Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e352e302f32342d3234203d3e20383334.roa
File: 38372e3235342e352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: TH/lHyvSX1bcP1rWoyrHpYLpCP0c65V843XP3yzhA3Q=
Subject key identifier: 9E:01:B3:5B:B6:7F:F0:23:86:18:1C:D7:73:F4:A6:55:6D:32:38:6B
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 25411581AB48910BF20261839051E8DC222EC245
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e352e302f32342d3234203d3e20383334.roa
Signing time: Fri 18 Sep 2026 10:39:49 +0000
ROA not before: Fri 18 Sep 2026 10:34:49 +0000
ROA not after: Fri 17 Sep 2027 10:39:49 +0000
asID: 834
IP address blocks: 87.254.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 06:21:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:41:15:81:ab:48:91:0b:f2:02:61:83:90:51:e8:dc:22:2e:c2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Sep 18 10:34:49 2026 GMT
Not After : Sep 17 10:39:49 2027 GMT
Subject: CN=9E01B35BB67FF02386181CD773F4A6556D32386B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:91:8c:8e:25:f8:46:e0:78:bc:82:b1:1b:d6:
77:fe:80:7d:14:fb:9c:e8:7b:e2:81:8e:58:54:5a:
1f:1b:db:a8:0b:21:09:ed:f3:a0:f2:90:77:8f:a2:
21:1c:52:e2:10:2c:c2:86:c2:5d:27:c5:98:a8:99:
61:36:a1:86:15:2c:b8:18:24:da:ba:d0:4d:9a:8c:
0f:6a:37:95:c4:2c:1f:1d:2a:3c:11:52:1d:28:ed:
92:21:5b:82:c5:10:ba:58:2e:ca:5c:24:2c:3a:7f:
5c:98:73:ab:74:38:0c:b9:11:59:3f:2d:e6:34:8d:
86:10:d9:62:e9:0b:4f:4f:76:af:bd:39:4b:c8:2b:
49:1a:1d:ed:48:dc:77:8a:bd:95:42:f1:0c:23:44:
52:39:56:04:c9:df:28:3c:d3:52:b6:a8:4d:0a:cd:
78:4b:2c:de:38:14:ed:08:a3:73:24:3f:b8:ea:57:
6f:82:53:ec:04:db:26:b8:ca:15:39:51:30:88:a8:
d0:61:10:b3:44:99:fe:ef:20:e1:f5:64:de:da:d4:
99:d7:ec:7f:63:7e:64:82:85:95:fa:1c:9f:fe:00:
17:b6:ea:41:3b:f5:a6:6d:02:21:e9:82:2c:d1:1e:
ea:15:42:f2:ce:d4:24:ae:14:4a:d3:53:26:8e:05:
23:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:01:B3:5B:B6:7F:F0:23:86:18:1C:D7:73:F4:A6:55:6D:32:38:6B
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.5.0/24
Signature Algorithm: sha256WithRSAEncryption
77:4a:17:8d:0d:48:30:82:30:80:2c:9e:b4:5c:10:77:97:91:
65:08:a2:92:c4:8e:ee:49:ee:05:5d:17:7b:55:9b:5e:0f:8f:
d3:1d:26:b9:20:d4:d5:5a:51:8d:49:3a:77:70:34:ee:ce:09:
0d:9e:5f:58:8b:a2:e3:c9:8a:b7:55:f5:05:a8:6b:55:8f:4a:
cc:de:fd:9a:4f:7d:01:8f:1c:eb:e6:dd:75:8a:25:08:bf:eb:
d1:cd:6e:8a:10:57:8a:8d:1e:d4:ca:4f:54:ee:f4:c3:10:e4:
5f:f3:14:c3:cf:c4:86:ed:31:c4:66:aa:6d:92:0d:a5:fa:3b:
b3:2b:b3:af:03:e8:bb:7d:88:6f:82:03:08:12:78:34:16:8b:
63:2d:95:d5:2f:c1:05:7a:0b:06:b7:e2:f4:31:f1:cc:76:1a:
1d:3d:a9:62:e6:6e:86:5c:e7:98:56:a4:ac:3e:52:0f:d0:b3:
e7:2a:72:78:42:9d:20:b1:e7:4c:69:e4:ee:37:a0:17:89:05:
38:2f:0e:39:09:dd:33:33:0b:6d:33:09:d2:7c:55:5a:d8:fb:
77:e1:f2:96:44:ea:44:a9:c9:ca:b0:51:f2:4a:f9:76:95:dc:
aa:95:5f:cd:7a:eb:05:a0:66:30:71:80:1a:eb:09:ac:9e:2c:
0e:1b:37:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:53:11 2026 by rpki-client