Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32352e302f32342d3234203d3e20383334.roa
File: 38372e3235342e32352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: TGOtG3amXx0E1MjepLoFOD14iGF8L8gwbtptYoy5hLo=
Subject key identifier: 97:26:10:DB:47:94:0B:6E:2D:01:F8:CA:FB:E4:2D:91:FA:A6:7A:32
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 7885CA8009B5E1E220A8AE03D9183430EBC6EEF6
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32352e302f32342d3234203d3e20383334.roa
Signing time: Wed 30 Sep 2026 04:27:19 +0000
ROA not before: Wed 30 Sep 2026 04:22:19 +0000
ROA not after: Wed 29 Sep 2027 04:27:19 +0000
asID: 834
IP address blocks: 87.254.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 16:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:85:ca:80:09:b5:e1:e2:20:a8:ae:03:d9:18:34:30:eb:c6:ee:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Sep 30 04:22:19 2026 GMT
Not After : Sep 29 04:27:19 2027 GMT
Subject: CN=972610DB47940B6E2D01F8CAFBE42D91FAA67A32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:03:f6:e0:0d:df:b3:2e:62:1d:da:e0:59:93:
bf:74:3b:22:f8:d9:2a:fe:ce:11:0f:e7:fb:8e:af:
8e:e4:4d:e6:6e:fd:76:89:08:35:c2:61:40:fe:12:
48:48:31:41:d9:86:9d:1a:c1:66:e1:3c:d5:36:ce:
f6:f6:9f:d8:0d:f6:9e:f9:3d:74:1e:e0:33:ff:d7:
d6:07:19:84:c7:d4:88:90:19:8f:86:7c:44:34:35:
d7:24:48:1e:44:6d:eb:bb:2a:65:54:3e:a1:d3:26:
db:c3:3b:c9:f2:9d:cd:01:9d:35:c3:37:a1:18:2b:
52:4a:c2:7b:cc:d1:7a:52:20:ac:ff:b2:b5:c4:71:
d0:65:a1:fa:a7:ba:8d:bd:8a:77:d0:dc:67:90:bc:
1f:f2:07:f9:a4:fd:30:bf:fb:83:9c:79:ae:40:5e:
85:06:cd:b1:59:f4:8e:4d:67:89:05:b4:8f:d9:a5:
50:e4:fb:a5:18:92:4c:9b:03:64:69:58:37:0d:11:
c5:e4:da:43:fc:07:4d:36:db:e4:50:d6:bf:70:85:
49:7e:c9:69:ac:02:f4:95:34:ab:57:ef:f0:27:f4:
cb:6b:63:95:f7:a8:17:7b:2d:50:a7:fd:af:97:9a:
9f:cf:c0:e9:ae:3b:03:e4:d9:26:55:73:ee:95:b9:
6c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:26:10:DB:47:94:0B:6E:2D:01:F8:CA:FB:E4:2D:91:FA:A6:7A:32
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.25.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:3b:14:e8:5b:91:6f:72:a1:b6:a1:6f:f5:81:52:fe:75:e1:
0b:1e:5c:1f:32:ea:d8:41:f5:5f:6e:36:d2:8d:d2:e0:c4:bd:
35:ff:3c:6a:cb:f4:3f:fc:0d:85:53:21:31:e0:81:34:ac:ee:
16:98:1b:4b:c4:f9:da:67:52:2d:1e:e5:5d:e6:44:8a:df:91:
65:49:ef:ab:40:ca:58:0b:22:67:9e:db:2a:ae:be:9f:f7:ea:
18:b7:b3:ed:c5:41:58:94:bf:cd:f7:7e:21:c8:2c:18:31:39:
b4:29:e0:a3:82:c9:dc:d8:fe:82:ff:91:5f:af:08:c6:2a:fd:
2d:ad:d2:71:29:fa:92:a9:94:4a:6f:39:b9:c5:b3:3c:eb:ff:
c6:d4:67:be:65:a3:9d:42:56:c6:16:88:d5:af:33:8b:e4:ec:
31:28:7c:e1:55:35:a9:8c:69:e8:a6:09:f4:ed:b4:32:33:78:
0b:f8:d7:8a:89:61:37:7d:29:35:d9:ad:0c:c1:88:8e:e6:72:
63:83:46:4b:6a:2b:95:eb:a6:25:8e:e9:8e:65:d7:ba:33:f9:
cf:d9:f8:01:06:31:c1:ca:3f:63:49:69:46:89:02:37:8b:79:
0a:52:f0:f1:d4:aa:4a:73:8d:e3:26:6f:38:b7:6c:c1:1c:00:
8e:28:be:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:14:04 2026 by rpki-client