Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31312e302f32342d3234203d3e20383334.roa
File: 38372e3235342e31312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 6noWrPn224J6X/0Hlx3qwR8ThT55H4jEkZZcpoco7Rw=
Subject key identifier: 30:AF:0A:97:B7:B4:9E:C6:BC:CF:69:0C:95:68:BE:24:B4:E7:E3:43
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 71FF1069F14C53962317E1ABDA9B9D91F090E6CE
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31312e302f32342d3234203d3e20383334.roa
Signing time: Tue 11 Aug 2026 08:38:10 +0000
ROA not before: Tue 11 Aug 2026 08:33:10 +0000
ROA not after: Tue 10 Aug 2027 08:38:10 +0000
asID: 834
IP address blocks: 87.254.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 22:14:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:ff:10:69:f1:4c:53:96:23:17:e1:ab:da:9b:9d:91:f0:90:e6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Aug 11 08:33:10 2026 GMT
Not After : Aug 10 08:38:10 2027 GMT
Subject: CN=30AF0A97B7B49EC6BCCF690C9568BE24B4E7E343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:90:96:0f:b7:d0:67:de:f1:5b:a9:34:7f:8c:
b9:f3:62:4c:1e:da:ab:4e:62:74:32:0a:90:1a:63:
e6:74:d1:4d:20:cf:bc:5c:41:f6:1e:0c:42:93:a7:
f6:5f:5d:01:52:93:3f:b4:4a:60:ff:63:60:c4:59:
70:4f:72:b6:0e:b5:30:3e:6a:e5:c1:52:de:b5:0f:
6b:e6:83:da:a2:58:b6:b6:06:86:8b:74:00:00:d5:
1f:df:89:7f:c9:d4:24:1c:e3:0c:0c:60:fe:68:a2:
0e:f5:98:be:9e:8a:f7:ee:0c:bb:e4:78:72:0d:8d:
51:6b:0e:c0:5f:45:9d:80:9d:7a:00:ef:76:ca:9d:
11:6d:9f:83:ab:17:5b:7a:6e:e1:fb:f7:ae:28:cb:
c9:88:d7:f2:85:79:5d:72:6f:25:6d:79:21:8a:4f:
7e:e5:8e:b1:e6:fc:d6:cf:62:43:3e:ea:7d:83:7c:
04:32:2b:50:e0:e3:91:6c:21:b1:ac:88:d0:e9:ac:
b1:02:40:ee:6d:95:8e:90:80:67:24:e8:12:c0:b6:
06:db:1e:9e:15:34:4a:11:4d:08:32:31:be:eb:41:
08:8b:1f:c4:c0:0c:8d:5f:08:b9:74:92:82:ed:7a:
10:e0:fd:fd:1e:3b:ba:4b:1e:23:e6:60:d6:1b:97:
06:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AF:0A:97:B7:B4:9E:C6:BC:CF:69:0C:95:68:BE:24:B4:E7:E3:43
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.11.0/24
Signature Algorithm: sha256WithRSAEncryption
11:a1:35:5a:de:55:26:b2:38:35:f7:b5:d2:b8:eb:f1:b1:13:
ff:dd:5c:75:4c:71:68:a0:e3:eb:99:e2:c7:dd:16:69:ee:aa:
00:18:52:72:a5:9b:24:0a:76:32:18:2c:1e:3a:2e:57:18:f3:
27:19:da:fa:3f:12:8c:ec:4c:b3:a3:42:8e:62:95:ff:72:d3:
9b:20:39:ba:3d:07:bb:eb:5e:7c:8a:d1:1f:a1:8c:34:59:e2:
bd:2e:65:5b:ec:8f:22:26:c3:ee:9b:68:c6:7d:ba:42:1e:56:
86:86:d5:ad:8b:7f:56:27:df:f4:b2:3c:98:22:77:5f:88:74:
fc:28:b4:ab:84:e6:87:d1:3d:93:09:12:d8:60:32:b7:68:9a:
0f:f3:c1:6c:d0:64:c9:63:ed:52:e4:ce:a9:32:ef:70:4e:4d:
fd:6c:28:c8:f8:6a:bd:f2:40:93:82:61:3b:4a:e0:45:70:3b:
6f:da:02:c3:ea:0b:cc:1a:ab:85:26:ca:7f:63:b7:ac:f4:62:
0e:a0:90:25:86:a7:96:aa:63:0c:5e:26:1f:29:8e:7f:32:e4:
00:04:23:49:2e:62:d0:d6:a4:5a:e7:42:94:66:5a:41:5e:f7:
3e:99:cc:fb:f0:9f:14:a5:19:45:77:33:b9:1f:eb:d8:c6:80:
62:03:ec:66
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUcf8QafFMU5YjF+Gr2pudkfCQ5s4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJiZmQ0ZTAyMTU0N2QwMzBhYzEwYjAyMTM1MzVkNGM2
OTY4ZWVkZTAeFw0yNjA4MTEwODMzMTBaFw0yNzA4MTAwODM4MTBaMDMxMTAvBgNV
BAMTKDMwQUYwQTk3QjdCNDlFQzZCQ0NGNjkwQzk1NjhCRTI0QjRFN0UzNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmkJYPt9Bn3vFbqTR/jLnzYkwe
2qtOYnQyCpAaY+Z00U0gz7xcQfYeDEKTp/ZfXQFSkz+0SmD/Y2DEWXBPcrYOtTA+
auXBUt61D2vmg9qiWLa2BoaLdAAA1R/fiX/J1CQc4wwMYP5oog71mL6eivfuDLvk
eHINjVFrDsBfRZ2AnXoA73bKnRFtn4OrF1t6buH7964oy8mI1/KFeV1ybyVteSGK
T37ljrHm/NbPYkM+6n2DfAQyK1Dg45FsIbGsiNDprLECQO5tlY6QgGck6BLAtgbb
Hp4VNEoRTQgyMb7rQQiLH8TADI1fCLl0koLtehDg/f0eO7pLHiPmYNYblwajAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUMK8Kl7e0nsa8z2kMlWi+JLTn40MwHwYDVR0j
BBgwFoAUIr/U4CFUfQMKwQsCE1NdTGlo7t4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNhYWNkMTctYmY5ZC00N2RiLTg2NGQtZjljN2MyYmUx
ODNhLzAvMjJCRkQ0RTAyMTU0N0QwMzBBQzEwQjAyMTM1MzVENEM2OTY4RUVERS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lyX1U0Q0ZVZlFNS3dRc0NFMU5kVEds
bzd0NC5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjNhYWNkMTct
YmY5ZC00N2RiLTg2NGQtZjljN2MyYmUxODNhLzAvMzgzNzJlMzIzNTM0MmUzMTMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/4LMA0G
CSqGSIb3DQEBCwUAA4IBAQARoTVa3lUmsjg197XSuOvxsRP/3Vx1THFooOPrmeLH
3RZp7qoAGFJypZskCnYyGCweOi5XGPMnGdr6PxKM7Eyzo0KOYpX/ctObIDm6PQe7
6158itEfoYw0WeK9LmVb7I8iJsPum2jGfbpCHlaGhtWti39WJ9/0sjyYIndfiHT8
KLSrhOaH0T2TCRLYYDK3aJoP88Fs0GTJY+1S5M6pMu9wTk39bCjI+Gq98kCTgmE7
SuBFcDtv2gLD6gvMGquFJsp/Y7es9GIOoJAlhqeWqmMMXiYfKY5/MuQABCNJLmLQ
1qRa50KUZlpBXvc+mcz78J8UpRlFdzO5H+vYxoBiA+xm
-----END CERTIFICATE-----
Generated at Thu Aug 13 12:20:22 2026 by rpki-client