Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31312e302f32342d3234203d3e20313437323831.roa
File: 38372e3235342e31312e302f32342d3234203d3e20313437323831.roa (raw, json)
Hash identifier: BqBZ+dpze/TrhUpjUL7GvfXJG8nlPAhZLSWDSQtwsrI=
Subject key identifier: 5F:D7:E3:63:99:C7:1B:C8:F1:89:37:DF:C1:F7:25:81:F0:2B:51:95
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 5228CCC3E04297C7B892A13D61FD04CE4CFC5A96
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31312e302f32342d3234203d3e20313437323831.roa
Signing time: Wed 21 Oct 2026 07:47:37 +0000
ROA not before: Wed 21 Oct 2026 07:42:37 +0000
ROA not after: Wed 20 Oct 2027 07:47:37 +0000
asID: 147281
IP address blocks: 87.254.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 13:53:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:28:cc:c3:e0:42:97:c7:b8:92:a1:3d:61:fd:04:ce:4c:fc:5a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Oct 21 07:42:37 2026 GMT
Not After : Oct 20 07:47:37 2027 GMT
Subject: CN=5FD7E36399C71BC8F18937DFC1F72581F02B5195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:54:46:e4:04:4e:c7:b7:e3:4a:ae:cc:67:36:
b1:47:30:02:e4:09:51:f3:3d:ab:a0:0c:9a:1f:4a:
b0:be:72:4e:3c:0f:af:6b:87:2f:36:8b:2a:e6:4f:
78:1e:dc:a2:a6:74:61:72:de:e7:a7:a1:bc:96:78:
4b:ea:c0:e8:a0:b3:23:81:e4:fc:2e:42:d4:91:96:
aa:ad:b3:0d:dd:61:cc:6b:5c:a6:f9:00:2a:19:25:
13:ae:bd:ff:b6:1e:cb:88:e5:01:0c:f4:83:40:14:
ba:0a:ce:db:43:ff:73:3f:0e:28:74:48:12:10:11:
55:9a:84:d4:8b:c9:58:07:50:3e:e9:39:04:83:f0:
b6:23:93:11:8e:b9:88:11:73:be:ac:57:f3:65:a4:
74:9a:86:9e:5b:56:45:b3:73:7d:ec:00:ea:a1:cb:
b8:af:07:75:92:76:6c:82:a6:39:ef:bd:c3:75:2a:
4c:3c:e1:20:9b:44:36:ca:d1:16:4e:7a:e8:cb:ea:
f6:fd:a4:bb:00:cc:b6:c7:e7:04:7f:31:17:b7:15:
66:ac:f0:54:67:56:d4:08:8a:72:03:22:6b:5b:02:
a3:e5:42:76:19:11:d0:09:20:7f:fa:aa:af:14:2d:
06:f0:a0:c2:56:15:49:e4:a0:2b:1d:34:94:92:49:
7b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D7:E3:63:99:C7:1B:C8:F1:89:37:DF:C1:F7:25:81:F0:2B:51:95
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31312e302f32342d3234203d3e20313437323831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.11.0/24
Signature Algorithm: sha256WithRSAEncryption
64:fc:97:11:f5:e6:09:e4:5a:49:6d:93:30:7e:91:06:d6:c7:
b4:3d:a5:85:4a:62:c7:2b:0d:dc:e5:39:60:03:8b:b9:d1:96:
31:28:da:4f:1e:9c:46:ea:fc:28:2c:9f:fb:ce:22:5e:7b:d2:
2a:5a:8b:cd:79:4a:e7:61:ad:1b:40:dc:23:e0:43:38:a4:bc:
82:1a:37:89:e5:8e:0a:6e:23:3b:f6:1c:1a:83:4e:d1:9d:b7:
e4:2d:00:c3:de:c3:bf:df:f4:e5:a4:57:2e:b4:30:f4:3c:87:
86:cf:c0:31:ad:cd:50:25:d2:15:c1:bc:56:e0:42:10:e7:93:
47:9b:b4:f5:0f:d2:cb:5a:36:57:4d:db:b4:0d:4c:3f:06:71:
52:f7:1a:fc:50:d7:57:87:b1:13:6f:b5:af:d3:a0:63:a5:66:
20:c4:49:6e:07:34:31:c5:aa:5a:31:47:10:bd:2c:c9:bc:41:
f4:b3:07:6f:b1:fc:31:65:a3:9d:39:89:ee:36:c6:06:4e:08:
52:bd:0d:cb:b4:1b:e4:d7:2c:55:2b:8e:89:9f:e0:09:ba:15:
1a:d5:ba:70:8f:d3:df:79:3d:b5:f4:fb:01:4f:f8:24:02:1e:
30:ca:d4:82:4d:c0:e4:48:db:6f:04:1b:6d:f5:ca:5d:26:b2:
22:75:51:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 22:45:50 2026 by rpki-client