Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31352e302f32342d3234203d3e20383334.roa
File: 38372e3235342e31352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: njhEifPxZZKVIloAWauyfC9OvNCqT8sr5N2tyte4o24=
Subject key identifier: A9:48:43:7D:60:19:C8:6A:59:B4:6D:3D:0A:C9:6D:9B:20:B7:46:E5
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 05A12A4EF3D55F367FCEFEE4034E32038B7A456F
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31352e302f32342d3234203d3e20383334.roa
Signing time: Mon 07 Sep 2026 06:24:21 +0000
ROA not before: Mon 07 Sep 2026 06:19:21 +0000
ROA not after: Mon 06 Sep 2027 06:24:21 +0000
asID: 834
IP address blocks: 87.254.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:21:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:a1:2a:4e:f3:d5:5f:36:7f:ce:fe:e4:03:4e:32:03:8b:7a:45:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Sep 7 06:19:21 2026 GMT
Not After : Sep 6 06:24:21 2027 GMT
Subject: CN=A948437D6019C86A59B46D3D0AC96D9B20B746E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:32:e8:75:32:79:76:5c:e2:e9:48:0e:ba:5f:
03:9d:70:f4:66:ee:64:ef:6a:31:3f:f0:cb:df:d8:
7a:45:1a:de:13:fc:1f:09:54:20:4f:fb:36:ca:33:
26:ab:82:a2:e4:2d:6b:b6:7b:ef:be:b8:61:b7:50:
ca:6a:3f:8a:29:68:8e:b4:53:52:8b:24:23:d7:63:
d7:d6:96:93:a9:56:23:92:e7:58:53:c5:e5:16:05:
dc:de:45:05:8c:35:6c:e0:fc:58:4f:ba:7c:97:04:
42:f2:f5:8d:48:94:d4:e4:c7:9e:a4:6b:e4:8c:9d:
b6:e8:fb:b3:8e:d9:fb:fc:14:1c:72:ed:39:a8:cc:
45:8f:b2:98:12:9d:5c:36:69:40:90:c0:aa:c2:4f:
31:d4:fb:e3:4b:43:33:85:7d:86:75:a2:33:38:aa:
1f:61:b0:2d:82:f8:7d:61:91:c5:56:2b:48:c8:a2:
cd:30:97:46:0a:db:3b:3e:5d:53:78:6a:2d:03:4b:
a3:f5:31:a9:75:b8:09:04:ee:a3:58:89:51:f3:7d:
26:f7:c5:ed:2d:b3:dc:2a:83:7c:db:12:89:bc:52:
f2:16:48:89:6e:02:b3:50:72:6a:8c:a6:e4:5a:22:
8b:a3:0d:31:b2:c4:44:68:8c:2f:c9:81:c2:a6:04:
b9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:48:43:7D:60:19:C8:6A:59:B4:6D:3D:0A:C9:6D:9B:20:B7:46:E5
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.15.0/24
Signature Algorithm: sha256WithRSAEncryption
28:f0:e3:cd:cb:b2:b0:3f:9e:80:6f:73:94:65:e7:85:b8:cd:
03:0b:57:ad:f8:2e:68:1e:ec:48:ba:33:ae:80:92:aa:08:3a:
71:28:37:47:eb:4c:d3:ba:1f:0e:36:22:b1:d6:6a:7a:60:84:
3d:6b:c1:43:df:d6:01:b3:2c:5d:40:99:49:68:48:2d:07:c0:
ab:b2:65:ea:24:5d:14:64:bb:82:63:81:df:3d:af:a8:e7:78:
53:fa:db:c3:e6:bb:3a:2f:db:01:4e:e0:e4:1a:3b:49:28:dd:
1c:da:36:d3:fd:30:7c:9a:79:96:95:7a:29:76:a1:36:19:10:
f8:59:b5:ac:d5:e8:d5:f1:cf:12:db:54:d9:51:5d:d5:23:0f:
72:5c:ca:64:63:26:c6:32:f7:78:3d:fb:b8:ff:b9:9e:a7:73:
7c:80:23:8a:c8:d0:66:28:89:38:66:3f:b3:34:94:a4:cd:e0:
ad:76:91:27:f9:3d:d7:94:9a:52:5f:5b:0d:bc:30:ad:86:95:
50:e6:1b:b5:fb:a9:6d:b6:fc:3c:dd:47:7b:12:d1:0f:93:89:
68:67:67:1b:42:02:ee:e6:ef:87:91:5e:b9:a3:bd:86:18:78:
5c:db:2d:d4:3f:0e:b6:0d:24:7d:40:95:57:25:8f:18:25:91:
ec:65:82:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:01:59 2026 by rpki-client