Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e36322e302f32342d3234203d3e203239383032.roa
File: 38352e3135382e36322e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: 18HSqmknCFDEGtlkapVs0JA/WlAToAPjsJagTBltHB0=
Subject key identifier: CE:E2:DA:D7:7B:F9:1A:79:7B:82:B6:67:68:CB:D4:15:BC:05:06:A9
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 4EA30CB77E59F8F9294E18EF55B9AFD8FCBB513C
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e36322e302f32342d3234203d3e203239383032.roa
Signing time: Tue 10 Feb 2026 00:15:58 +0000
ROA not before: Tue 10 Feb 2026 00:10:58 +0000
ROA not after: Tue 09 Feb 2027 00:15:58 +0000
asID: 29802
IP address blocks: 85.158.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:a3:0c:b7:7e:59:f8:f9:29:4e:18:ef:55:b9:af:d8:fc:bb:51:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Feb 10 00:10:58 2026 GMT
Not After : Feb 9 00:15:58 2027 GMT
Subject: CN=CEE2DAD77BF91A797B82B66768CBD415BC0506A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c6:f2:67:d2:ed:32:5e:ab:3c:66:fb:74:8e:
9a:89:b6:2f:6d:09:f3:c4:69:25:c7:a7:76:57:e9:
95:ce:cd:e1:08:45:ed:c3:5c:60:b0:99:fb:5e:a2:
04:68:6a:1f:e7:07:6f:3e:ce:9f:6b:1c:d3:b4:ba:
fb:89:4f:1a:8b:11:ca:d0:73:8d:45:bc:13:cf:5b:
4d:20:ac:88:60:76:46:4b:af:23:9b:ba:31:dd:d9:
cf:c8:52:d1:ac:09:47:7f:43:40:57:fa:c2:93:c0:
93:40:0a:a2:d2:3d:d6:53:07:6b:c4:a6:25:5f:d1:
6a:0b:7b:f5:66:52:90:8e:04:92:7c:e2:21:a6:30:
0e:6d:10:32:81:c5:20:7e:12:43:55:6a:cd:6f:00:
cb:50:33:a5:50:07:cb:01:64:ed:3f:59:2e:6f:93:
8b:9f:fc:e9:31:0a:b0:49:f6:a6:56:09:6d:aa:6d:
4b:ae:72:e4:95:f9:9a:1d:24:05:13:bd:11:99:40:
12:26:5c:a5:d7:57:f2:c9:27:87:da:9e:07:73:fa:
3e:78:32:3f:2a:13:b1:5f:d4:a5:c1:11:02:ae:3a:
7a:5b:f7:84:ed:be:45:bb:07:43:92:60:09:b6:d3:
01:6b:87:8e:22:63:a4:00:57:dc:b3:1d:65:dc:d2:
82:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E2:DA:D7:7B:F9:1A:79:7B:82:B6:67:68:CB:D4:15:BC:05:06:A9
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e36322e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.62.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f3:3c:6e:26:65:d6:7b:49:eb:ff:71:bd:f4:05:f9:41:b2:
6f:5b:5b:c6:4e:94:24:e8:a2:9f:c0:d9:cf:b9:d2:02:7c:e8:
81:26:6a:b2:6c:fe:bd:47:dd:35:e4:69:40:98:bd:1e:72:8b:
38:ac:ac:6d:d2:08:66:3e:c1:e7:88:9b:06:22:3c:07:a8:70:
2c:0a:ee:c0:14:23:1c:ee:a8:94:77:55:8b:8d:da:44:68:9a:
14:c0:31:40:a5:92:69:01:f0:65:16:41:71:48:4f:a2:64:80:
4d:01:7c:8e:8e:45:9e:13:dc:56:b5:3a:b2:31:29:07:e0:8f:
fe:fb:72:db:a2:c1:b8:86:b5:38:ed:a9:92:bf:d3:92:7e:98:
0e:06:5a:87:e6:6c:d4:47:3c:89:c8:3c:9e:69:3e:ae:ef:9b:
f6:d7:d0:43:33:15:2f:89:e8:c0:55:e9:e1:8c:29:2c:12:f2:
01:5e:98:2c:80:6e:16:ac:90:6f:b7:b5:f3:1f:fb:2a:bc:d9:
bc:f2:52:55:db:5c:ca:c0:92:d8:4c:cc:4b:dd:88:55:22:e2:
a1:35:4f:07:a9:36:ba:de:50:67:54:f3:05:f4:c2:45:87:f2:
dc:71:48:a5:f5:cb:fb:3c:01:99:37:bc:b3:dd:5d:cf:a1:27:
ca:14:9b:36
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUTqMMt35Z+PkpThjvVbmv2Py7UTwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2
ZmJhYmI4ZDAeFw0yNjAyMTAwMDEwNThaFw0yNzAyMDkwMDE1NThaMDMxMTAvBgNV
BAMTKENFRTJEQUQ3N0JGOTFBNzk3QjgyQjY2NzY4Q0JENDE1QkMwNTA2QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsxvJn0u0yXqs8Zvt0jpqJti9t
CfPEaSXHp3ZX6ZXOzeEIRe3DXGCwmfteogRoah/nB28+zp9rHNO0uvuJTxqLEcrQ
c41FvBPPW00grIhgdkZLryObujHd2c/IUtGsCUd/Q0BX+sKTwJNACqLSPdZTB2vE
piVf0WoLe/VmUpCOBJJ84iGmMA5tEDKBxSB+EkNVas1vAMtQM6VQB8sBZO0/WS5v
k4uf/OkxCrBJ9qZWCW2qbUuucuSV+ZodJAUTvRGZQBImXKXXV/LJJ4fangdz+j54
Mj8qE7Ff1KXBEQKuOnpb94TtvkW7B0OSYAm20wFrh44iY6QAV9yzHWXc0oINAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUzuLa13v5Gnl7grZnaMvUFbwFBqkwHwYDVR0j
BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi
NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct
NnU0MC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct
MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzEzNTM4MmUzNjMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzOTM4MzAzMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFWe
PjANBgkqhkiG9w0BAQsFAAOCAQEAcPM8biZl1ntJ6/9xvfQF+UGyb1tbxk6UJOii
n8DZz7nSAnzogSZqsmz+vUfdNeRpQJi9HnKLOKysbdIIZj7B54ibBiI8B6hwLAru
wBQjHO6olHdVi43aRGiaFMAxQKWSaQHwZRZBcUhPomSATQF8jo5FnhPcVrU6sjEp
B+CP/vty26LBuIa1OO2pkr/Tkn6YDgZah+Zs1Ec8icg8nmk+ru+b9tfQQzMVL4no
wFXp4YwpLBLyAV6YLIBuFqyQb7e18x/7KrzZvPJSVdtcysCS2EzMS92IVSLioTVP
B6k2ut5QZ1TzBfTCRYfy3HFIpfXL+zwBmTe8s91dz6EnyhSbNg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:05:12 2026 by rpki-client