Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230382e302f32342d3234203d3e20383334.roa
File: 38352e3233372e3230382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 1gO0Ut8qdAkdiNSTCnfLyhehmt090rtXaepD+CFEmJc=
Subject key identifier: 46:F6:4C:91:CF:00:8B:E0:44:08:3D:4A:40:B1:01:58:D8:12:C7:2F
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 4405C0E99683BEBE086F8CA04965FFAB71AC3041
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230382e302f32342d3234203d3e20383334.roa
Signing time: Tue 03 Nov 2026 20:53:13 +0000
ROA not before: Tue 03 Nov 2026 20:48:13 +0000
ROA not after: Tue 02 Nov 2027 20:53:13 +0000
asID: 834
IP address blocks: 85.237.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:05:c0:e9:96:83:be:be:08:6f:8c:a0:49:65:ff:ab:71:ac:30:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Nov 3 20:48:13 2026 GMT
Not After : Nov 2 20:53:13 2027 GMT
Subject: CN=46F64C91CF008BE044083D4A40B10158D812C72F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:59:8c:07:44:5d:02:c8:89:e5:dd:b0:c3:a3:
1c:ce:f0:59:29:53:b2:b5:7a:c2:3e:d9:93:46:b3:
ef:2a:83:1b:05:05:fb:61:41:b6:03:00:b0:07:b8:
c4:ed:7c:1c:cb:17:fe:a1:0c:8f:1f:3c:74:56:21:
9b:f3:28:aa:7a:88:73:1c:74:16:9c:4f:f9:84:b8:
85:a8:ac:71:76:c4:09:a1:ec:71:c0:e0:17:c9:f9:
ef:05:28:23:af:d5:cd:7a:7c:53:4a:c3:1d:d8:26:
52:72:1b:bf:37:1a:ab:6f:3d:34:56:02:11:b7:cf:
e7:57:d2:eb:23:bf:1b:cc:ed:5f:c6:a2:7c:11:1e:
2c:f1:b8:f8:79:bb:6b:0f:55:4f:d0:fd:77:77:3c:
74:d9:e6:04:7a:d3:1f:a4:eb:ff:1b:3d:84:5e:f3:
47:9a:f2:97:9b:2e:ac:41:9a:30:0c:c8:53:52:cf:
a7:61:67:a8:4a:48:22:17:ae:c5:77:2e:cc:a7:21:
b0:cc:5c:57:92:0c:6e:42:01:2d:23:ab:0b:a6:31:
cb:ea:71:32:e1:d5:d6:1a:ac:00:d1:ad:e4:d8:60:
52:e7:6c:10:91:02:92:91:dc:a4:1d:90:0a:6f:86:
8f:db:11:86:82:e8:b6:5e:3b:ac:d0:35:78:76:82:
97:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F6:4C:91:CF:00:8B:E0:44:08:3D:4A:40:B1:01:58:D8:12:C7:2F
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.208.0/24
Signature Algorithm: sha256WithRSAEncryption
04:60:8b:8d:d5:d8:6a:87:86:d6:be:c4:73:60:b0:2f:53:56:
17:8f:ce:a1:1d:c4:6b:ec:57:16:01:48:19:0e:49:c5:a5:bc:
58:3f:da:30:54:54:de:70:34:3f:3c:a7:c0:92:ff:ce:92:79:
91:2f:43:66:ff:42:68:d4:a7:b3:55:4d:a2:e8:4c:e8:2f:29:
7f:2b:81:ec:41:38:a0:b2:cd:ea:53:84:f8:61:6f:40:3a:9a:
0a:d4:ba:26:2a:98:20:cc:b5:49:2c:72:09:db:34:05:59:04:
61:26:b9:a8:3f:82:1b:d8:94:c0:fb:63:e6:37:ed:98:46:fb:
e7:5f:5b:82:33:76:c7:15:2a:92:b3:8e:7a:13:4c:85:65:e7:
6b:f3:f2:da:1f:c6:cb:fc:33:67:cf:51:f8:de:0d:43:78:0d:
15:5b:48:90:79:ad:2b:4a:33:63:21:73:e5:f7:a0:63:fc:b6:
db:43:f0:29:cb:25:43:4b:bf:c2:ba:fc:91:7f:a8:25:83:c0:
ab:c6:42:0f:a4:c4:63:82:9d:b7:3a:e7:ec:d8:9e:8d:fa:fb:
b0:2c:15:09:5a:e4:86:75:7a:4b:1b:71:6b:ba:f5:2c:7f:e3:
cd:76:81:c3:11:01:22:ed:37:aa:ae:e6:b0:b4:95:f0:f1:7c:
52:db:35:76
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIURAXA6ZaDvr4Ib4ygSWX/q3GsMEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2
ZmJhYmI4ZDAeFw0yNjExMDMyMDQ4MTNaFw0yNzExMDIyMDUzMTNaMDMxMTAvBgNV
BAMTKDQ2RjY0QzkxQ0YwMDhCRTA0NDA4M0Q0QTQwQjEwMTU4RDgxMkM3MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHWYwHRF0CyInl3bDDoxzO8Fkp
U7K1esI+2ZNGs+8qgxsFBfthQbYDALAHuMTtfBzLF/6hDI8fPHRWIZvzKKp6iHMc
dBacT/mEuIWorHF2xAmh7HHA4BfJ+e8FKCOv1c16fFNKwx3YJlJyG783GqtvPTRW
AhG3z+dX0usjvxvM7V/GonwRHizxuPh5u2sPVU/Q/Xd3PHTZ5gR60x+k6/8bPYRe
80ea8pebLqxBmjAMyFNSz6dhZ6hKSCIXrsV3LsynIbDMXFeSDG5CAS0jqwumMcvq
cTLh1dYarADRreTYYFLnbBCRApKR3KQdkApvho/bEYaC6LZeO6zQNXh2gpdFAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQURvZMkc8Ai+BECD1KQLEBWNgSxy8wHwYDVR0j
BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi
NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct
NnU0MC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct
MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzIzMzM3MmUzMjMw
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABV7dAw
DQYJKoZIhvcNAQELBQADggEBAARgi43V2GqHhta+xHNgsC9TVhePzqEdxGvsVxYB
SBkOScWlvFg/2jBUVN5wND88p8CS/86SeZEvQ2b/QmjUp7NVTaLoTOgvKX8rgexB
OKCyzepThPhhb0A6mgrUuiYqmCDMtUkscgnbNAVZBGEmuag/ghvYlMD7Y+Y37ZhG
++dfW4IzdscVKpKzjnoTTIVl52vz8tofxsv8M2fPUfjeDUN4DRVbSJB5rStKM2Mh
c+X3oGP8tttD8CnLJUNLv8K6/JF/qCWDwKvGQg+kxGOCnbc65+zYno36+7AsFQla
5IZ1eksbcWu69Sx/4812gcMRASLtN6qu5rC0lfDxfFLbNXY=
-----END CERTIFICATE-----
Generated at Wed Nov 4 22:18:31 2026 by rpki-client