Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e372e302f32342d3234203d3e20343031333632.roa
File: 38372e3235342e372e302f32342d3234203d3e20343031333632.roa (raw, json)
Hash identifier: l/Tir1KU5tQPgEhXt4OgP3+S+oyGyQEzW5JVvi4C4LM=
Subject key identifier: CB:C1:11:95:F8:5A:A6:D4:C7:B0:9A:47:CA:18:16:7C:FE:4E:89:2E
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 7C001B051421E1DB2C81745305E88B5350BBB3CF
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e372e302f32342d3234203d3e20343031333632.roa
Signing time: Mon 14 Sep 2026 12:46:40 +0000
ROA not before: Mon 14 Sep 2026 12:41:40 +0000
ROA not after: Mon 13 Sep 2027 12:46:40 +0000
asID: 401362
IP address blocks: 87.254.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:00:1b:05:14:21:e1:db:2c:81:74:53:05:e8:8b:53:50:bb:b3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Sep 14 12:41:40 2026 GMT
Not After : Sep 13 12:46:40 2027 GMT
Subject: CN=CBC11195F85AA6D4C7B09A47CA18167CFE4E892E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e5:e5:14:67:22:f3:8c:5e:28:17:f2:8a:75:
d9:92:e2:27:49:3b:b8:74:86:a5:24:27:7c:f6:4e:
cb:74:a7:4b:a1:2f:b0:71:65:c5:ff:98:77:a2:ec:
97:a8:63:76:e8:92:25:84:17:07:a2:af:fa:f0:29:
54:f3:c3:2a:16:12:6e:57:b1:0f:d1:bb:74:95:5f:
e8:08:1d:89:22:30:24:e3:98:91:6e:b3:e8:d4:f7:
55:68:b5:c8:7e:5f:50:cd:47:9e:b4:6a:27:54:85:
8d:51:76:7e:71:e5:79:35:db:f7:55:4f:b8:bd:34:
72:c9:f7:99:e9:86:79:5e:11:fd:cd:0a:bd:bd:8b:
86:b9:15:4c:04:20:bb:44:ca:ee:e6:98:84:96:6d:
7c:ff:54:14:a4:e1:84:8a:3a:65:16:cd:97:51:89:
f8:ce:4a:98:2c:c2:6d:a1:da:5a:f6:59:66:d2:8f:
27:11:ee:e0:9b:da:8b:b9:cc:2b:61:aa:dc:f5:9d:
a6:7e:7f:51:4e:03:68:19:bf:39:d0:e9:b1:6a:e1:
ec:4c:3a:e5:93:39:3a:5d:f0:6c:93:50:f5:7f:d0:
65:1b:17:09:b9:31:fc:dd:7e:0f:c7:4e:7d:03:64:
ee:83:a8:21:38:d0:c2:14:90:e1:66:71:f6:19:d9:
9d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C1:11:95:F8:5A:A6:D4:C7:B0:9A:47:CA:18:16:7C:FE:4E:89:2E
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e372e302f32342d3234203d3e20343031333632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.7.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:76:0e:04:20:c9:1a:2b:2b:ec:53:44:c0:a9:1c:3d:d8:96:
d3:62:e5:6c:56:14:5e:56:92:88:87:f8:18:34:ed:6c:ac:41:
49:14:e7:61:d4:18:03:dd:e0:c0:63:d6:2b:30:1b:1e:f0:00:
a1:07:5c:f6:38:38:a4:7f:01:99:61:14:7c:ef:ae:c0:5d:9a:
92:5c:33:29:fe:7a:72:43:ee:64:56:ab:f8:28:34:32:6e:25:
dd:72:1b:9c:c1:13:bd:fe:ee:5a:79:54:c3:8f:b7:ff:e3:d4:
41:81:d4:06:12:6e:dc:1d:a7:70:83:48:40:44:53:99:34:25:
43:21:ce:13:28:a7:b5:1f:83:2f:0b:12:c1:47:94:14:0a:bb:
78:29:1b:67:fd:d8:8a:9d:5b:79:c8:8d:0d:5c:8f:da:fc:b9:
55:f2:94:ef:65:bd:ed:a8:cd:77:83:90:35:0e:0e:5e:21:53:
9b:04:c5:eb:2e:e5:b6:fc:09:de:56:68:69:f4:b7:eb:d2:84:
83:ed:bc:70:a0:eb:23:08:27:c2:2d:f0:0b:33:d5:ad:d4:53:
47:ac:df:a0:62:1a:da:31:3a:bb:1d:5c:4d:02:94:c5:79:38:
b6:86:bd:6f:dd:e6:5a:c9:6b:59:de:39:2b:83:89:46:46:f9:
38:72:90:01
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUfAAbBRQh4dssgXRTBeiLU1C7s88wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJiZmQ0ZTAyMTU0N2QwMzBhYzEwYjAyMTM1MzVkNGM2
OTY4ZWVkZTAeFw0yNjA5MTQxMjQxNDBaFw0yNzA5MTMxMjQ2NDBaMDMxMTAvBgNV
BAMTKENCQzExMTk1Rjg1QUE2RDRDN0IwOUE0N0NBMTgxNjdDRkU0RTg5MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+5eUUZyLzjF4oF/KKddmS4idJ
O7h0hqUkJ3z2Tst0p0uhL7BxZcX/mHei7JeoY3bokiWEFweir/rwKVTzwyoWEm5X
sQ/Ru3SVX+gIHYkiMCTjmJFus+jU91Votch+X1DNR560aidUhY1Rdn5x5Xk12/dV
T7i9NHLJ95nphnleEf3NCr29i4a5FUwEILtEyu7mmISWbXz/VBSk4YSKOmUWzZdR
ifjOSpgswm2h2lr2WWbSjycR7uCb2ou5zCthqtz1naZ+f1FOA2gZvznQ6bFq4exM
OuWTOTpd8GyTUPV/0GUbFwm5Mfzdfg/HTn0DZO6DqCE40MIUkOFmcfYZ2Z0zAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUy8ERlfhaptTHsJpHyhgWfP5OiS4wHwYDVR0j
BBgwFoAUIr/U4CFUfQMKwQsCE1NdTGlo7t4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNhYWNkMTctYmY5ZC00N2RiLTg2NGQtZjljN2MyYmUx
ODNhLzAvMjJCRkQ0RTAyMTU0N0QwMzBBQzEwQjAyMTM1MzVENEM2OTY4RUVERS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lyX1U0Q0ZVZlFNS3dRc0NFMU5kVEds
bzd0NC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjNhYWNkMTct
YmY5ZC00N2RiLTg2NGQtZjljN2MyYmUxODNhLzAvMzgzNzJlMzIzNTM0MmUzNzJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzAzMTMzMzYzMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFf+
BzANBgkqhkiG9w0BAQsFAAOCAQEAnnYOBCDJGisr7FNEwKkcPdiW02LlbFYUXlaS
iIf4GDTtbKxBSRTnYdQYA93gwGPWKzAbHvAAoQdc9jg4pH8BmWEUfO+uwF2aklwz
Kf56ckPuZFar+Cg0Mm4l3XIbnMETvf7uWnlUw4+3/+PUQYHUBhJu3B2ncINIQERT
mTQlQyHOEyintR+DLwsSwUeUFAq7eCkbZ/3Yip1beciNDVyP2vy5VfKU72W97ajN
d4OQNQ4OXiFTmwTF6y7ltvwJ3lZoafS369KEg+28cKDrIwgnwi3wCzPVrdRTR6zf
oGIa2jE6ux1cTQKUxXk4toa9b93mWslrWd45K4OJRkb5OHKQAQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 15:12:45 2026 by rpki-client