Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3231372e302f32342d3234203d3e20383334.roa
File: 38352e3233372e3231372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 2zrPEvt/HBle4JS0NflfYm1XqWx9nwitPa9YPAU25tY=
Subject key identifier: AC:27:86:48:18:D6:8B:C0:52:E2:8E:39:C8:DA:BB:ED:61:E9:43:9C
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 2E512FC52EE37054FAA15E0A61F6ACDA10147D87
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3231372e302f32342d3234203d3e20383334.roa
Signing time: Sun 06 Sep 2026 03:30:48 +0000
ROA not before: Sun 06 Sep 2026 03:25:48 +0000
ROA not after: Sun 05 Sep 2027 03:30:48 +0000
asID: 834
IP address blocks: 85.237.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 13:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:51:2f:c5:2e:e3:70:54:fa:a1:5e:0a:61:f6:ac:da:10:14:7d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Sep 6 03:25:48 2026 GMT
Not After : Sep 5 03:30:48 2027 GMT
Subject: CN=AC27864818D68BC052E28E39C8DABBED61E9439C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:01:51:bc:e4:88:ae:d4:42:94:87:ed:fe:2c:
dc:43:e9:05:3b:71:0e:0d:59:32:a8:16:a6:ff:e4:
f3:88:c7:7b:29:5e:45:b5:16:cd:2f:40:9a:07:15:
77:20:cb:ce:6a:b8:dd:12:97:3a:89:50:cf:e7:12:
8a:40:80:0f:52:4d:b2:83:8e:af:7e:3b:7d:0f:23:
8b:74:43:ed:92:27:ee:df:47:07:c2:09:91:40:d2:
b8:87:94:21:e2:3d:9a:1b:de:d8:f1:47:db:b4:10:
a3:06:b7:32:79:5f:d4:63:d1:47:28:53:ea:65:9d:
c4:b3:89:ee:d3:0a:57:da:fd:11:f4:58:07:40:88:
ec:3e:40:d1:e8:4b:d0:46:7a:b7:11:67:12:59:55:
ae:25:84:26:64:76:d5:4f:db:31:29:8d:51:71:e3:
08:8e:a2:8c:b7:d6:0b:eb:48:6e:75:34:22:9b:cd:
31:62:29:9a:73:c6:64:11:31:12:d2:87:a3:8f:6f:
22:ce:63:68:d3:7c:5c:3a:2f:c1:9b:ae:d5:5f:aa:
4a:8e:0c:d1:da:d9:7b:3f:12:7f:72:dd:d3:30:db:
98:3e:f7:b5:69:47:c4:e2:19:56:0e:8f:8d:a6:43:
41:59:18:c8:71:93:c2:03:e2:e0:99:b9:a2:e3:4c:
53:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:27:86:48:18:D6:8B:C0:52:E2:8E:39:C8:DA:BB:ED:61:E9:43:9C
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3231372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.217.0/24
Signature Algorithm: sha256WithRSAEncryption
00:b2:4c:ba:56:12:ff:50:6f:fe:0e:36:f0:bb:3d:b0:04:08:
f9:e1:59:00:b0:af:e0:6e:0c:33:19:6a:aa:d7:20:6d:be:ce:
29:8a:c5:1b:c9:c2:14:8d:51:17:5f:9a:27:6e:e4:16:8c:4e:
31:5d:c1:b8:67:e5:ba:0c:0e:06:42:47:79:5b:8d:a7:23:38:
7e:23:69:38:e8:f3:41:40:a1:35:bd:3f:37:d9:89:38:22:f1:
6c:d7:a3:9b:31:12:50:6f:ba:58:f5:f9:98:f3:ea:24:a1:3e:
b7:2b:be:0c:6d:2a:48:d4:ca:7e:0b:1a:58:8d:17:52:ac:35:
e2:47:40:e3:95:ab:3e:eb:8e:a6:84:dd:36:c9:3a:a5:23:ac:
76:c1:cf:2d:7f:24:08:cf:07:ba:61:2c:5f:9c:a5:be:65:90:
85:bf:af:69:e3:10:d4:e1:f9:0a:96:fb:2d:a8:3b:d8:4d:2b:
aa:fc:12:1c:98:eb:41:c7:bf:25:a6:3c:b8:38:b8:19:5b:2b:
36:9c:20:87:49:83:e4:17:d4:fd:f0:d7:81:05:69:ca:49:fc:
eb:b4:4c:5f:d7:90:4d:89:72:fe:3d:b9:4c:c2:ab:35:d4:bf:
72:cc:bc:9b:cd:c3:2b:6e:22:73:7e:c4:bf:8c:25:5f:ad:55:
50:4d:31:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:27:30 2026 by rpki-client