Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31322e302f32332d3234203d3e20383334.roa
File: 38372e3235342e31322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: tYrkGJWiQCuECp68SDxP1zan/szsBNIKNYHcWzm+neA=
Subject key identifier: 72:A8:07:7C:CC:E9:12:98:89:A6:94:8A:A3:7F:34:70:AA:FE:BD:1C
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 096BEC640026B51BC7A5C3ED3E08B55481EAE001
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31322e302f32332d3234203d3e20383334.roa
Signing time: Mon 08 Jun 2026 04:03:25 +0000
ROA not before: Mon 08 Jun 2026 03:58:25 +0000
ROA not after: Mon 07 Jun 2027 04:03:25 +0000
asID: 834
IP address blocks: 87.254.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:35:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:6b:ec:64:00:26:b5:1b:c7:a5:c3:ed:3e:08:b5:54:81:ea:e0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Jun 8 03:58:25 2026 GMT
Not After : Jun 7 04:03:25 2027 GMT
Subject: CN=72A8077CCCE9129889A6948AA37F3470AAFEBD1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:44:bd:46:e7:e1:03:b0:be:5b:55:f6:7a:d6:
23:ec:b4:9b:12:a9:d2:28:a5:bb:bb:9a:bf:91:af:
3f:eb:14:01:4e:96:aa:d7:5d:bb:93:46:7a:f5:f0:
9f:15:27:53:e2:c8:90:5e:a3:39:c1:da:e1:51:bb:
72:5d:55:ac:31:bb:3c:23:33:15:bc:3a:6b:fc:3b:
91:85:cc:58:91:8c:44:a9:05:39:eb:3c:05:e3:f8:
2c:2b:a3:65:92:08:88:44:cf:09:16:81:f2:bd:cd:
16:dc:3a:c5:f6:cf:0e:69:fa:b5:c8:00:c9:55:f6:
e2:45:43:77:ca:66:14:f9:21:63:58:d1:d9:b4:fe:
d3:91:37:33:b1:bc:16:ad:66:f7:c0:35:63:ca:1f:
f3:0e:99:08:37:80:61:85:f8:1f:48:f7:3c:f3:f0:
d2:3d:1b:10:79:4b:4a:39:ba:d0:d3:e4:4f:0f:17:
04:42:73:ec:09:f1:f1:b4:83:8c:c2:fb:0d:0d:dc:
f9:1c:25:9c:bc:fe:7c:31:d2:64:4c:17:e9:97:dc:
4d:fa:2d:f0:ea:95:20:1c:c7:f0:0e:77:a6:cd:70:
d3:99:ae:10:02:47:40:23:cc:f6:c9:fb:b6:45:60:
db:c9:f3:70:16:e8:b8:8a:59:bd:10:16:d0:92:af:
d8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A8:07:7C:CC:E9:12:98:89:A6:94:8A:A3:7F:34:70:AA:FE:BD:1C
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.12.0/23
Signature Algorithm: sha256WithRSAEncryption
78:9e:16:7a:d2:23:b7:ca:9a:94:92:f8:64:9c:ab:1b:c4:77:
7f:48:a9:66:0f:69:ce:73:b9:6f:38:24:6e:68:ae:0c:58:da:
6b:9a:a9:eb:e5:a8:07:e1:4b:dc:d8:92:b8:31:40:c5:e1:ab:
60:b6:c6:56:86:42:e6:2a:82:1f:d8:01:59:9c:d6:98:5d:b8:
b6:f1:b8:c3:6a:00:80:bc:f5:87:07:a0:4a:43:87:4c:b0:05:
c6:d5:22:11:e5:58:7e:24:32:ea:e9:00:67:86:4d:24:50:7a:
7c:a4:05:ca:45:ca:8c:a1:89:b8:e4:e4:5d:53:da:3a:b4:44:
23:b5:cd:ac:d3:b7:9d:03:b7:6a:10:2b:1c:62:82:c0:f6:80:
46:3d:7a:78:c5:5c:2e:1e:a3:7a:8d:f6:16:98:34:5b:56:51:
f0:ae:cb:d1:3f:9c:09:d9:9a:7e:02:29:b4:40:24:4c:84:3c:
82:1e:68:18:98:99:a0:f1:81:3b:a9:af:ba:22:cc:ae:b4:90:
c9:81:b2:aa:0b:2f:e2:55:4c:22:b7:6d:ad:4e:0c:dd:35:ac:
f8:66:cf:70:20:d6:8e:d9:b1:52:36:05:36:ac:6a:38:1b:02:
ce:95:d2:4c:96:1e:6e:ca:5a:64:a1:bb:1a:8a:a1:45:52:78:
16:c9:a3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:59:40 2026 by rpki-client