Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e392e302f32342d3234203d3e203136323736.roa
File: 38372e3235342e392e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: tdPEjgEB+QuDu3RAdSXHnz830+oRP3X+yknhpXKYbX0=
Subject key identifier: 93:8E:51:36:5C:B2:13:B6:99:6E:94:32:C7:F2:AB:66:65:1C:2C:6B
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 102F202828B8AC6B90F01607198F53007C5B8990
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e392e302f32342d3234203d3e203136323736.roa
Signing time: Tue 27 Oct 2026 14:48:15 +0000
ROA not before: Tue 27 Oct 2026 14:43:15 +0000
ROA not after: Tue 26 Oct 2027 14:48:15 +0000
asID: 16276
IP address blocks: 87.254.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:2f:20:28:28:b8:ac:6b:90:f0:16:07:19:8f:53:00:7c:5b:89:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Oct 27 14:43:15 2026 GMT
Not After : Oct 26 14:48:15 2027 GMT
Subject: CN=938E51365CB213B6996E9432C7F2AB66651C2C6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:2a:69:97:1a:96:3d:5f:d0:0b:84:80:60:
c8:26:55:69:f0:22:80:2a:29:ca:f0:b1:0e:18:37:
2c:b7:91:30:6d:69:ea:59:38:43:8c:1d:bd:3a:e9:
47:71:09:82:ae:e3:48:6a:13:c1:f4:f2:13:2b:f9:
25:08:af:f0:c9:b5:f2:53:d3:b4:d2:06:a0:82:37:
19:7c:dc:09:46:f4:4a:a6:fa:30:b1:40:68:e2:d6:
88:b2:31:32:8f:ae:ca:eb:3c:01:2f:4d:6d:bb:a7:
8f:37:10:23:9e:d9:23:bb:9a:62:66:60:90:61:9d:
4a:cf:57:8e:ac:ec:41:47:00:39:98:fc:e9:77:0e:
6d:3b:f4:93:2e:67:d9:7f:ef:b0:06:be:1d:d2:43:
87:37:73:c3:c8:ec:f4:a5:71:87:5b:98:cf:89:12:
d5:6c:15:d5:82:e1:78:04:bb:89:81:86:ae:2d:2b:
ae:40:59:6e:ae:df:95:af:76:d7:29:d0:4b:2b:70:
19:73:e0:20:14:18:30:a0:d6:37:8e:29:2e:69:eb:
aa:fa:00:2e:c2:94:65:4d:75:79:5d:d6:23:ce:86:
53:20:f7:8a:bc:8c:97:e3:f6:09:2b:e8:8f:0c:2f:
88:fd:58:b5:e1:d5:8f:4c:ac:15:c4:ce:06:8d:72:
3d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8E:51:36:5C:B2:13:B6:99:6E:94:32:C7:F2:AB:66:65:1C:2C:6B
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e392e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.9.0/24
Signature Algorithm: sha256WithRSAEncryption
30:13:ca:5f:e9:1d:e5:89:4b:22:90:59:d3:b3:5d:1a:9e:43:
c4:e7:77:de:81:91:58:c7:c4:d9:62:e0:d2:15:b9:bf:05:3e:
32:e4:41:dc:64:86:03:3e:26:ee:9e:71:b6:16:45:72:fd:3c:
23:23:e1:b3:c9:2c:5b:15:7e:e0:0b:6b:7e:fe:8f:e9:8b:2c:
2c:81:09:20:e4:c8:62:09:a1:6c:25:a3:c5:d4:17:3f:12:ef:
0d:8c:b9:77:d6:57:b6:62:79:a9:d4:d8:25:aa:e4:54:e2:83:
aa:f9:62:36:3d:24:76:18:b4:0b:df:68:d7:60:ba:32:79:9b:
67:96:42:38:65:29:37:d6:92:b4:7e:f3:0c:28:dc:89:5b:92:
29:dc:76:ee:5b:b8:3d:c3:f9:92:ef:cd:61:f8:89:e9:07:82:
26:45:99:54:77:f9:2a:9f:c0:31:1a:9a:79:5f:98:da:22:96:
66:36:4c:9e:df:6c:7d:f0:f7:fa:5e:e8:fe:c0:6e:3f:b1:3e:
cd:e2:0b:0b:98:cd:b7:88:6d:a4:68:bb:7f:e4:fe:46:40:b8:
62:34:de:5c:4f:5d:d8:e9:c7:d8:fc:97:cf:1c:ed:79:0e:5c:
a1:09:d2:09:d1:26:a2:38:e9:e6:ce:e4:84:41:2d:ac:22:99:
d8:02:a0:a2
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUEC8gKCi4rGuQ8BYHGY9TAHxbiZAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJiZmQ0ZTAyMTU0N2QwMzBhYzEwYjAyMTM1MzVkNGM2
OTY4ZWVkZTAeFw0yNjEwMjcxNDQzMTVaFw0yNzEwMjYxNDQ4MTVaMDMxMTAvBgNV
BAMTKDkzOEU1MTM2NUNCMjEzQjY5OTZFOTQzMkM3RjJBQjY2NjUxQzJDNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqCipplxqWPV/QC4SAYMgmVWnw
IoAqKcrwsQ4YNyy3kTBtaepZOEOMHb066UdxCYKu40hqE8H08hMr+SUIr/DJtfJT
07TSBqCCNxl83AlG9Eqm+jCxQGji1oiyMTKPrsrrPAEvTW27p483ECOe2SO7mmJm
YJBhnUrPV46s7EFHADmY/Ol3Dm079JMuZ9l/77AGvh3SQ4c3c8PI7PSlcYdbmM+J
EtVsFdWC4XgEu4mBhq4tK65AWW6u35Wvdtcp0EsrcBlz4CAUGDCg1jeOKS5p66r6
AC7ClGVNdXld1iPOhlMg94q8jJfj9gkr6I8ML4j9WLXh1Y9MrBXEzgaNcj0HAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUk45RNlyyE7aZbpQyx/KrZmUcLGswHwYDVR0j
BBgwFoAUIr/U4CFUfQMKwQsCE1NdTGlo7t4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNhYWNkMTctYmY5ZC00N2RiLTg2NGQtZjljN2MyYmUx
ODNhLzAvMjJCRkQ0RTAyMTU0N0QwMzBBQzEwQjAyMTM1MzVENEM2OTY4RUVERS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lyX1U0Q0ZVZlFNS3dRc0NFMU5kVEds
bzd0NC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjNhYWNkMTct
YmY5ZC00N2RiLTg2NGQtZjljN2MyYmUxODNhLzAvMzgzNzJlMzIzNTM0MmUzOTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzYzMjM3MzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABX/gkw
DQYJKoZIhvcNAQELBQADggEBADATyl/pHeWJSyKQWdOzXRqeQ8Tnd96BkVjHxNli
4NIVub8FPjLkQdxkhgM+Ju6ecbYWRXL9PCMj4bPJLFsVfuALa37+j+mLLCyBCSDk
yGIJoWwlo8XUFz8S7w2MuXfWV7ZieanU2CWq5FTig6r5YjY9JHYYtAvfaNdgujJ5
m2eWQjhlKTfWkrR+8wwo3Ilbkincdu5buD3D+ZLvzWH4iekHgiZFmVR3+SqfwDEa
mnlfmNoilmY2TJ7fbH3w9/pe6P7Abj+xPs3iCwuYzbeIbaRou3/k/kZAuGI03lxP
Xdjpx9j8l88c7XkOXKEJ0gnRJqI46ebO5IRBLawimdgCoKI=
-----END CERTIFICATE-----
Generated at Wed Oct 28 15:02:03 2026 by rpki-client