Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31302e302f32332d3234203d3e20383334.roa
File: 38372e3235342e31302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: l0t8ICvVIvlIV+AR+CpQg130G3E7cVDVhiMIlHw2OaQ=
Subject key identifier: 97:85:A4:36:C0:EB:61:4C:6B:16:64:67:2B:2B:7F:D6:8D:CE:68:D1
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 7CDCE4A9212B267794C95A4ECC24DCD0859E028C
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31302e302f32332d3234203d3e20383334.roa
Signing time: Fri 11 Sep 2026 08:28:29 +0000
ROA not before: Fri 11 Sep 2026 08:23:29 +0000
ROA not after: Fri 10 Sep 2027 08:28:29 +0000
asID: 834
IP address blocks: 87.254.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:dc:e4:a9:21:2b:26:77:94:c9:5a:4e:cc:24:dc:d0:85:9e:02:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Sep 11 08:23:29 2026 GMT
Not After : Sep 10 08:28:29 2027 GMT
Subject: CN=9785A436C0EB614C6B1664672B2B7FD68DCE68D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:14:36:d6:d8:67:91:ca:51:69:4c:89:62:1a:
76:df:de:65:b9:21:29:0f:38:3f:40:08:df:e4:a6:
55:53:99:7b:ca:ae:b4:a1:b8:07:e3:ae:a8:89:24:
a0:9d:48:cd:eb:7a:1f:21:2c:f7:35:92:92:c5:96:
da:ba:32:2e:03:6b:38:b9:03:71:52:3d:65:05:d9:
17:75:d6:b0:e2:fc:a1:fd:40:a1:71:86:a9:3b:6f:
bc:3f:b7:cb:53:65:7f:57:60:c6:17:f6:bb:32:77:
1b:83:bf:3b:0b:ad:d4:cf:14:a3:0a:b1:3b:2c:ab:
f0:99:0c:4a:7b:19:ac:39:17:35:be:80:35:7c:9a:
bc:49:b3:e1:12:1a:ca:d6:64:24:c4:67:48:58:5d:
2f:af:d1:9d:75:f8:4e:5c:3b:6f:38:bb:32:da:07:
65:21:0b:27:5d:84:31:cb:d7:0a:e0:c2:4e:02:4d:
40:a1:8a:19:d4:6c:ac:34:73:b7:1f:4b:8a:58:be:
70:e8:f4:71:ed:d2:a1:93:de:28:13:1c:ec:6f:42:
2b:f3:5e:46:91:45:97:58:63:c0:75:7a:62:1f:8c:
d5:a9:35:fa:f2:ec:22:70:e3:64:6a:39:55:08:c4:
09:4d:0b:c8:39:fc:3f:ad:a5:0e:ee:8c:3d:a4:ad:
df:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:85:A4:36:C0:EB:61:4C:6B:16:64:67:2B:2B:7F:D6:8D:CE:68:D1
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.10.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:cf:e4:c5:04:df:e9:29:0d:7b:c4:48:f9:5b:c1:06:94:80:
cd:44:09:32:a5:8f:7d:cb:d2:17:a2:18:a0:57:d2:77:10:f2:
8b:5d:b1:0d:fc:65:cd:12:df:42:0e:bb:aa:e0:c2:59:a2:f7:
77:be:92:1a:cc:5d:6e:4a:7a:1a:49:6d:76:9c:32:7d:0b:76:
28:4b:a7:49:b7:cd:2c:47:e2:99:2b:73:ee:d3:d5:1d:4b:ef:
64:eb:d4:a2:73:e0:00:21:df:99:7a:f8:15:15:51:7e:09:df:
47:76:33:6e:49:f2:03:4b:37:ac:70:e0:29:d7:50:66:09:22:
e0:31:f7:86:cc:02:89:55:27:9c:a1:75:04:2f:88:89:47:99:
06:f1:c5:7c:5e:e3:c3:d0:ed:b7:fd:09:de:c7:04:0f:fd:4e:
36:3d:9d:e3:8d:45:ee:e4:36:45:0a:30:81:0a:f4:d6:3f:cf:
57:64:75:81:4d:de:93:dc:3b:43:58:46:26:e3:26:a4:4e:68:
57:0c:27:6f:c5:fe:53:a2:eb:89:5e:0c:8c:ad:45:9e:87:af:
fc:74:bc:a0:8f:87:7a:ec:0f:66:8b:83:71:7f:f0:21:4e:0d:
bc:9c:86:58:bd:da:5f:7f:1b:b0:20:fe:06:50:ae:f3:eb:e9:
74:54:78:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:29:43 2026 by rpki-client