Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31302e302f32342d3234203d3e20313432323430.roa
File: 38372e3235342e31302e302f32342d3234203d3e20313432323430.roa (raw, json)
Hash identifier: Dxg/qNAtSqewgE0e3s1iQmWDtkg7PNHXMZNxG2+ciJQ=
Subject key identifier: B7:90:F5:98:FB:5C:C1:25:84:60:02:44:DB:AA:21:9E:CD:B2:86:4E
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 036F4772B4A210199D10D21176521E818FC632F1
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31302e302f32342d3234203d3e20313432323430.roa
Signing time: Tue 11 Aug 2026 08:37:31 +0000
ROA not before: Tue 11 Aug 2026 08:32:31 +0000
ROA not after: Tue 10 Aug 2027 08:37:31 +0000
asID: 142240
IP address blocks: 87.254.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:6f:47:72:b4:a2:10:19:9d:10:d2:11:76:52:1e:81:8f:c6:32:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Aug 11 08:32:31 2026 GMT
Not After : Aug 10 08:37:31 2027 GMT
Subject: CN=B790F598FB5CC12584600244DBAA219ECDB2864E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e9:bf:e3:59:7d:9b:fa:4f:23:5e:7d:07:69:
9c:41:f4:9d:e0:3c:79:87:dd:af:7d:44:ca:08:31:
f1:20:27:25:51:06:f4:30:d0:c2:ce:84:d1:f1:ac:
66:5e:e8:76:cc:f0:73:87:e4:ad:b2:2a:0f:43:1b:
fd:9e:85:85:6b:88:d7:54:a4:c9:15:5b:5e:cd:a3:
23:57:87:d9:2b:f4:fb:55:dd:92:d5:47:0f:54:70:
15:41:37:bb:dc:94:1a:22:19:22:c6:5c:5d:39:cb:
46:ed:06:93:b6:48:32:ab:b3:4c:a1:cd:0c:13:8a:
64:9f:da:9c:31:8d:8b:00:8e:c6:ca:6b:53:7a:4f:
6b:44:99:0c:af:c1:29:48:b9:11:72:49:07:7f:39:
6b:56:20:23:e0:d2:00:44:ee:4c:b2:e2:e8:4c:9e:
a9:ff:37:c9:9a:6f:dd:fe:b3:f3:0a:51:68:80:04:
fc:06:4e:1a:4a:e3:b0:02:d9:65:cb:65:c1:9f:53:
52:31:1d:28:7b:ae:05:00:69:1f:68:22:2c:ed:ac:
1e:02:98:10:ba:f6:db:3d:03:a5:70:6e:ce:ef:80:
44:5d:15:78:fc:ba:66:02:a7:d2:90:e4:df:09:91:
a4:e2:ea:d6:d9:b4:e3:77:54:fd:86:d0:3c:ab:d1:
e5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:90:F5:98:FB:5C:C1:25:84:60:02:44:DB:AA:21:9E:CD:B2:86:4E
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31302e302f32342d3234203d3e20313432323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.10.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:eb:0b:78:54:3c:d2:b0:e6:3d:42:11:3e:f8:28:a5:1f:f0:
ad:15:3b:f0:11:5b:84:10:89:1e:9e:de:0d:2a:dc:0a:b0:76:
72:56:e3:d4:8d:f5:1d:6f:54:9e:23:06:78:ae:79:c4:b0:40:
ee:65:c0:af:b1:97:53:f7:3c:95:61:a9:bd:71:c0:ab:61:9f:
8e:39:4d:87:ab:cc:cd:5c:72:75:d3:72:83:c5:fb:66:7d:ef:
dc:5b:c4:b3:16:89:c5:14:fd:b3:30:f9:ec:72:38:1a:d3:a1:
d1:fb:e7:49:14:fb:e9:62:d1:c2:6c:26:3a:e4:be:6b:a8:06:
29:40:f1:42:7b:2a:62:1f:f1:42:d1:73:c3:8d:45:f1:e6:f2:
57:29:17:d4:8d:ed:3c:58:35:ce:99:4d:93:17:e4:71:dd:ac:
fb:2a:8c:18:04:2a:97:e2:b5:00:21:ec:9c:a6:be:cb:fb:92:
f7:28:7f:00:5e:e9:0e:ef:8e:7e:a7:33:17:46:72:16:cd:73:
c0:58:42:b1:08:fb:17:19:cc:e5:0c:20:9f:fc:5d:67:9a:2c:
bc:00:5a:20:84:c0:a7:09:03:1c:d3:7f:15:7d:32:63:c3:5e:
a8:c3:50:d4:a8:a1:50:81:3e:11:ac:8a:fe:1e:f1:d9:47:85:
76:0c:ca:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:33:19 2026 by rpki-client