Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3231372e302f32342d3234203d3e20343031333632.roa
File: 38352e3233372e3231372e302f32342d3234203d3e20343031333632.roa (raw, json)
Hash identifier: Avlf6da0tjsnaRBTN3BZkfJrRxYcha8EpZTRNIgqlh4=
Subject key identifier: E7:C5:33:12:CB:ED:F4:02:44:CB:83:21:A8:C6:87:B8:03:C4:A4:3C
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 79AD8D6F4701D7A55552221B966CC732F571B282
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3231372e302f32342d3234203d3e20343031333632.roa
Signing time: Thu 06 Aug 2026 03:36:37 +0000
ROA not before: Thu 06 Aug 2026 03:31:37 +0000
ROA not after: Thu 05 Aug 2027 03:36:37 +0000
asID: 401362
IP address blocks: 85.237.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 00:46:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:ad:8d:6f:47:01:d7:a5:55:52:22:1b:96:6c:c7:32:f5:71:b2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Aug 6 03:31:37 2026 GMT
Not After : Aug 5 03:36:37 2027 GMT
Subject: CN=E7C53312CBEDF40244CB8321A8C687B803C4A43C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:36:0d:ef:a7:04:cd:dd:a1:12:bb:8b:1a:6b:
09:8c:33:ff:09:d6:3d:f0:a5:ca:26:22:58:46:96:
7c:a6:02:4d:e0:86:47:f8:c9:78:e7:ae:e7:86:0d:
f9:56:67:56:7f:cb:07:72:00:da:53:bf:b9:c1:d3:
47:49:6d:15:cd:92:bd:c3:f6:4a:23:54:6e:b9:1b:
27:37:ef:f7:79:f3:66:df:5e:e4:1e:88:d4:f5:bc:
e4:2f:b8:29:99:6e:d3:2c:fa:0c:50:99:96:5b:ea:
70:55:32:47:bc:30:d2:b3:57:47:74:5b:db:5a:60:
db:16:e2:47:27:35:bd:72:cd:26:d9:03:2d:15:16:
b6:7f:fa:70:9c:d6:41:7e:22:3f:b4:c7:e2:01:36:
39:fa:ef:4b:cb:4d:58:f2:c1:a1:30:1a:86:d2:27:
f5:b9:08:c3:27:37:cd:3e:49:d8:a2:17:c3:7b:0c:
4f:38:61:7c:b1:c0:48:41:e9:ef:2c:f9:8a:4c:0e:
ea:f9:0f:bc:27:2e:a3:f9:53:d3:bb:44:bb:bd:00:
cc:7b:5e:81:e3:66:b9:cf:0b:33:31:a4:1c:04:03:
70:2a:63:ec:9b:ed:6b:b7:79:53:0c:32:04:52:07:
72:5c:96:e5:ba:74:61:65:41:f3:90:8a:2d:87:b1:
4d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C5:33:12:CB:ED:F4:02:44:CB:83:21:A8:C6:87:B8:03:C4:A4:3C
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3231372e302f32342d3234203d3e20343031333632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.217.0/24
Signature Algorithm: sha256WithRSAEncryption
06:e0:63:2b:e5:1a:cd:59:5b:4f:30:59:d1:14:84:e8:86:f6:
91:32:2f:f0:8c:87:34:e5:dd:39:3c:85:7b:2f:4f:25:50:cf:
dd:81:b3:be:28:1b:3e:24:aa:ea:85:92:27:9b:2f:a2:39:c2:
8f:6e:3e:2d:4f:ec:48:0f:e0:e0:3b:e9:08:64:e3:7d:67:ff:
5c:3b:40:d9:3a:79:d6:0f:8f:e5:32:ba:cb:92:b4:40:e1:2f:
05:92:0d:93:5c:ec:00:c8:78:ec:33:dc:12:66:fa:f8:43:a7:
99:c7:f1:ca:c9:23:86:81:39:a6:e9:bf:47:3f:22:20:0a:22:
53:21:52:f0:00:c9:f7:af:3b:1a:c5:69:25:76:b8:09:b3:4b:
b4:77:ed:17:e5:00:4e:d7:23:fa:54:fe:c0:d1:0f:f0:dc:b8:
3a:41:65:dd:4e:73:a4:78:4f:aa:14:1b:df:9f:df:19:8e:75:
d7:6c:16:ce:9a:de:86:be:31:11:a5:b7:41:fd:ba:ce:ba:81:
ac:5b:8f:c6:56:16:f6:94:27:71:a6:e1:b6:8a:08:57:a7:a6:
2f:be:65:33:2e:74:a6:0b:e1:f0:80:81:dc:a0:f0:6f:ea:09:
90:a5:b9:a3:e9:7f:b1:66:d4:bd:76:5f:a0:de:e7:6e:20:91:
f4:78:b1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:09:19 2026 by rpki-client