Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230392e302f32342d3234203d3e20323138333232.roa
File: 38352e3233372e3230392e302f32342d3234203d3e20323138333232.roa (raw, json)
Hash identifier: 0o47pTiE/b82yZQI/Wwpb4IJHwfRiCvNnPd/dCrHns0=
Subject key identifier: FB:DC:65:84:7D:6F:0C:5B:EB:EA:81:E5:D8:EE:D9:35:DB:FF:96:D4
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 156492741378962AE8732729F148A5B4E03853F8
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230392e302f32342d3234203d3e20323138333232.roa
Signing time: Tue 03 Nov 2026 20:50:51 +0000
ROA not before: Tue 03 Nov 2026 20:45:51 +0000
ROA not after: Tue 02 Nov 2027 20:50:51 +0000
asID: 218322
IP address blocks: 85.237.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 21:24:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:64:92:74:13:78:96:2a:e8:73:27:29:f1:48:a5:b4:e0:38:53:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Nov 3 20:45:51 2026 GMT
Not After : Nov 2 20:50:51 2027 GMT
Subject: CN=FBDC65847D6F0C5BEBEA81E5D8EED935DBFF96D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ff:5f:e8:64:27:64:3f:ea:d1:d2:c8:e4:25:
63:93:b6:3f:6d:b1:1b:98:ec:e4:24:dc:99:3c:a2:
4f:1e:76:d7:c0:51:ae:e3:8f:1b:8a:9f:19:f9:05:
8a:08:60:29:1a:73:87:6f:6f:1d:42:e1:18:88:1e:
2c:76:74:de:10:f4:e2:80:30:87:af:9e:b4:50:60:
cd:08:c7:e6:a4:a3:09:8f:0c:aa:ac:15:31:fc:eb:
df:2f:78:53:22:c8:95:2c:3e:79:f5:ab:27:fa:2a:
33:80:ec:84:ff:b0:01:81:5d:c7:66:76:0b:b0:c6:
05:a9:1a:b8:47:54:cc:20:3f:1e:9a:bc:fa:31:7c:
37:15:7b:df:1c:49:91:b1:6f:7e:61:6c:4d:72:bc:
73:d2:0e:9f:e1:0f:b8:e1:57:e9:25:d3:44:cb:da:
4d:7d:6c:c6:a8:62:47:e7:10:ad:ae:48:4e:92:ae:
5e:f0:b6:0e:3b:9f:da:36:08:b9:ca:26:23:f9:63:
4a:1d:02:0d:3a:45:67:64:db:b7:fc:1d:ae:3c:27:
57:40:ff:5d:d4:a3:97:20:c6:a2:51:b9:2e:f2:c1:
1a:09:1f:bc:f3:63:0c:f1:b8:07:5c:28:33:37:70:
7d:60:33:bc:d6:a2:91:21:b1:5b:e7:9f:5d:af:78:
25:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DC:65:84:7D:6F:0C:5B:EB:EA:81:E5:D8:EE:D9:35:DB:FF:96:D4
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230392e302f32342d3234203d3e20323138333232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.209.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:d3:ef:d8:19:00:19:4e:48:f6:c6:eb:58:3f:66:7a:ff:d1:
c8:01:ee:d2:df:be:cf:03:ec:73:ef:c7:17:0f:33:44:98:ed:
ef:8a:e5:e7:a9:40:03:ff:05:da:89:43:13:41:8e:1b:c2:b4:
b8:44:46:cb:f9:7f:1c:43:6a:95:50:5d:91:c9:78:15:18:48:
47:c6:8a:f4:47:fe:25:30:80:c1:c6:3a:21:33:17:5a:a3:49:
6b:bf:8f:53:c6:79:9b:be:8d:69:fa:56:ab:13:b4:91:8b:e0:
f2:23:6f:78:7e:f6:1c:17:7a:08:9d:09:e2:9b:c5:b0:fb:3d:
97:18:67:50:01:96:e5:7b:51:1c:3a:d3:ea:89:27:5e:bf:f9:
2d:e4:70:5d:1d:14:04:1e:d1:a1:d3:3d:54:59:d8:1b:ae:66:
38:78:da:55:eb:13:af:57:06:11:82:a7:9a:34:7b:37:e6:ae:
66:c7:6d:85:d3:73:44:0b:61:41:23:93:15:92:df:98:c0:3a:
9b:5e:74:ca:91:cf:06:20:0c:c4:83:83:b5:ae:24:a9:de:6e:
e9:cb:3a:f7:59:e2:4c:82:14:25:07:c2:8f:58:f0:70:b4:dd:
45:0e:b7:20:31:45:c1:90:d6:ef:ff:6b:c2:ec:00:5f:53:1d:
14:9b:df:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:28:56 2026 by rpki-client