Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e36322e302f32342d3234203d3e20383334.roa
File: 38352e3135382e36322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: LldXmdrT3K5KJFvGTcq9umBSmykEAe82c2NYswU0bZM=
Subject key identifier: E4:2A:38:D0:25:03:04:25:EC:05:8B:CC:B4:92:49:B5:35:66:62:4C
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 4555077F104186D405B0A206F378355E6DFF8980
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e36322e302f32342d3234203d3e20383334.roa
Signing time: Mon 25 May 2026 00:01:35 +0000
ROA not before: Sun 24 May 2026 23:56:35 +0000
ROA not after: Mon 24 May 2027 00:01:35 +0000
asID: 834
IP address blocks: 85.158.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:55:07:7f:10:41:86:d4:05:b0:a2:06:f3:78:35:5e:6d:ff:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: May 24 23:56:35 2026 GMT
Not After : May 24 00:01:35 2027 GMT
Subject: CN=E42A38D025030425EC058BCCB49249B53566624C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:78:0e:3b:1c:c2:3c:b9:6e:11:8d:8f:a9:e2:
70:12:a2:b9:6c:a6:84:14:9c:c7:a8:47:2f:5e:79:
b3:db:1f:cc:94:ae:ff:b6:c8:9c:b5:8a:0e:72:fe:
07:08:10:f3:a2:da:f4:b3:da:d5:a6:a6:5a:d7:0f:
78:d2:05:91:e4:0f:12:04:9e:bf:85:10:ac:81:c4:
da:86:62:48:28:99:43:3e:3b:aa:4c:39:c2:8c:5c:
72:7b:49:40:ce:8f:f4:db:12:4e:1f:bf:2b:35:19:
f9:ad:5d:77:c1:e0:59:31:7c:f6:57:1a:52:5d:af:
8c:72:56:c7:58:95:82:f9:5a:52:b9:9d:8b:77:fd:
6b:69:f5:79:6f:6a:74:0e:db:4b:06:de:2e:d5:da:
22:ff:d5:59:23:a7:f1:f9:39:39:d3:50:3c:36:ca:
af:61:2a:29:39:a9:b5:b2:1e:95:ac:bd:84:43:da:
e2:81:7c:51:57:e1:e3:5b:66:97:f3:8f:c1:37:ea:
b7:5c:51:34:49:92:15:8a:28:0f:b8:b8:a7:cf:90:
22:6f:eb:b4:0f:f0:87:6f:8b:c6:7f:39:94:6f:22:
c2:15:9a:f0:c2:85:6c:80:ff:bf:71:c7:00:36:21:
3f:36:18:9d:2c:d2:2d:c7:0c:ad:27:52:db:95:47:
0d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2A:38:D0:25:03:04:25:EC:05:8B:CC:B4:92:49:B5:35:66:62:4C
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e36322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.62.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:57:6e:b8:9e:9a:07:9d:c9:01:23:76:b9:6c:d5:c4:ff:2f:
92:10:cb:41:f1:6c:ca:4a:d3:ee:1f:5e:7b:fc:e9:7c:9d:fa:
f1:1a:96:3e:27:46:6f:85:ea:bf:23:dd:10:4d:1d:e9:7b:a5:
42:95:69:c8:7a:fb:da:73:cb:d2:a1:ad:b5:ee:39:a5:5a:77:
cf:00:e3:12:6f:f6:1d:f0:65:f9:02:0f:1a:c1:70:b7:13:36:
50:f0:a3:76:1d:76:1a:f7:e8:4b:67:57:1a:d6:9d:45:f4:63:
49:c2:1f:a0:99:41:0f:81:e8:3f:40:3b:15:3c:ba:f8:0e:8e:
33:0e:7d:3e:15:4c:44:83:19:1d:b7:45:9b:cf:07:22:8e:3d:
60:05:27:1c:bf:e3:ed:09:84:41:2e:5f:07:be:4c:78:29:a1:
39:44:af:fb:38:89:4e:28:f8:ec:c6:c2:cd:74:84:ee:9f:32:
fb:d4:0c:3d:c1:98:00:83:68:f8:18:a4:c3:22:d0:be:a0:dc:
24:c9:60:d8:36:f1:db:89:82:dc:31:4e:09:41:a9:4a:6d:e6:
9b:25:af:3e:db:1b:3b:7e:1e:cf:20:2a:9e:21:fa:fa:87:51:
83:c9:d3:27:1a:1d:9c:88:b8:83:6d:39:a1:29:ce:68:1d:42:
c7:ef:a2:3e
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIURVUHfxBBhtQFsKIG83g1Xm3/iYAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2
ZmJhYmI4ZDAeFw0yNjA1MjQyMzU2MzVaFw0yNzA1MjQwMDAxMzVaMDMxMTAvBgNV
BAMTKEU0MkEzOEQwMjUwMzA0MjVFQzA1OEJDQ0I0OTI0OUI1MzU2NjYyNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSeA47HMI8uW4RjY+p4nASorls
poQUnMeoRy9eebPbH8yUrv+2yJy1ig5y/gcIEPOi2vSz2tWmplrXD3jSBZHkDxIE
nr+FEKyBxNqGYkgomUM+O6pMOcKMXHJ7SUDOj/TbEk4fvys1GfmtXXfB4FkxfPZX
GlJdr4xyVsdYlYL5WlK5nYt3/Wtp9XlvanQO20sG3i7V2iL/1Vkjp/H5OTnTUDw2
yq9hKik5qbWyHpWsvYRD2uKBfFFX4eNbZpfzj8E36rdcUTRJkhWKKA+4uKfPkCJv
67QP8Idvi8Z/OZRvIsIVmvDChWyA/79xxwA2IT82GJ0s0i3HDK0nUtuVRw0nAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQU5Co40CUDBCXsBYvMtJJJtTVmYkwwHwYDVR0j
BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi
NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct
NnU0MC5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct
MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzEzNTM4MmUzNjMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVZ4+MA0G
CSqGSIb3DQEBCwUAA4IBAQCcV264npoHnckBI3a5bNXE/y+SEMtB8WzKStPuH157
/Ol8nfrxGpY+J0Zvheq/I90QTR3pe6VClWnIevvac8vSoa217jmlWnfPAOMSb/Yd
8GX5Ag8awXC3EzZQ8KN2HXYa9+hLZ1ca1p1F9GNJwh+gmUEPgeg/QDsVPLr4Do4z
Dn0+FUxEgxkdt0Wbzwcijj1gBSccv+PtCYRBLl8Hvkx4KaE5RK/7OIlOKPjsxsLN
dITunzL71Aw9wZgAg2j4GKTDItC+oNwkyWDYNvHbiYLcMU4JQalKbeabJa8+2xs7
fh7PICqeIfr6h1GDydMnGh2ciLiDbTmhKc5oHULH76I+
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:04:29 2026 by rpki-client