Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e33302e302f32342d3234203d3e2039333034.roa
File: 38372e3235342e33302e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: 7Tnim3fXGqGd5eTDeVNv6sYNxMRFIvUpyP1tJtD3Ws0=
Subject key identifier: F6:F7:BF:73:A9:34:76:E8:E3:78:9B:CA:67:18:70:05:AF:26:7F:D3
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: A87E2BDA98627250AEA0E4C99F978BD0EEB4C3
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e33302e302f32342d3234203d3e2039333034.roa
Signing time: Tue 08 Sep 2026 07:57:54 +0000
ROA not before: Tue 08 Sep 2026 07:52:54 +0000
ROA not after: Tue 07 Sep 2027 07:57:54 +0000
asID: 9304
IP address blocks: 87.254.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a8:7e:2b:da:98:62:72:50:ae:a0:e4:c9:9f:97:8b:d0:ee:b4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Sep 8 07:52:54 2026 GMT
Not After : Sep 7 07:57:54 2027 GMT
Subject: CN=F6F7BF73A93476E8E3789BCA67187005AF267FD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f6:d0:42:d6:c6:a7:e2:e9:1a:5f:c1:37:5e:
b3:17:6c:1c:14:12:a2:15:e9:eb:d4:b3:6b:87:28:
f7:cc:49:98:5a:0d:93:e9:fc:27:ac:eb:e8:7e:27:
4f:cd:7f:38:82:76:1b:d3:2d:4d:1e:88:dc:fb:0d:
f4:9b:55:dc:04:16:9e:20:85:f0:99:01:22:4e:c1:
25:4d:a5:19:fb:dc:ac:b8:fe:5a:02:52:92:ec:ec:
4a:02:fb:48:5b:11:04:0b:6b:b2:00:4f:d4:8a:5e:
64:d2:29:05:be:c4:82:ff:a9:ba:6e:c9:80:5d:6d:
5d:82:66:e9:c3:55:15:f0:41:df:cd:9e:93:16:d9:
0a:35:71:f1:0d:7d:01:12:5b:1e:f8:96:b8:9f:b5:
37:16:9b:2a:e4:a7:8c:0f:94:51:72:91:6f:d5:ad:
c3:77:84:de:d6:d9:cb:fa:89:ad:27:0e:ea:56:c1:
75:55:c8:be:62:08:c5:a1:4f:95:df:72:34:7a:73:
0d:db:87:c2:54:bf:7b:37:1e:46:1a:c2:02:6c:bb:
91:33:b2:01:09:ce:3d:88:fc:10:cb:28:8a:a1:cd:
d1:98:2f:f0:1d:9e:90:94:44:f9:20:23:7b:d8:e7:
7e:07:2a:09:0d:4b:54:53:9c:32:47:f3:de:dd:ae:
b8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F7:BF:73:A9:34:76:E8:E3:78:9B:CA:67:18:70:05:AF:26:7F:D3
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e33302e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.30.0/24
Signature Algorithm: sha256WithRSAEncryption
18:aa:e6:11:ee:3e:7d:ac:0a:08:f9:75:f3:24:00:26:c6:36:
1a:e6:04:66:a5:c9:36:fc:c1:59:69:c7:8f:58:32:4e:cd:8f:
b9:aa:c9:da:5b:33:81:cf:ad:4e:54:19:83:e6:ed:e3:b8:55:
cb:d7:de:f4:c3:61:08:60:ff:35:e3:2a:2b:4f:ed:30:99:86:
93:2d:c9:62:e1:29:f0:4c:43:5c:41:e1:12:a0:25:81:e8:2f:
65:ae:19:2e:3a:b0:52:3c:c8:5d:98:cd:25:ce:42:d5:ac:c7:
e2:5c:bd:b4:cf:aa:3a:cf:13:76:08:29:57:e6:5b:44:e3:51:
1c:fd:a2:da:06:e8:21:71:9c:d1:c3:0e:7a:a2:38:1e:43:c4:
ff:85:93:37:e6:31:7c:5f:e9:12:8e:ac:85:39:b6:1b:5b:50:
c9:73:de:3a:b5:16:fc:b4:f8:da:72:8d:19:0b:06:a5:a6:27:
90:3e:ee:15:f2:73:5c:eb:bc:05:80:0d:72:9b:a6:4d:3f:c8:
cd:80:32:a0:f6:3e:d7:fd:a9:f8:d4:ce:18:11:92:c9:0a:55:
a0:07:39:f5:e7:51:99:18:9c:bf:35:5d:77:e8:f4:be:4c:52:
f7:32:b4:12:2b:07:9e:66:69:c5:05:72:78:83:98:d1:c9:71:
98:2a:33:bf
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUAKh+K9qYYnJQrqDkyZ+Xi9DutMMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJiZmQ0ZTAyMTU0N2QwMzBhYzEwYjAyMTM1MzVkNGM2
OTY4ZWVkZTAeFw0yNjA5MDgwNzUyNTRaFw0yNzA5MDcwNzU3NTRaMDMxMTAvBgNV
BAMTKEY2RjdCRjczQTkzNDc2RThFMzc4OUJDQTY3MTg3MDA1QUYyNjdGRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCD9tBC1san4ukaX8E3XrMXbBwU
EqIV6evUs2uHKPfMSZhaDZPp/Ces6+h+J0/NfziCdhvTLU0eiNz7DfSbVdwEFp4g
hfCZASJOwSVNpRn73Ky4/loCUpLs7EoC+0hbEQQLa7IAT9SKXmTSKQW+xIL/qbpu
yYBdbV2CZunDVRXwQd/NnpMW2Qo1cfENfQESWx74lriftTcWmyrkp4wPlFFykW/V
rcN3hN7W2cv6ia0nDupWwXVVyL5iCMWhT5XfcjR6cw3bh8JUv3s3HkYawgJsu5Ez
sgEJzj2I/BDLKIqhzdGYL/AdnpCURPkgI3vY534HKgkNS1RTnDJH897drrifAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQU9ve/c6k0dujjeJvKZxhwBa8mf9MwHwYDVR0j
BBgwFoAUIr/U4CFUfQMKwQsCE1NdTGlo7t4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNhYWNkMTctYmY5ZC00N2RiLTg2NGQtZjljN2MyYmUx
ODNhLzAvMjJCRkQ0RTAyMTU0N0QwMzBBQzEwQjAyMTM1MzVENEM2OTY4RUVERS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lyX1U0Q0ZVZlFNS3dRc0NFMU5kVEds
bzd0NC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjNhYWNkMTct
YmY5ZC00N2RiLTg2NGQtZjljN2MyYmUxODNhLzAvMzgzNzJlMzIzNTM0MmUzMzMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzkzMzMwMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABX/h4w
DQYJKoZIhvcNAQELBQADggEBABiq5hHuPn2sCgj5dfMkACbGNhrmBGalyTb8wVlp
x49YMk7Nj7mqydpbM4HPrU5UGYPm7eO4VcvX3vTDYQhg/zXjKitP7TCZhpMtyWLh
KfBMQ1xB4RKgJYHoL2WuGS46sFI8yF2YzSXOQtWsx+JcvbTPqjrPE3YIKVfmW0Tj
URz9otoG6CFxnNHDDnqiOB5DxP+FkzfmMXxf6RKOrIU5thtbUMlz3jq1Fvy0+Npy
jRkLBqWmJ5A+7hXyc1zrvAWADXKbpk0/yM2AMqD2Ptf9qfjUzhgRkskKVaAHOfXn
UZkYnL81XXfo9L5MUvcytBIrB55macUFcniDmNHJcZgqM78=
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:06:12 2026 by rpki-client