Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32372e302f32342d3234203d3e20383334.roa
File: 38372e3235342e32372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: kiTSwv3uqR6oTn4IFY97OArFJxGF8LStqZIKpFNtfPc=
Subject key identifier: FB:FB:D5:8E:AE:EB:77:50:D7:D3:6B:62:CF:42:52:4D:A3:43:ED:BD
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 34FB3DBB460A33B5D45AC12F90231A05239DCD35
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32372e302f32342d3234203d3e20383334.roa
Signing time: Mon 07 Sep 2026 05:59:54 +0000
ROA not before: Mon 07 Sep 2026 05:54:54 +0000
ROA not after: Mon 06 Sep 2027 05:59:54 +0000
asID: 834
IP address blocks: 87.254.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 06:21:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:fb:3d:bb:46:0a:33:b5:d4:5a:c1:2f:90:23:1a:05:23:9d:cd:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Sep 7 05:54:54 2026 GMT
Not After : Sep 6 05:59:54 2027 GMT
Subject: CN=FBFBD58EAEEB7750D7D36B62CF42524DA343EDBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:55:b4:0c:e5:6b:39:30:95:e9:12:c1:e7:6b:
45:30:0f:bf:f4:7b:12:1b:ee:26:de:be:ad:32:0c:
18:cd:00:2e:a6:2c:a2:a9:e2:2e:f2:21:9e:5d:43:
1c:7e:ac:b9:3a:f7:9e:0e:2a:74:33:65:17:76:cb:
bd:c1:99:65:6a:95:43:e8:9d:a1:1b:c8:95:98:0b:
9e:60:4b:17:09:07:68:fc:ed:7e:a0:98:89:ac:8d:
24:14:a3:f0:da:c9:7b:60:f3:8d:88:fc:32:73:ef:
7f:57:45:ad:44:9f:e5:b9:8a:1b:53:db:ed:3b:35:
a4:4a:bb:58:d2:9b:2e:30:74:d1:07:8c:3d:40:64:
f5:0a:02:56:c2:2a:f5:46:4d:a9:97:11:a1:dd:2a:
f3:f9:98:59:8d:be:70:42:1e:39:37:4f:bc:6c:37:
8a:e2:30:5d:37:38:2f:86:cd:5d:8d:90:8e:59:57:
21:ab:12:0e:59:a5:be:1e:51:27:07:55:1e:fd:34:
a3:e6:d8:25:fc:0a:21:90:a8:8e:6f:dc:f3:a1:6f:
95:96:c6:a0:e4:0c:a4:43:6b:1a:0a:3b:bc:e1:67:
ea:58:42:0b:33:b2:7d:98:a5:b4:1e:c9:8d:f9:9b:
a8:62:57:84:5b:79:a2:88:29:7e:7a:38:ff:c7:fb:
b2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FB:D5:8E:AE:EB:77:50:D7:D3:6B:62:CF:42:52:4D:A3:43:ED:BD
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.27.0/24
Signature Algorithm: sha256WithRSAEncryption
41:15:7c:50:71:cf:f1:f2:1e:80:b5:27:d7:9b:1a:2f:e2:d2:
3c:d6:c3:e2:ca:42:59:cf:01:ea:1f:9d:20:de:dc:18:5e:37:
ac:ed:e1:2e:76:8c:41:ba:73:99:9c:2d:26:bd:bb:07:79:57:
cd:92:ea:5c:10:fe:18:8c:63:6d:d7:af:84:1c:6e:a1:c6:26:
00:bf:fa:be:f8:c9:e9:01:1a:64:9a:ce:98:79:12:ae:cc:58:
1c:4f:fe:32:9c:fb:47:66:c1:8a:df:4f:c8:6d:43:c5:90:b6:
06:5f:5f:d5:e4:f3:c8:c7:43:06:fc:bf:c4:53:5c:26:cc:7f:
2b:8f:d2:85:4b:e3:1f:5f:46:10:01:e3:50:7a:e7:b3:5e:05:
66:fc:21:57:1c:d3:59:0d:1b:b7:0c:46:39:e3:85:19:04:84:
ee:c3:ed:fb:ff:e8:1c:e1:78:6f:d7:0f:c9:ec:cd:ea:93:44:
be:0a:8b:ce:a1:e5:76:7f:20:cf:a1:f6:84:cd:da:6b:3d:d5:
1d:7d:74:22:fe:23:70:50:7a:58:1d:09:ce:d0:b1:a5:e9:a7:
17:24:82:a7:6a:2f:b4:5a:39:d1:78:39:03:c1:70:55:25:66:
9c:a6:0f:43:b3:03:ad:dd:83:67:15:8a:0b:d3:8a:92:6f:78:
49:ef:04:40
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUNPs9u0YKM7XUWsEvkCMaBSOdzTUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJiZmQ0ZTAyMTU0N2QwMzBhYzEwYjAyMTM1MzVkNGM2
OTY4ZWVkZTAeFw0yNjA5MDcwNTU0NTRaFw0yNzA5MDYwNTU5NTRaMDMxMTAvBgNV
BAMTKEZCRkJENThFQUVFQjc3NTBEN0QzNkI2MkNGNDI1MjREQTM0M0VEQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIVbQM5Ws5MJXpEsHna0UwD7/0
exIb7ibevq0yDBjNAC6mLKKp4i7yIZ5dQxx+rLk6954OKnQzZRd2y73BmWVqlUPo
naEbyJWYC55gSxcJB2j87X6gmImsjSQUo/DayXtg842I/DJz739XRa1En+W5ihtT
2+07NaRKu1jSmy4wdNEHjD1AZPUKAlbCKvVGTamXEaHdKvP5mFmNvnBCHjk3T7xs
N4riMF03OC+GzV2NkI5ZVyGrEg5Zpb4eUScHVR79NKPm2CX8CiGQqI5v3POhb5WW
xqDkDKRDaxoKO7zhZ+pYQgszsn2YpbQeyY35m6hiV4RbeaKIKX56OP/H+7IzAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQU+/vVjq7rd1DX02tiz0JSTaND7b0wHwYDVR0j
BBgwFoAUIr/U4CFUfQMKwQsCE1NdTGlo7t4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNhYWNkMTctYmY5ZC00N2RiLTg2NGQtZjljN2MyYmUx
ODNhLzAvMjJCRkQ0RTAyMTU0N0QwMzBBQzEwQjAyMTM1MzVENEM2OTY4RUVERS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lyX1U0Q0ZVZlFNS3dRc0NFMU5kVEds
bzd0NC5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjNhYWNkMTct
YmY5ZC00N2RiLTg2NGQtZjljN2MyYmUxODNhLzAvMzgzNzJlMzIzNTM0MmUzMjM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/4bMA0G
CSqGSIb3DQEBCwUAA4IBAQBBFXxQcc/x8h6AtSfXmxov4tI81sPiykJZzwHqH50g
3twYXjes7eEudoxBunOZnC0mvbsHeVfNkupcEP4YjGNt16+EHG6hxiYAv/q++Mnp
ARpkms6YeRKuzFgcT/4ynPtHZsGK30/IbUPFkLYGX1/V5PPIx0MG/L/EU1wmzH8r
j9KFS+MfX0YQAeNQeuezXgVm/CFXHNNZDRu3DEY544UZBITuw+37/+gc4Xhv1w/J
7M3qk0S+CovOoeV2fyDPofaEzdprPdUdfXQi/iNwUHpYHQnO0LGl6acXJIKnai+0
WjnReDkDwXBVJWacpg9DswOt3YNnFYoL04qSb3hJ7wRA
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:50:26 2026 by rpki-client