Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e35392e302f32342d3234203d3e20383334.roa
File: 38352e3135382e35392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: BfJqjSj7cDomO0Yiq0/6xqQMdRThPXXE/JBsuU1aGEU=
Subject key identifier: 12:9F:5B:98:F0:A2:D4:6F:9A:B9:A7:65:40:D6:29:0C:D9:2C:E5:1F
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 630108E1483EC8659F0C41ACB0EE6A361877F1E5
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e35392e302f32342d3234203d3e20383334.roa
Signing time: Sun 20 Sep 2026 06:18:14 +0000
ROA not before: Sun 20 Sep 2026 06:13:14 +0000
ROA not after: Sun 19 Sep 2027 06:18:14 +0000
asID: 834
IP address blocks: 85.158.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:01:08:e1:48:3e:c8:65:9f:0c:41:ac:b0:ee:6a:36:18:77:f1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Sep 20 06:13:14 2026 GMT
Not After : Sep 19 06:18:14 2027 GMT
Subject: CN=129F5B98F0A2D46F9AB9A76540D6290CD92CE51F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c5:12:78:39:74:12:13:8e:47:2c:29:c8:88:
b0:14:a9:eb:29:20:ce:1d:7f:04:6a:3b:d0:de:fd:
a1:75:79:3f:ee:84:b1:76:a8:c4:26:d3:08:ed:b9:
be:e1:79:ed:6c:53:8b:0b:a2:86:37:fe:a4:8b:b2:
4f:d2:ed:7c:c3:47:c5:bf:42:63:d0:b6:78:73:ad:
24:58:e2:97:6d:93:3a:af:75:f0:24:27:cd:f0:61:
e6:ee:6d:3f:29:04:a8:45:66:a9:43:14:a4:ff:9c:
5e:13:78:fd:21:b9:e4:58:c3:98:5e:a8:84:8e:0e:
69:8c:a8:8f:bc:93:d1:e9:85:e4:59:a5:94:e0:df:
96:49:6f:9a:73:b1:c4:fa:ea:c4:9a:b2:49:fb:58:
60:85:0d:10:e9:30:ff:4b:02:06:e1:4d:a5:3a:bf:
5b:0d:6e:61:0f:8e:24:e0:ab:95:e2:75:ee:53:a6:
09:9a:52:f7:94:06:43:85:e5:4f:1d:f6:7c:53:65:
41:ac:ed:13:1d:b0:83:3a:0e:3a:5d:47:ba:e8:ac:
b5:23:35:b0:3e:9f:36:5b:f7:0d:94:4d:02:97:4a:
20:01:69:9a:1b:9e:e6:60:e9:ac:61:d7:3a:4c:38:
bd:d2:0c:0f:cc:da:f0:46:eb:8c:36:fc:bf:7a:dd:
e0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9F:5B:98:F0:A2:D4:6F:9A:B9:A7:65:40:D6:29:0C:D9:2C:E5:1F
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e35392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.59.0/24
Signature Algorithm: sha256WithRSAEncryption
18:3a:80:6f:99:ad:bd:ca:aa:17:eb:15:23:38:46:50:f0:35:
8a:d0:11:69:d5:b8:02:1c:4d:17:b8:55:f6:5b:d4:a5:31:49:
11:77:c5:f5:f0:b4:23:c1:16:d6:e9:b5:d9:1f:7d:f3:d7:a8:
6c:b5:5c:15:03:fe:1a:d6:20:c0:82:40:83:ed:f6:45:63:93:
30:2a:56:42:bf:10:0b:09:71:08:58:39:ae:01:35:05:68:3e:
eb:5c:cb:80:a8:be:07:2f:42:a1:fc:ea:54:64:c9:67:03:5e:
4d:e1:01:7b:e7:8d:43:88:2e:b7:01:21:c8:bc:dc:39:c2:d7:
23:52:ca:d8:71:af:9c:63:2b:53:f9:33:81:24:ff:af:90:09:
c4:68:a2:1b:f1:f9:63:a8:6b:a7:b4:9d:70:7d:3d:f8:62:c5:
b4:cd:dd:17:19:5b:7e:d3:9b:33:b0:27:eb:8a:19:e1:c5:8f:
9f:40:e3:ba:30:d0:50:0f:6f:45:50:24:d7:b3:46:5b:7b:74:
5e:46:66:d2:26:da:c4:36:6a:84:22:fb:a7:cf:ce:37:a4:c6:
56:d4:bd:f6:ea:41:08:75:9b:df:6a:6c:70:2f:30:9a:c3:fd:
f5:60:0f:9f:8b:e3:aa:9c:5a:92:6c:1e:83:81:9a:1c:ed:9a:
ce:ef:67:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:12:40 2026 by rpki-client