Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32382e302f32342d3234203d3e203438303131.roa
File: 38372e3235342e32382e302f32342d3234203d3e203438303131.roa (raw, json)
Hash identifier: 8oJZ/FjkgQU0NuXFdCxfdmf+Mh8lECUVr3u2Hj4Jb0s=
Subject key identifier: 8D:E0:3A:5C:4E:88:A5:44:67:B1:54:7F:84:DA:5C:19:F3:18:7D:8E
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 6DD4A50BE3444D273D39ADFA1FAF705D6A3AF39C
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32382e302f32342d3234203d3e203438303131.roa
Signing time: Thu 15 Oct 2026 11:13:06 +0000
ROA not before: Thu 15 Oct 2026 11:08:06 +0000
ROA not after: Thu 14 Oct 2027 11:13:06 +0000
asID: 48011
IP address blocks: 87.254.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 16:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:d4:a5:0b:e3:44:4d:27:3d:39:ad:fa:1f:af:70:5d:6a:3a:f3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Oct 15 11:08:06 2026 GMT
Not After : Oct 14 11:13:06 2027 GMT
Subject: CN=8DE03A5C4E88A54467B1547F84DA5C19F3187D8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ff:26:fc:b6:6e:25:4c:98:e1:d8:7a:dd:bd:
c3:4b:5c:d3:7e:3b:d5:da:22:30:bc:4a:83:6b:97:
49:38:df:b8:ec:4a:99:12:1e:57:4b:6d:ca:0a:66:
83:2b:37:32:ab:a6:4d:22:37:d0:6e:7a:6b:83:62:
42:2f:88:43:ce:61:2d:00:42:c4:a7:13:9a:85:3f:
c7:2e:64:92:8d:eb:9f:5f:94:29:c4:be:78:77:92:
6d:c6:1f:8c:a0:e5:05:d6:d3:a7:33:fc:e1:9f:ea:
cd:78:50:f0:1b:08:2f:14:d2:68:da:87:23:d3:a0:
d8:e9:36:88:cb:c8:19:a1:58:99:80:ec:09:53:36:
fc:55:3a:c7:78:aa:af:d3:73:ab:58:dd:c7:b6:e0:
d5:51:62:0f:90:52:c9:c0:33:d5:5f:f7:0f:80:99:
82:2b:97:a4:57:6c:95:b7:0e:a8:b8:19:c4:1b:44:
03:dc:2a:4f:17:d0:15:4a:63:65:0f:0f:ae:46:84:
78:b3:2f:5e:26:87:2f:5f:8e:e0:25:04:2a:f2:6a:
3f:a4:68:c2:d2:6c:70:db:ef:f1:8e:80:0e:b3:1d:
b2:13:bf:af:be:b1:b9:28:9a:2d:87:07:29:4c:cc:
73:34:02:80:dc:2c:31:70:4e:d6:c0:a8:c5:6e:17:
18:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E0:3A:5C:4E:88:A5:44:67:B1:54:7F:84:DA:5C:19:F3:18:7D:8E
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32382e302f32342d3234203d3e203438303131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.28.0/24
Signature Algorithm: sha256WithRSAEncryption
81:82:02:05:0c:dd:12:53:96:24:65:b9:53:8e:62:ea:df:87:
c4:bd:72:db:3e:7b:eb:4b:7b:c7:74:68:8c:28:37:91:ab:ff:
3d:42:dd:8e:52:fd:80:4c:7e:2c:a9:e2:2e:ec:f3:26:ac:97:
98:7b:55:aa:6f:6e:6d:a4:86:7c:74:48:6b:d3:e8:7f:25:d0:
95:b0:20:aa:ab:11:44:57:93:91:9d:62:8c:2b:2c:7a:87:e3:
24:a9:29:db:96:be:7c:e2:a0:e4:90:6b:64:77:bb:9c:be:1a:
c1:13:a6:96:ef:0f:07:f9:bd:7c:4b:20:1e:e4:89:9d:ca:de:
9f:68:1e:a2:be:06:c9:e3:8c:49:43:39:d8:ff:03:7f:99:7e:
4d:27:c6:1a:98:73:f7:1d:bf:11:73:d8:b9:ae:fb:67:39:a3:
a9:e8:50:ca:73:46:92:51:9d:00:22:4a:f1:51:d3:50:e1:a1:
41:6c:45:f9:db:e0:fe:f0:ec:ab:1e:21:28:fb:5f:42:10:7c:
04:48:8e:41:c4:82:ad:18:82:47:63:39:91:36:75:94:fb:8a:
d6:68:c7:dd:d3:cb:ec:2a:c6:23:a1:ba:25:dd:d1:76:dc:dd:
57:a0:46:8e:b7:ca:a5:33:41:95:05:92:06:67:bb:56:c4:18:
91:15:ad:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:14:15 2026 by rpki-client