Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3232302e302f32342d3234203d3e20383334.roa
File: 38352e3233372e3232302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: iuSXHy0eqUa/fwDeilt/+VKMhrPk3/2cyguUzgj9Alk=
Subject key identifier: 79:69:B2:1B:2A:5D:FD:42:31:CA:1D:97:ED:2B:9B:52:AD:C0:38:DA
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 3CCEA14FDEDDD374258AF138D6951E402F7963AC
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3232302e302f32342d3234203d3e20383334.roa
Signing time: Sat 26 Sep 2026 04:47:04 +0000
ROA not before: Sat 26 Sep 2026 04:42:04 +0000
ROA not after: Sat 25 Sep 2027 04:47:04 +0000
asID: 834
IP address blocks: 85.237.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 06:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:ce:a1:4f:de:dd:d3:74:25:8a:f1:38:d6:95:1e:40:2f:79:63:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Sep 26 04:42:04 2026 GMT
Not After : Sep 25 04:47:04 2027 GMT
Subject: CN=7969B21B2A5DFD4231CA1D97ED2B9B52ADC038DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9a:1c:95:1f:5d:af:1e:fe:3d:de:56:f3:c3:
9f:d0:08:36:8f:df:24:e8:94:37:17:8e:5f:12:9b:
6d:7a:32:80:09:63:4f:55:39:93:1b:4d:02:ca:45:
b6:df:da:b4:4b:1e:a0:b1:67:40:26:70:d8:63:c2:
d5:cb:3b:3a:3b:0f:1e:e7:50:10:3d:85:7c:17:9e:
c1:fe:92:0e:d4:02:48:8e:78:5d:a0:bc:1c:8b:68:
a1:8f:f3:12:4f:77:da:92:a0:a6:14:4d:c0:17:35:
c3:10:03:c5:78:31:50:f9:52:e3:b6:5b:cc:1c:9d:
1b:00:81:a9:5d:8f:85:55:3e:bc:0b:71:43:aa:08:
db:0b:4a:c7:e0:af:25:58:ad:23:ba:d9:75:85:5e:
39:99:f3:48:78:a7:a8:3c:cf:ea:b6:ee:36:19:0e:
33:1d:31:e4:c5:00:7e:ee:fb:90:74:ce:8b:f3:e8:
20:74:3c:7b:4d:99:d7:bd:28:44:84:5f:d1:09:20:
61:43:8a:fd:66:02:3d:ff:13:67:25:30:68:78:0c:
7e:9e:c3:87:ba:7c:58:8f:34:b3:d7:85:a2:f5:68:
3c:f8:32:f9:2b:8c:fb:95:18:b7:1b:48:0f:6c:64:
34:35:fd:7f:85:ab:28:8d:11:18:d0:5a:ff:e9:2e:
33:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:69:B2:1B:2A:5D:FD:42:31:CA:1D:97:ED:2B:9B:52:AD:C0:38:DA
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3232302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.220.0/24
Signature Algorithm: sha256WithRSAEncryption
84:e7:46:e3:90:0a:e3:49:0b:00:71:04:26:f9:99:99:c6:35:
da:49:86:c9:f7:bb:d2:b7:cc:90:f4:f0:6c:ae:d9:8d:bd:13:
ad:92:31:b1:65:31:9c:9a:e3:4d:40:44:b8:16:d1:14:09:fe:
de:f9:f5:0b:ac:84:13:23:59:52:a9:71:12:ff:31:79:f7:14:
bb:ef:fc:ae:0e:1e:e7:77:e6:0b:6c:df:fa:03:fd:e7:9e:52:
36:85:4e:71:e9:73:55:b5:8d:0f:b8:cb:0c:57:33:57:eb:39:
99:ba:dd:45:09:95:83:23:d2:dd:44:39:12:1c:d3:5e:bb:b9:
37:88:a0:45:e7:d6:a0:4a:1a:d4:94:cb:1d:70:e5:af:1b:f4:
c5:cb:d8:66:87:b0:a7:12:f8:49:9d:50:4f:be:d5:8f:a3:d8:
13:fa:82:8a:bd:85:25:e0:81:7e:9f:ab:20:9a:ae:ab:85:4a:
37:f5:80:da:c9:8a:65:31:38:91:dd:ad:48:5c:ae:00:46:6c:
37:e9:64:b6:c0:3c:86:58:2d:3a:7b:5a:4e:b7:6f:cf:1d:d5:
45:ae:71:92:f8:88:f0:c8:ea:5a:40:d8:ff:c8:d9:03:5f:a1:
cf:f6:97:8e:1c:40:8e:ed:46:42:27:2f:0e:71:a8:42:2d:6e:
4f:18:0a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:41:50 2026 by rpki-client