Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32342e302f32342d3234203d3e20383334.roa
File: 38372e3235342e32342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: QqbNiLA4Ey35PuR/YTL6yb8zsH4X0ajw3l/v7xwOynE=
Subject key identifier: 12:B4:C8:35:04:F3:68:AA:73:FE:BD:70:FB:25:9F:4B:D0:0C:74:DE
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 183650E6E6A53353C1E9D7323240854E674FACB6
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32342e302f32342d3234203d3e20383334.roa
Signing time: Sun 30 Aug 2026 06:55:23 +0000
ROA not before: Sun 30 Aug 2026 06:50:23 +0000
ROA not after: Sun 29 Aug 2027 06:55:23 +0000
asID: 834
IP address blocks: 87.254.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 23:27:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:36:50:e6:e6:a5:33:53:c1:e9:d7:32:32:40:85:4e:67:4f:ac:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Aug 30 06:50:23 2026 GMT
Not After : Aug 29 06:55:23 2027 GMT
Subject: CN=12B4C83504F368AA73FEBD70FB259F4BD00C74DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bf:05:ad:a6:c9:88:e8:28:14:a9:e4:82:a3:
06:87:c9:09:ed:a5:92:a3:93:ae:fd:44:bc:35:50:
20:1a:48:fc:93:c0:7c:96:78:57:88:fe:5a:e1:d8:
81:c9:2a:d5:a6:a0:c3:ee:5f:3f:77:df:79:5a:3c:
7c:86:63:03:c6:7f:14:56:46:5d:d7:bc:b8:75:b1:
9a:56:35:18:0b:67:af:b7:c1:e2:0d:3f:ea:4e:c3:
32:54:fa:b7:80:08:06:f6:e1:7e:52:44:f3:0d:fa:
af:f2:b3:15:f5:f5:1e:76:77:58:f0:4c:7b:10:8a:
78:4d:e8:8d:93:e6:b7:52:f0:99:57:8c:84:2e:85:
11:90:33:f2:9d:d6:0a:f3:7f:6a:f0:d6:b9:ab:c7:
b0:fd:bb:67:06:58:b9:c4:e3:b5:fb:16:69:a4:88:
97:2d:18:59:89:e9:79:eb:7c:e6:ae:23:e5:27:c1:
24:a5:39:d2:5f:ef:2f:ee:a5:91:7c:77:6e:bc:14:
e0:b3:1f:d4:59:1e:40:c3:e5:ee:77:c6:6c:28:6f:
0f:d6:2e:9e:e4:3b:90:ff:69:b2:2a:a4:51:50:41:
ff:c8:5c:e0:ed:d4:ac:3f:e5:46:d9:13:eb:1b:c4:
f5:15:00:7b:5f:6c:40:63:12:a9:24:16:f7:08:db:
36:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B4:C8:35:04:F3:68:AA:73:FE:BD:70:FB:25:9F:4B:D0:0C:74:DE
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.24.0/24
Signature Algorithm: sha256WithRSAEncryption
53:b2:ae:a7:aa:f0:44:d9:04:ad:a6:67:f1:ac:93:0e:ce:36:
64:3c:82:6b:ac:da:b8:e8:54:26:31:69:61:22:40:24:2b:cb:
27:b7:d0:9c:35:20:d5:e4:bf:b3:0b:7a:38:90:b4:43:f4:45:
1f:51:44:fd:3f:d4:3b:69:66:4d:54:4f:09:ae:3f:36:dd:9f:
11:d9:ae:25:04:25:9a:b4:f2:e5:3a:61:39:98:5e:bc:f4:07:
83:99:f7:ea:31:c0:c6:4a:6c:ef:d2:16:a2:a7:95:b2:3b:3a:
e9:f1:ab:5e:29:27:32:10:a6:d4:15:a6:8d:98:4b:ee:22:61:
4c:68:ea:8d:67:18:25:4f:e5:e5:f6:7c:b2:a6:b8:67:28:4f:
6b:5c:e3:83:39:0f:b0:f2:af:ec:d3:7f:12:5e:3c:ae:82:52:
f5:5e:50:f7:4f:54:8b:b2:b7:5b:2d:07:67:f4:2d:68:fb:26:
33:04:bc:5e:dc:1b:31:5c:b2:97:e2:83:11:d3:9e:b8:f2:11:
6f:01:8e:3c:7d:b6:85:35:bf:ff:7c:e0:a9:30:bc:ec:46:17:
26:fc:17:e9:0f:08:bf:f7:a8:6b:84:d5:92:39:75:67:84:fb:
dc:55:b1:08:2e:30:fa:89:00:dd:17:ee:fd:78:95:56:09:c6:
f7:45:a9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:42:10 2026 by rpki-client