Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3232302e302f32342d3234203d3e20323134303235.roa
File: 38352e3233372e3232302e302f32342d3234203d3e20323134303235.roa (raw, json)
Hash identifier: ZlNZaBI9Pxxw4ZfONGcO0xzf5ymzVE3gdk8Rtard1Nc=
Subject key identifier: 55:97:63:EA:A2:1A:40:C5:C5:06:22:04:53:81:46:77:E6:28:85:F2
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 6E0CA0B7068D93FC64CE4B89C0F5AB2A7F687F58
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3232302e302f32342d3234203d3e20323134303235.roa
Signing time: Tue 31 Mar 2026 12:05:18 +0000
ROA not before: Tue 31 Mar 2026 12:00:18 +0000
ROA not after: Tue 30 Mar 2027 12:05:18 +0000
asID: 214025
IP address blocks: 85.237.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:0c:a0:b7:06:8d:93:fc:64:ce:4b:89:c0:f5:ab:2a:7f:68:7f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Mar 31 12:00:18 2026 GMT
Not After : Mar 30 12:05:18 2027 GMT
Subject: CN=559763EAA21A40C5C506220453814677E62885F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:be:52:99:88:e8:cc:4b:6b:54:a7:d7:2c:
78:6c:cd:f0:8a:1f:8f:a3:58:90:37:c7:82:89:81:
80:17:37:e6:66:14:92:95:6a:6c:c7:e9:02:ee:c7:
60:5f:2d:a2:c4:6b:58:49:25:c5:6f:ea:d2:da:61:
5e:da:20:1e:c3:87:8f:0a:0a:4c:ba:db:8b:44:19:
5e:6d:dc:3b:d6:79:cc:1b:65:10:f2:ce:c0:3c:05:
04:c3:95:da:11:b8:81:2e:c7:eb:ef:d9:80:3c:1f:
c4:5c:26:ef:4f:7c:f9:87:f5:f6:df:ad:19:70:28:
95:63:91:9d:d8:19:83:35:a2:7d:01:c3:98:75:aa:
1f:8d:56:12:26:dd:2e:16:2b:b9:18:c4:e9:aa:df:
0e:0e:f4:a6:83:e3:55:5f:c0:8e:7c:9c:75:89:2b:
39:ed:39:a4:e1:34:be:df:9f:56:d9:ea:60:ef:7d:
fe:26:6b:07:75:18:7c:d7:52:ef:b7:f6:ac:9c:14:
a1:cd:be:75:26:a2:50:08:b5:b4:56:eb:2e:df:7c:
eb:6a:60:af:fb:62:1b:ed:59:c6:c2:cc:6a:36:3d:
1f:03:56:69:55:a5:a6:80:3a:fa:f5:b0:5a:70:bb:
76:82:f0:c6:49:33:cc:d5:d8:dc:0a:a0:10:ea:fb:
45:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:97:63:EA:A2:1A:40:C5:C5:06:22:04:53:81:46:77:E6:28:85:F2
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3232302e302f32342d3234203d3e20323134303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.220.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:b5:3c:f8:fd:63:9a:f8:6c:4e:ef:f1:09:8f:bc:58:4b:53:
29:45:00:64:57:99:ab:74:e1:35:bc:49:76:b2:b6:39:c5:a1:
96:ed:74:76:98:65:38:3a:35:fe:9c:e1:c6:1c:85:5d:e7:d3:
d0:ce:53:76:61:a1:56:a8:42:41:96:d2:15:af:6f:c5:c8:06:
7d:70:bf:ad:b1:17:6a:95:3a:59:4a:82:e2:0c:9e:33:c2:93:
c1:cf:9e:df:99:de:10:60:0f:54:75:60:dd:c6:d9:65:8f:71:
6e:62:32:04:14:4b:5c:02:79:bc:fe:42:2a:cb:ee:3d:19:5d:
ab:85:6c:21:a9:6c:11:33:31:ce:80:67:c2:b3:4d:c7:89:20:
61:74:f1:7b:a9:bd:a4:5b:3f:82:74:ba:ac:5e:0f:c6:1a:9c:
45:82:80:b9:98:11:21:88:9f:bf:72:8d:34:ef:87:a3:32:6e:
b5:e1:62:c6:bb:b5:8f:ea:ed:e4:3a:87:bc:47:ed:2c:66:34:
fd:9b:f4:4f:be:11:a0:2e:55:7f:8a:02:c6:69:16:3d:f4:4f:
3d:62:f3:52:38:25:c1:6e:db:af:7d:99:fa:13:1c:76:3f:74:
82:a0:3c:11:6a:92:6b:58:a6:b5:1f:e7:d6:d3:5d:8d:05:0e:
01:d6:5c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:39:47 2026 by rpki-client