8otLfXl6puYIAOaVWpiQ6G2ZWz+QJbjJp0jrrVYeHUDU7MwUGQFOXh7PY9SQ
aS2/ldlZuGHEMszk5yodQPvXjZJd19qIc5wEQDga3sZUhzPM04/bOtyQKuNEvzjC
pOeAmAfjLuxt+03bQMHGPa/7Hd6teAqcck+irj13kaswjKUZp1oPLQbDdYX4/lhV
FeTHdjknPUPBOuvAdSH5gdETJXY6Z8v7dz20EXGHFrqWMwivcKQZ6o1Rm32c3rtK
5DeqcOnPB1F1tKwTpcz+CDRzaCOONZP51t5tkdPay8lF0Xf9QMiRKxZ7tBpbAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUj6beOO1PGJpQt+s4EVIaeAMlng8wHwYDVR0j
BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi
NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct
NnU0MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct
MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzIzMzM3MmUzMjMw
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzgzODM2MzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABV7c0wDQYJKoZIhvcNAQELBQADggEBABgKE1yfXrpFBFHihKrHtMowgKxc0hqR
GkWRNinvFmPHVsl+xSkLRsOjtu8PbH3dfJg/79Jwi2KZN9T0Gl6SszysE9EHsI0N
4xSb69xUfvTjFzYLGBQqAkiSNlZGtr3/AjMBTN9zg+KCO4RGr9JBYGPUdz5IQtVd
gLX/d2WeA4x0Qt800fUmnia0DF0x52wDGK55cH055OXVFtzHEza9bB2J2J7bzzcz
amWYqg5ksUOEzrHWH6m/W+1UIghWoC8mTvJVLU+G2IJxF72f2ethdADB4ujGL+Ye
Kgo/INsrwUVoFlD4dOtJq0NSvgS2PuZ06hhBUejBhvlUib9kNwgB4bw=
-----END CERTIFICATE-----
Generated at Wed Sep 9 19:47:49 2026 by rpki-client