Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31322e302f32342d3234203d3e20383334.roa
File: 38372e3235342e31322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Csmnwo2TPrFnpdtdygd8M5axyO7EMgidxtaGyRO6HZ8=
Subject key identifier: EE:61:00:EE:A5:66:CA:A4:58:26:5E:FB:46:03:60:A1:1E:9C:85:5D
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 72B785E1BF84E1A6D6CDCED18BE8A054D61DE3EC
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31322e302f32342d3234203d3e20383334.roa
Signing time: Tue 08 Sep 2026 07:38:52 +0000
ROA not before: Tue 08 Sep 2026 07:33:52 +0000
ROA not after: Tue 07 Sep 2027 07:38:52 +0000
asID: 834
IP address blocks: 87.254.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 06:21:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:b7:85:e1:bf:84:e1:a6:d6:cd:ce:d1:8b:e8:a0:54:d6:1d:e3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Sep 8 07:33:52 2026 GMT
Not After : Sep 7 07:38:52 2027 GMT
Subject: CN=EE6100EEA566CAA458265EFB460360A11E9C855D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:39:89:21:0f:20:bd:b9:0b:21:98:49:ff:78:
78:c0:d2:a3:2f:d1:73:4b:9f:9e:7b:92:5b:e7:0d:
f1:dc:8c:5e:22:09:46:47:4f:db:a0:45:ef:9f:3b:
d0:76:b4:94:f1:79:67:48:98:62:5d:e0:16:e7:1a:
4c:85:4b:ed:53:62:37:30:83:13:26:42:1c:63:a7:
44:a4:21:01:02:77:74:b0:24:57:46:35:0b:e9:cb:
c4:92:a4:a0:78:db:68:cb:f1:e6:f7:d4:3a:d4:0d:
dc:0e:39:38:40:04:35:8a:e1:49:58:c4:8b:41:e6:
ef:2c:de:6b:d9:7b:ee:82:91:98:cd:d5:cd:66:d9:
ce:6c:b7:9d:ee:7c:a8:b8:ae:95:2c:db:1e:ae:dd:
37:ab:85:e3:46:3c:d7:14:9a:7a:39:d3:44:ef:9c:
17:51:cf:75:a2:28:72:e2:76:9e:29:69:e5:94:32:
50:67:9f:97:09:0f:77:72:10:8c:9c:e4:c0:53:66:
f0:c4:c2:b1:85:f7:f4:d9:e7:5f:68:f7:61:10:d6:
17:3a:76:a6:f9:55:af:ad:02:a3:a8:f1:bc:91:ce:
b6:be:a5:06:a6:82:d1:bb:d2:d3:9a:1a:18:a8:87:
56:fa:a4:42:50:ce:af:9a:d8:e4:29:5a:04:59:fb:
28:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:61:00:EE:A5:66:CA:A4:58:26:5E:FB:46:03:60:A1:1E:9C:85:5D
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.12.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:a8:5a:9b:16:0d:98:0f:16:c1:90:9d:63:71:56:f9:da:32:
65:62:a3:ec:f2:a1:15:19:0b:52:25:4e:e2:db:6d:b5:50:15:
fd:a1:41:e0:d5:89:03:66:ec:25:37:2f:b0:2b:98:97:10:e7:
1f:c1:f6:c1:e4:cd:a0:e0:7c:7a:97:c0:70:03:df:b8:3f:ad:
df:e0:1a:43:16:f9:2a:5b:47:03:d6:74:75:ad:26:41:52:3c:
a1:0d:e6:f9:c2:8c:45:01:11:cc:31:d6:6e:99:76:6c:81:c4:
45:df:5c:08:9a:c2:32:86:2d:00:e6:82:18:21:7c:86:f3:ef:
69:35:b4:46:a3:6f:91:9f:d7:45:0d:a7:12:79:b6:8e:09:a4:
bb:bf:ef:44:f0:c1:0a:4d:25:4f:a2:21:bd:bc:a5:f6:de:73:
77:cf:4c:f4:a2:04:5f:25:25:71:cc:30:4f:80:d6:10:b3:f2:
95:9f:a7:1f:ac:53:76:43:04:5b:a3:5a:29:91:1b:96:11:fb:
47:3a:ee:b2:18:29:c0:26:72:06:4b:8a:a4:15:3e:74:3f:a8:
48:30:9c:da:33:da:52:73:e4:c7:eb:72:d5:3d:a6:74:42:06:
17:eb:10:6e:72:6f:26:2b:37:de:0a:fd:c6:da:a7:94:e9:ab:
60:63:b3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:35:52 2026 by rpki-client