Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e362e302f32342d3234203d3e20383334.roa
File: 38372e3235342e362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: DjpFI7uXbXA3tO2L51S8qiQUOGEyieyCkDyBtq1LOXU=
Subject key identifier: 74:AE:51:C4:64:F5:D8:89:F5:CE:F3:C3:8C:4D:CE:E0:DE:BE:D2:0B
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 62A961920967AA3A77A80E8C6243B8D348643E0B
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e362e302f32342d3234203d3e20383334.roa
Signing time: Sat 26 Sep 2026 11:15:29 +0000
ROA not before: Sat 26 Sep 2026 11:10:29 +0000
ROA not after: Sat 25 Sep 2027 11:15:29 +0000
asID: 834
IP address blocks: 87.254.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:a9:61:92:09:67:aa:3a:77:a8:0e:8c:62:43:b8:d3:48:64:3e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Sep 26 11:10:29 2026 GMT
Not After : Sep 25 11:15:29 2027 GMT
Subject: CN=74AE51C464F5D889F5CEF3C38C4DCEE0DEBED20B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:29:4e:63:7a:d4:4f:f5:e1:ed:d5:ee:ae:ea:
5b:96:d2:1a:cc:8a:f4:39:90:51:15:8c:41:ef:59:
1a:f6:30:6b:10:50:b0:4b:cc:bf:b0:46:5a:59:13:
5a:50:67:db:ad:27:6f:99:81:bb:ee:52:71:28:55:
41:be:2e:76:ab:4c:b2:ed:1b:e2:f9:98:e2:ff:e0:
46:52:4a:f9:0d:0f:74:cb:cd:16:53:c1:19:7f:80:
60:f9:7d:61:f4:aa:8e:9f:4b:92:7e:fc:9a:21:b4:
c6:9d:98:0a:cf:b9:1e:1c:87:23:03:ae:39:21:50:
85:af:c0:6a:85:c1:4f:46:20:60:c3:93:84:8a:79:
77:da:02:f7:86:0b:6e:f6:8a:ef:a3:a2:5b:a6:72:
f8:71:32:4d:7a:c3:da:e9:35:19:28:2b:ff:80:d9:
b3:cb:e4:f9:a3:0d:dc:b3:a1:0f:9b:28:ac:ad:5d:
5e:27:04:08:11:fd:89:dc:28:73:7f:3a:11:a6:cc:
46:34:f9:1f:b9:42:46:b1:01:fc:39:19:82:f6:40:
0d:10:1a:f6:3b:8c:6c:62:1c:b2:e1:58:03:61:d3:
24:2f:71:e8:3b:d6:0c:cd:b3:99:9f:d1:44:cf:c2:
63:c8:0a:c6:ce:e1:bc:d0:b0:9a:90:10:5f:18:88:
f9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AE:51:C4:64:F5:D8:89:F5:CE:F3:C3:8C:4D:CE:E0:DE:BE:D2:0B
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.6.0/24
Signature Algorithm: sha256WithRSAEncryption
12:26:11:4d:dd:c9:3f:52:d3:71:63:0a:ec:ef:7c:bf:98:0f:
83:e3:31:72:bb:c4:94:79:09:2e:3d:7c:ce:80:e7:8d:2b:4b:
b2:87:15:8b:c2:08:5a:31:fc:c0:df:5c:eb:ab:51:bf:a0:48:
4e:56:2e:dd:94:00:ed:8d:f0:a7:ce:f9:37:6a:e9:b8:03:d8:
d2:8e:82:64:65:b7:76:29:44:1a:bd:ac:92:3a:73:d3:91:26:
3a:2c:ae:f8:37:67:e5:4e:c1:18:a1:7a:1f:8a:bf:6f:9b:18:
df:b8:10:2e:14:d6:b3:69:d7:3e:42:43:d0:e4:f5:6f:91:6c:
2e:89:77:e5:e3:42:6a:0e:d8:ce:07:12:7f:bc:ac:c6:03:6c:
61:49:8b:f2:9a:de:9d:73:1f:7b:44:dc:93:bc:20:b2:9c:26:
09:59:18:72:01:f2:9e:8d:b5:4e:b9:af:7f:21:a6:5c:fb:7a:
cb:be:11:bc:88:7f:fa:54:16:bd:50:a1:59:ee:d4:72:cf:8c:
39:a4:71:2e:2f:8e:d6:74:a8:2f:dd:02:ca:60:71:3d:90:09:
fc:44:15:18:66:38:23:c3:a6:8f:73:68:b6:67:a9:31:08:ae:
85:5b:b4:bf:e5:8b:d7:02:f6:cf:34:9b:6a:0f:08:21:99:a6:
91:45:f2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:17:26 2026 by rpki-client