Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e342e302f32322d3234203d3e20383334.roa
File: 38372e3235342e342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: 2I1ByI1ShJrhfbJoS5XMVbgzL/j4V3zDgV1b9EtKL3Y=
Subject key identifier: 01:BB:7D:D9:C8:85:F9:9D:B7:7E:5C:89:5E:1D:F4:DC:59:06:1C:7A
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 544575061974C355533C92F269DF8C0F6BDD4D79
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e342e302f32322d3234203d3e20383334.roa
Signing time: Mon 29 Jun 2026 16:48:42 +0000
ROA not before: Mon 29 Jun 2026 16:43:42 +0000
ROA not after: Mon 28 Jun 2027 16:48:42 +0000
asID: 834
IP address blocks: 87.254.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 02:49:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:45:75:06:19:74:c3:55:53:3c:92:f2:69:df:8c:0f:6b:dd:4d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Jun 29 16:43:42 2026 GMT
Not After : Jun 28 16:48:42 2027 GMT
Subject: CN=01BB7DD9C885F99DB77E5C895E1DF4DC59061C7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e4:8e:24:35:33:7c:80:8a:d4:e2:f1:1d:e8:
e0:69:b7:37:65:66:5f:85:3e:6e:a4:9c:8c:30:75:
c3:43:49:c2:35:77:36:ab:26:4c:8b:70:c1:d3:d5:
b5:1d:c1:e4:84:41:cd:f7:75:4e:9b:d9:c1:f9:23:
48:6f:e2:d6:13:b3:c5:80:e2:15:92:ad:38:f0:26:
b8:89:6d:47:48:9a:59:59:a9:ed:9a:23:c3:12:95:
04:73:22:cc:96:34:d6:f4:27:6e:16:e6:68:1c:f9:
c2:a4:9c:a8:5b:6f:7e:16:6e:20:45:ac:00:4b:55:
14:ce:05:53:f5:41:78:f8:da:a6:6e:d0:8e:d7:a1:
28:a7:51:5d:ab:53:73:86:07:5a:5d:bd:a2:43:6f:
e8:65:2f:6f:cb:f3:58:b7:bb:ee:61:e8:f3:02:e0:
04:aa:dc:02:a3:c0:d8:96:29:c7:da:ea:ec:18:88:
35:9d:f9:98:01:f0:13:6b:b1:0c:f6:5c:76:a8:4d:
66:d7:63:b9:5d:56:54:3a:49:84:95:4f:1b:10:76:
c7:19:f7:b5:c0:d3:e7:ea:4e:5a:a3:2d:11:b6:83:
9a:3c:1a:f8:d8:ab:ff:42:5d:8a:9b:40:e2:76:35:
ac:fa:d2:db:87:19:ec:b3:5c:e5:24:dc:02:59:f5:
77:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BB:7D:D9:C8:85:F9:9D:B7:7E:5C:89:5E:1D:F4:DC:59:06:1C:7A
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e342e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.4.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:2b:5a:f5:6f:b6:0b:d3:eb:50:56:3f:46:93:b5:ad:b8:0b:
49:5e:96:12:54:f4:5c:75:c9:4e:72:ce:2d:6b:d4:b7:24:aa:
4b:a1:59:40:8c:d2:f4:ab:23:82:39:ce:0e:2c:3a:76:87:5c:
4c:f3:36:3d:e7:42:78:85:8b:f6:0d:9b:0e:c7:f4:64:bb:dc:
89:b5:09:fa:37:b3:f3:02:97:79:6c:c1:4c:99:d3:b7:7c:90:
c3:12:84:70:a8:fe:a0:e6:58:43:c5:16:05:5b:71:42:bf:62:
c8:0c:0a:b2:27:1b:f1:4e:96:da:a8:bf:eb:1f:1a:fb:0f:94:
09:3e:95:0d:20:30:8f:e3:6d:26:21:e8:4c:aa:af:7e:33:d1:
da:26:13:f9:b2:6a:d0:08:81:d8:3a:0a:1a:73:e5:47:b1:4a:
1c:3c:05:5c:c6:b3:b0:fd:97:85:b3:f0:a3:6a:59:a4:79:22:
c5:dd:51:df:8d:cc:4f:3b:01:74:28:b1:65:1c:98:54:de:bc:
00:1c:c6:25:f2:51:59:ce:f0:e5:ad:b3:95:d7:ea:20:79:e8:
b9:13:43:de:56:5d:17:f7:90:95:f7:bc:8b:28:66:56:ba:63:
1d:1d:45:97:3f:4b:6c:4b:a5:b9:64:8b:c7:5d:0b:e0:77:fb:
7b:50:48:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:20:23 2026 by rpki-client