Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31302e302f32342d3234203d3e20383334.roa
File: 38372e3235342e31302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: oPVr5yXuRhi0bVIVBieieuruFxHEVdzdC7XAeTMZEM8=
Subject key identifier: 65:46:17:FD:94:D0:18:BF:78:F5:2D:FA:CA:E2:37:14:99:4C:39:14
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 11747AEC5ABF8101AB19301EB62D34D851C0727F
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31302e302f32342d3234203d3e20383334.roa
Signing time: Wed 21 Oct 2026 07:49:29 +0000
ROA not before: Wed 21 Oct 2026 07:44:29 +0000
ROA not after: Wed 20 Oct 2027 07:49:29 +0000
asID: 834
IP address blocks: 87.254.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 21:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:74:7a:ec:5a:bf:81:01:ab:19:30:1e:b6:2d:34:d8:51:c0:72:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Oct 21 07:44:29 2026 GMT
Not After : Oct 20 07:49:29 2027 GMT
Subject: CN=654617FD94D018BF78F52DFACAE23714994C3914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5c:51:78:06:9b:83:b7:1d:f2:0d:2d:f6:59:
c0:88:cb:bf:ad:64:6c:7b:3a:0c:29:aa:0d:4f:05:
dc:28:5a:e8:e2:5d:ac:eb:a0:2e:fa:e7:17:ac:8c:
3b:71:92:6c:29:be:7a:10:ad:c1:52:7c:89:60:04:
f7:98:55:18:7f:e8:53:22:99:9d:dd:df:f9:d6:1d:
7d:7c:75:a7:0c:59:e6:b2:a8:8a:2c:d3:d5:c4:f8:
c0:a7:92:b0:90:72:c0:1c:b8:e4:35:1b:d5:d3:8d:
74:86:42:25:2d:64:a8:be:8b:0a:e4:13:a6:98:45:
47:fe:18:96:97:ea:88:41:71:e0:c1:d5:f3:26:ff:
f1:72:01:34:53:c0:d9:a0:57:f7:4c:22:dd:32:8d:
3e:2b:f8:6c:7d:b5:1b:e8:34:8b:b7:37:74:2a:86:
b2:62:83:8c:26:ca:bd:49:11:32:e0:e1:08:fb:3c:
c4:32:41:29:ed:56:b2:c7:4a:c4:6e:9b:07:a0:a9:
dc:8e:9a:42:86:c1:5a:ad:a6:c5:45:75:31:36:6a:
11:55:d0:7f:32:ee:35:26:fc:75:6a:fc:a1:c9:86:
5b:17:9a:d0:13:e8:95:c9:e6:74:28:e2:70:5b:10:
75:0f:6b:dd:11:f1:a0:c0:9a:22:ca:e8:8c:af:94:
42:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:46:17:FD:94:D0:18:BF:78:F5:2D:FA:CA:E2:37:14:99:4C:39:14
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.10.0/24
Signature Algorithm: sha256WithRSAEncryption
48:02:50:67:b3:27:d1:14:66:76:cc:f3:a6:63:1a:6c:b6:0f:
36:ba:b5:47:cb:b2:17:e7:5d:dd:2f:22:b7:29:88:e9:7e:cc:
10:c5:de:b7:ab:bd:ae:e3:3d:1f:d6:73:99:06:da:07:7e:74:
53:6f:65:87:70:62:0a:d0:84:95:8c:46:52:cb:f3:66:be:e8:
12:a3:e7:4f:b0:d4:71:56:6a:9a:f4:85:93:e2:7c:41:f4:17:
49:26:d4:68:ac:bb:07:ef:2e:fe:0c:dd:35:d6:ab:c2:92:32:
80:34:16:e1:c4:95:21:85:9b:ad:9d:d8:8c:b2:4e:1d:51:74:
2f:60:b0:43:11:74:ef:8a:4d:24:a0:e6:06:f7:4c:06:77:0d:
4e:f2:03:e8:82:96:75:33:f3:6f:46:b4:65:4c:b9:ac:eb:52:
6f:fc:6f:4f:2f:5a:54:64:83:ee:47:e1:c0:b8:26:d6:06:ac:
33:07:18:2c:a9:3a:49:5c:40:3d:e7:5c:01:7d:8c:1b:4c:92:
29:69:c7:af:5f:1e:2f:49:b3:5f:35:64:23:20:1b:ee:8a:5c:
ad:a4:a8:06:4c:85:5f:44:ea:01:7d:34:7c:0b:41:2b:51:2b:
fe:a7:94:f0:15:b4:24:d8:d5:ba:72:8a:c6:57:0a:3e:24:89:
a6:36:5a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 06:08:40 2026 by rpki-client