Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3232302e302f32342d3234203d3e20323134343332.roa
File: 38352e3233372e3232302e302f32342d3234203d3e20323134343332.roa (raw, json)
Hash identifier: hJxf50OZCQ4u6kkSCdGm3fu/xwFVWRo4D3mMCwpTUR4=
Subject key identifier: EE:97:6A:65:10:85:AF:E8:2D:11:79:DC:CF:32:3A:32:2A:48:38:BA
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 67940DA389C6B2DCA8DE0E2A0681284B51046E73
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3232302e302f32342d3234203d3e20323134343332.roa
Signing time: Wed 26 Aug 2026 05:59:07 +0000
ROA not before: Wed 26 Aug 2026 05:54:07 +0000
ROA not after: Wed 25 Aug 2027 05:59:07 +0000
asID: 214432
IP address blocks: 85.237.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 10:23:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:94:0d:a3:89:c6:b2:dc:a8:de:0e:2a:06:81:28:4b:51:04:6e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Aug 26 05:54:07 2026 GMT
Not After : Aug 25 05:59:07 2027 GMT
Subject: CN=EE976A651085AFE82D1179DCCF323A322A4838BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:6a:ea:26:40:ce:24:2b:5e:09:11:fa:8f:
13:6e:24:d1:98:79:16:cd:c4:3b:a7:13:9c:38:98:
27:5f:04:05:05:dd:88:62:1b:e4:6d:02:cb:06:de:
63:53:fb:00:bf:38:51:f5:8c:a7:83:26:47:5d:c6:
c5:4f:2f:46:0e:80:82:3d:47:e0:3e:e1:e0:83:ad:
bd:68:f9:56:00:25:5b:8a:4a:a3:dd:56:29:71:a7:
0b:d8:61:23:f9:bf:fe:d5:bb:9c:c1:11:dc:52:be:
ff:21:b7:41:a2:8c:04:03:80:45:e9:49:06:cb:4a:
c2:af:fa:1a:51:3e:fb:cf:9b:e7:27:ad:4e:4a:4a:
77:dc:1b:a3:e7:93:11:28:06:e8:c5:1d:b1:2d:30:
14:9e:ec:97:95:9b:24:d9:6b:7a:ad:ab:33:63:6e:
46:57:96:86:9d:62:ad:dc:d8:0b:fa:bd:11:ef:0f:
8e:5b:ed:b4:58:db:f5:88:8f:64:e9:ff:80:d3:17:
d6:71:be:6a:1e:17:fe:e5:97:77:d0:ff:f2:43:e8:
ca:55:82:25:47:19:9c:a9:23:27:24:15:81:f1:e1:
3b:8d:c2:39:c0:0f:ce:11:73:9a:2e:20:e9:ce:1c:
df:8a:f2:e9:c8:c6:b7:db:42:4a:65:3f:a4:83:4b:
d5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:97:6A:65:10:85:AF:E8:2D:11:79:DC:CF:32:3A:32:2A:48:38:BA
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3232302e302f32342d3234203d3e20323134343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.220.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:43:e0:dd:7a:22:ff:07:02:56:2c:31:75:a8:87:63:c1:b7:
24:71:df:ef:af:b4:aa:a0:27:dd:cb:9f:c2:80:20:7c:b3:64:
fa:04:d2:70:67:22:59:dd:35:7a:fd:44:83:78:4a:30:8f:7b:
17:b1:aa:c1:0f:85:52:74:9e:38:4b:4b:ba:a1:6b:a8:0b:00:
04:29:fe:92:30:71:37:5e:04:db:3c:e1:74:9a:26:96:d9:6a:
a2:17:67:f5:9b:6d:f9:3c:e3:bc:f2:7e:f9:5b:dd:3e:7e:14:
86:bd:0d:a1:c5:b3:1b:12:64:8d:99:80:5c:3d:b2:af:50:0f:
d6:0b:50:d1:b0:5f:b5:f4:d5:a7:15:7e:2d:13:56:3e:a3:ce:
2b:c3:2d:3e:0a:eb:72:ae:42:6a:7b:0c:ef:4a:4a:33:fb:84:
88:8c:90:f5:08:f1:ad:fd:80:a0:91:fa:3f:13:d7:41:19:4b:
b3:fc:88:b2:64:e0:23:6b:60:4b:f8:55:5c:ad:2b:1e:70:d8:
20:1f:a9:e4:cd:c8:11:7e:b7:25:8a:bd:a7:e3:b1:c4:f4:df:
63:9c:6e:6b:06:56:d8:7d:19:86:74:13:9f:b2:11:8c:e9:c8:
77:7b:ed:e5:e7:f4:0a:4b:d8:f6:29:20:b5:0f:8e:1a:09:f4:
59:65:44:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 19:47:54 2026 by rpki-client