Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230382e302f32342d3234203d3e20383334.roa
File: 38352e3233372e3230382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 53SZIlMtyqgIJ1ewPZUDUor0VEnfydrTjUJLDRNbhGI=
Subject key identifier: 2A:32:72:69:C4:7E:73:6C:F0:E6:EB:94:1E:A1:55:83:3D:DF:2A:F5
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 327E50A0AF13C2B2D48CBE1BC98787A65859E32B
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230382e302f32342d3234203d3e20383334.roa
Signing time: Sat 26 Sep 2026 04:47:44 +0000
ROA not before: Sat 26 Sep 2026 04:42:44 +0000
ROA not after: Sat 25 Sep 2027 04:47:44 +0000
asID: 834
IP address blocks: 85.237.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:7e:50:a0:af:13:c2:b2:d4:8c:be:1b:c9:87:87:a6:58:59:e3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Sep 26 04:42:44 2026 GMT
Not After : Sep 25 04:47:44 2027 GMT
Subject: CN=2A327269C47E736CF0E6EB941EA155833DDF2AF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:b9:53:04:95:e9:77:23:91:a6:02:d5:0a:
8b:62:9c:d9:15:3b:1b:36:9a:84:82:e0:5c:70:e9:
a7:ba:c1:a4:23:2d:89:8c:45:25:c2:9a:2b:d2:f9:
69:e8:ea:15:1d:35:29:b5:4f:16:47:61:2e:25:4c:
09:72:fa:74:f0:7b:6b:cb:c6:8b:4c:c1:40:d1:b4:
cb:6b:e9:f5:92:bd:6d:ef:5a:ea:2a:8b:2a:ed:6d:
fa:0e:85:04:b0:55:50:23:8c:f5:49:59:09:8d:45:
51:ec:49:83:f7:0c:5b:19:bb:e9:19:ec:6c:60:ef:
21:e4:bc:99:39:07:e5:09:1f:96:05:ef:67:05:1d:
51:1b:ee:15:27:5c:17:71:81:12:75:e9:46:25:ff:
e2:6c:4d:1d:2b:7d:04:99:d6:ad:1c:15:23:c8:bd:
29:be:b9:95:40:89:1d:f6:27:dd:47:02:4f:a0:56:
37:61:25:64:45:f6:07:17:17:f6:51:00:ab:28:07:
ce:27:1d:52:cc:d2:b9:a8:c0:54:95:7c:df:2d:bb:
83:9d:dc:af:3c:08:a0:7a:f4:ba:3e:f2:e4:55:21:
70:ff:f2:09:34:dd:28:c4:20:d4:36:80:68:3e:7a:
ef:cf:79:45:a8:8f:4c:30:be:8b:89:09:f9:2e:9a:
b4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:32:72:69:C4:7E:73:6C:F0:E6:EB:94:1E:A1:55:83:3D:DF:2A:F5
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.208.0/24
Signature Algorithm: sha256WithRSAEncryption
06:13:d6:5a:32:c6:fe:a7:da:ee:74:0b:7a:75:b6:9a:70:ec:
e6:78:cd:f3:2e:cf:ab:28:b4:80:71:c9:39:a1:ac:66:8c:cb:
92:36:61:f0:ff:38:bb:59:d8:5b:60:7f:cc:1b:f4:aa:60:b6:
0a:cd:b8:af:82:6a:59:b6:f1:ac:a5:6a:41:3e:16:39:21:f8:
d1:fc:1b:2a:5b:0c:92:bf:52:01:0b:be:d9:ec:11:78:89:20:
7b:86:ee:8d:6d:24:67:fa:81:bf:71:4d:cb:55:97:df:3a:79:
46:db:7c:02:11:b6:04:b6:6c:70:d5:23:9f:fc:84:47:8d:69:
9a:39:a9:d9:23:ba:54:14:62:fd:dd:8f:43:1b:e7:d1:2c:27:
76:f7:b9:3e:70:45:a7:bc:43:ef:7e:22:05:85:34:23:8c:f4:
16:d7:e5:df:57:c7:c9:fd:5f:c8:2a:37:c0:c5:5d:87:31:e3:
13:32:12:41:27:a6:27:b3:d6:08:d0:f5:33:fb:70:dc:c5:27:
f6:6c:af:ff:7c:b5:ab:61:c3:88:b9:e1:84:d6:ae:5b:16:64:
d0:f8:50:a6:35:32:0f:ec:d3:b9:1c:be:bb:d7:e1:fa:e9:5e:
c3:de:7a:8b:82:81:aa:af:0b:8e:ee:85:70:9b:be:24:e4:14:
b6:96:4c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:34:38 2026 by rpki-client