Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e342e302f32342d3234203d3e20313532313739.roa
File: 38372e3235342e342e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: Y+fm5Z1hQ5CX1kAf8N1IWb6MLSFELQii0Oe4LqXPgVI=
Subject key identifier: A5:9A:0E:7A:61:82:18:A1:D7:11:54:6B:7D:B6:6D:86:6D:55:2D:8E
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 678644EBB078C65DBA631F9EEC52DE8B979560FC
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e342e302f32342d3234203d3e20313532313739.roa
Signing time: Fri 18 Sep 2026 10:39:36 +0000
ROA not before: Fri 18 Sep 2026 10:34:36 +0000
ROA not after: Fri 17 Sep 2027 10:39:36 +0000
asID: 152179
IP address blocks: 87.254.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 06:21:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:86:44:eb:b0:78:c6:5d:ba:63:1f:9e:ec:52:de:8b:97:95:60:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Sep 18 10:34:36 2026 GMT
Not After : Sep 17 10:39:36 2027 GMT
Subject: CN=A59A0E7A618218A1D711546B7DB66D866D552D8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6f:ce:f6:37:1d:14:72:13:d3:23:73:72:4d:
bc:08:cc:e8:09:b8:73:b0:f2:2b:c4:bf:71:92:9f:
7d:7b:f7:ff:9b:33:e2:66:42:76:a8:18:1c:5d:63:
42:6d:46:f3:70:9e:38:61:f0:f0:e9:65:90:6e:b0:
aa:15:ce:18:c9:02:4a:ae:38:62:4c:6f:1e:8d:7f:
d0:34:14:c6:44:d8:13:90:35:71:2e:9f:7b:6b:e7:
fd:c7:b7:cb:ff:29:34:20:c5:4c:1b:88:30:63:07:
cd:b0:d3:cf:1a:3c:47:56:62:f4:6a:a2:69:db:7d:
27:2b:b9:6e:23:c6:a9:e0:6b:99:bd:b1:4b:c2:55:
6e:70:f6:a1:de:29:a3:c7:1d:fe:18:c5:ca:e8:0e:
15:b7:b2:b3:25:66:29:c6:3b:97:a3:8a:c1:9b:e4:
c2:a4:2e:cb:2d:a2:32:15:60:e2:d1:be:ae:53:a4:
17:b2:39:5f:60:cd:0b:2e:66:6f:64:56:4b:60:a3:
7b:50:4c:c0:87:f4:25:c0:b1:b4:75:00:26:d2:3d:
d5:50:eb:c9:8f:08:7d:b9:d9:db:8d:f2:32:32:79:
6b:7e:4f:0f:64:54:47:9b:d2:82:c4:7f:d6:ce:e4:
a8:aa:42:d8:8a:44:1b:3f:3a:dd:d8:b8:eb:77:49:
2e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9A:0E:7A:61:82:18:A1:D7:11:54:6B:7D:B6:6D:86:6D:55:2D:8E
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e342e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.4.0/24
Signature Algorithm: sha256WithRSAEncryption
51:4f:83:ec:59:58:d3:78:af:23:82:11:d7:a1:45:05:70:1c:
7f:55:7b:28:cd:fc:11:2d:8f:19:84:21:04:be:98:ed:44:8e:
42:6f:23:b1:65:48:42:c2:46:4f:7f:b7:cb:b1:06:36:bc:6c:
b8:ae:8a:e9:a8:d9:e6:eb:73:8d:33:46:cc:43:19:0d:b7:28:
4e:21:52:67:eb:82:c1:eb:e3:43:94:3f:0e:5c:51:da:a9:cc:
3f:63:07:27:89:43:34:b8:83:4f:a7:d0:0d:ec:bd:f2:39:df:
b9:5d:bc:4b:de:89:66:22:c9:31:2c:75:fe:4e:1a:14:37:b7:
db:19:50:08:e5:c3:40:3a:af:c2:a8:5a:e3:87:71:dc:57:bc:
0d:9d:73:60:1d:cd:b2:33:09:32:de:2a:67:57:5e:48:8e:14:
40:e9:b1:d8:7a:0a:69:27:76:85:ec:c6:df:96:72:fc:a4:36:
3d:16:ce:fc:6a:b4:87:a2:73:82:7c:fe:17:f7:6e:72:dd:62:
bc:13:8d:60:bb:99:34:48:4b:d0:03:64:5b:4e:7d:01:dc:40:
6a:87:f5:4e:5f:eb:06:b2:de:1e:e8:35:24:74:25:6c:8a:61:
4f:8a:69:c5:fa:54:a9:c4:a7:a9:fb:26:6b:93:ce:13:1f:08:
6d:a8:18:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:24:18 2026 by rpki-client