Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31332e302f32342d3234203d3e20323036303932.roa
File: 38372e3235342e31332e302f32342d3234203d3e20323036303932.roa (raw, json)
Hash identifier: oUikqYBVi4RcjOhDQmNNaH8TAOGVNq7wtpKIRIIaXQc=
Subject key identifier: B7:21:16:C3:D8:D4:9F:BF:80:A6:01:65:D4:3A:3C:4E:2C:9C:18:45
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 4E0D9D29E2D5C05B7BF5200CADBD2BBEE1DB89F7
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31332e302f32342d3234203d3e20323036303932.roa
Signing time: Tue 08 Sep 2026 07:36:32 +0000
ROA not before: Tue 08 Sep 2026 07:31:32 +0000
ROA not after: Tue 07 Sep 2027 07:36:32 +0000
asID: 206092
IP address blocks: 87.254.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 08:34:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:0d:9d:29:e2:d5:c0:5b:7b:f5:20:0c:ad:bd:2b:be:e1:db:89:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Sep 8 07:31:32 2026 GMT
Not After : Sep 7 07:36:32 2027 GMT
Subject: CN=B72116C3D8D49FBF80A60165D43A3C4E2C9C1845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:95:47:17:80:4c:28:3d:38:95:e3:b9:ff:93:
fe:d7:65:4a:08:1f:8f:8c:d7:0c:7f:50:40:2c:c1:
12:2f:76:0c:b6:b9:ff:a1:57:68:78:05:5b:bd:16:
38:ac:fe:df:6f:72:ea:89:09:91:99:a0:ec:c1:3e:
20:fc:a0:ec:da:ee:f7:6a:14:ef:d8:76:a2:e1:3b:
34:d4:4a:8c:73:c9:e5:1d:8d:34:88:aa:b3:de:ab:
5d:56:5e:39:e0:22:08:f7:68:5c:c6:91:d2:84:89:
b1:7f:3b:e4:f9:29:3f:6b:92:21:b5:54:9b:ab:45:
1d:04:f2:27:68:e6:5d:07:df:40:65:3a:b3:36:98:
c0:0e:3f:8a:3c:53:c2:0c:28:c8:7e:a9:f6:38:5b:
6e:9e:21:a6:2b:2a:9c:f2:8f:28:39:b8:59:86:96:
28:cc:7e:e0:b4:ce:ec:e2:d2:1c:cb:15:f0:fd:0f:
d0:c0:38:dc:01:cc:2c:a3:5b:23:bd:c4:d8:bd:43:
86:fd:6c:b5:57:81:ff:07:41:f6:bc:a3:e8:01:71:
eb:e4:e9:e0:c4:53:3e:e1:ca:a4:4f:b1:a2:98:27:
a7:d3:5b:59:2e:56:45:cd:1d:67:e8:93:5d:4a:7c:
fd:7e:b8:b7:84:f8:0f:d3:4f:1f:29:de:54:f5:f1:
39:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:21:16:C3:D8:D4:9F:BF:80:A6:01:65:D4:3A:3C:4E:2C:9C:18:45
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31332e302f32342d3234203d3e20323036303932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.13.0/24
Signature Algorithm: sha256WithRSAEncryption
77:19:1a:58:0a:d3:98:e4:8f:1f:87:33:ea:bf:a9:37:f9:2e:
50:0a:ae:88:02:bd:51:9e:66:e6:60:bf:ba:e8:46:cf:51:37:
2e:44:a3:91:42:46:45:cc:e6:a8:ad:bc:71:99:99:6f:1b:c5:
ae:7b:64:89:c9:26:bd:a8:0a:df:fb:a2:19:f6:e6:60:4c:16:
de:66:57:eb:51:a5:cc:bd:fc:9f:29:88:1d:b0:27:de:d5:11:
7c:4a:01:38:51:ad:32:2d:83:d2:26:9d:c0:cd:56:cb:cf:85:
97:68:b4:8c:95:dc:42:1e:42:71:76:0c:fc:74:5e:d3:e4:4b:
2f:a0:32:fc:34:6c:0c:9e:2d:e4:28:9d:c8:d8:2a:c0:55:ae:
a5:ef:eb:5e:20:32:7a:d1:00:16:03:86:64:29:e2:49:d1:f5:
fb:2a:50:14:e7:3e:3d:09:a8:f6:eb:6e:f6:5b:e4:a8:9f:e0:
73:84:87:f3:94:d2:38:45:09:be:86:ec:60:25:54:33:bd:7e:
97:c0:2f:26:6b:b0:6a:f2:c5:f5:e9:c7:92:f4:e8:e9:64:7a:
ff:e6:f4:f0:98:04:3f:d4:b7:04:0d:c6:07:f2:be:b6:a3:aa:
b1:e6:9c:5b:65:bf:09:20:dd:78:a9:dd:a4:29:b7:29:6d:d3:
03:0c:7b:a9
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUTg2dKeLVwFt79SAMrb0rvuHbifcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJiZmQ0ZTAyMTU0N2QwMzBhYzEwYjAyMTM1MzVkNGM2
OTY4ZWVkZTAeFw0yNjA5MDgwNzMxMzJaFw0yNzA5MDcwNzM2MzJaMDMxMTAvBgNV
BAMTKEI3MjExNkMzRDhENDlGQkY4MEE2MDE2NUQ0M0EzQzRFMkM5QzE4NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNlUcXgEwoPTiV47n/k/7XZUoI
H4+M1wx/UEAswRIvdgy2uf+hV2h4BVu9Fjis/t9vcuqJCZGZoOzBPiD8oOza7vdq
FO/YdqLhOzTUSoxzyeUdjTSIqrPeq11WXjngIgj3aFzGkdKEibF/O+T5KT9rkiG1
VJurRR0E8ido5l0H30BlOrM2mMAOP4o8U8IMKMh+qfY4W26eIaYrKpzyjyg5uFmG
lijMfuC0zuzi0hzLFfD9D9DAONwBzCyjWyO9xNi9Q4b9bLVXgf8HQfa8o+gBcevk
6eDEUz7hyqRPsaKYJ6fTW1kuVkXNHWfok11KfP1+uLeE+A/TTx8p3lT18Tk3AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUtyEWw9jUn7+ApgFl1Do8TiycGEUwHwYDVR0j
BBgwFoAUIr/U4CFUfQMKwQsCE1NdTGlo7t4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNhYWNkMTctYmY5ZC00N2RiLTg2NGQtZjljN2MyYmUx
ODNhLzAvMjJCRkQ0RTAyMTU0N0QwMzBBQzEwQjAyMTM1MzVENEM2OTY4RUVERS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lyX1U0Q0ZVZlFNS3dRc0NFMU5kVEds
bzd0NC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjNhYWNkMTct
YmY5ZC00N2RiLTg2NGQtZjljN2MyYmUxODNhLzAvMzgzNzJlMzIzNTM0MmUzMTMz
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM2MzAzOTMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
V/4NMA0GCSqGSIb3DQEBCwUAA4IBAQB3GRpYCtOY5I8fhzPqv6k3+S5QCq6IAr1R
nmbmYL+66EbPUTcuRKORQkZFzOaorbxxmZlvG8Wue2SJySa9qArf+6IZ9uZgTBbe
ZlfrUaXMvfyfKYgdsCfe1RF8SgE4Ua0yLYPSJp3AzVbLz4WXaLSMldxCHkJxdgz8
dF7T5EsvoDL8NGwMni3kKJ3I2CrAVa6l7+teIDJ60QAWA4ZkKeJJ0fX7KlAU5z49
Caj26272W+Son+BzhIfzlNI4RQm+huxgJVQzvX6XwC8ma7Bq8sX16ceS9OjpZHr/
5vTwmAQ/1LcEDcYH8r62o6qx5pxbZb8JIN14qd2kKbcpbdMDDHup
-----END CERTIFICATE-----
Generated at Sun Sep 13 01:24:19 2026 by rpki-client