Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e392e302f32342d3234203d3e20383334.roa
File: 38372e3235342e392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 9xNWK0CP8AKiSnG1dUeeFmXs6klwdHgCE4UZ1NbhInI=
Subject key identifier: 8B:DE:1E:2B:C8:C5:FF:41:E2:82:5C:55:43:DB:3D:5E:D8:67:92:E3
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 7677A0C88B264F5E9E42F2A0B03BABBC810A47DC
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e392e302f32342d3234203d3e20383334.roa
Signing time: Thu 02 Jul 2026 09:11:03 +0000
ROA not before: Thu 02 Jul 2026 09:06:03 +0000
ROA not after: Thu 01 Jul 2027 09:11:03 +0000
asID: 834
IP address blocks: 87.254.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 02:49:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:77:a0:c8:8b:26:4f:5e:9e:42:f2:a0:b0:3b:ab:bc:81:0a:47:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Jul 2 09:06:03 2026 GMT
Not After : Jul 1 09:11:03 2027 GMT
Subject: CN=8BDE1E2BC8C5FF41E2825C5543DB3D5ED86792E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:88:95:85:8d:b7:a3:b7:32:1d:ff:0f:b5:a1:
cb:29:dd:fc:d3:b3:f2:8a:79:c2:c5:99:f7:bc:2e:
23:68:12:05:ee:d7:eb:30:e9:c8:90:3b:86:77:da:
71:e9:0c:a6:86:f3:44:08:f3:8d:0c:0c:d1:8c:cb:
9d:65:da:a7:cf:72:9c:ce:52:a8:a3:52:66:9d:6c:
81:3b:98:d7:76:c3:61:39:90:22:10:81:fe:6b:df:
22:4b:b1:fe:5d:6e:d1:e2:81:02:2f:ad:0a:14:3e:
42:a8:17:ef:e5:27:fe:99:27:a6:48:1f:e8:d8:d4:
08:07:cb:72:53:68:54:f4:ba:d3:8d:02:77:48:c2:
57:25:77:4f:eb:54:25:ee:66:1e:f8:f8:a2:2f:da:
19:e8:63:b3:61:2b:3d:df:b3:03:ee:6b:a1:74:08:
2e:1f:3a:a4:a5:f4:a2:48:29:3e:b1:4b:37:82:08:
f0:bf:51:f0:3d:48:60:a0:38:d7:61:88:0f:33:da:
f8:49:06:6c:a7:7e:06:76:86:e7:27:d8:0c:3e:88:
05:ee:6e:09:0c:b0:01:e4:c7:ac:5a:fc:6a:c2:94:
28:10:38:6c:a4:3a:f1:f2:09:71:39:cd:9c:40:f0:
93:9a:0e:b3:f9:54:b4:9e:87:e0:d7:9b:2d:55:c4:
96:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DE:1E:2B:C8:C5:FF:41:E2:82:5C:55:43:DB:3D:5E:D8:67:92:E3
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.9.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:d0:8b:9e:ec:c5:a7:6e:3b:9a:2b:bd:83:a7:1e:81:8b:97:
03:2a:c0:6e:29:52:7e:25:4f:0e:a1:d0:95:a9:84:f2:bf:3d:
be:69:f1:44:9e:19:e3:d0:f2:ee:18:86:08:ef:ac:01:06:a4:
c2:14:84:3f:36:b7:06:75:28:69:64:d8:22:33:54:1c:a5:b7:
c2:23:cd:2a:93:09:d0:61:f8:82:ca:59:0f:29:e3:57:e5:bd:
25:d4:22:c4:5e:8e:69:5f:fb:fb:30:dd:ca:de:fd:b8:60:6d:
d4:95:6d:1f:bc:ae:14:00:dc:28:af:2a:b2:1b:d9:c4:9d:bc:
79:c8:ab:63:84:5f:86:a9:f3:e5:fa:55:1c:de:fc:cf:bd:47:
5e:bf:27:23:73:78:57:59:03:61:b7:93:8e:d3:e7:87:1c:2f:
8f:dd:5c:e8:49:cf:75:26:70:c9:d9:e2:cb:ee:17:07:cd:f8:
08:b5:5a:56:11:76:41:35:be:0e:86:29:ff:2b:65:a5:50:62:
0c:15:09:48:f8:2a:cc:ce:4c:33:54:22:58:74:dd:ad:5a:f0:
95:b8:a6:8b:9e:6a:dc:35:15:f7:b7:4b:ee:28:8c:1a:24:c9:
df:99:37:f8:ce:cd:d9:9a:36:a7:10:1f:d1:8a:03:54:6d:2d:
d3:d0:9e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:20:23 2026 by rpki-client