Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31342e302f32342d3234203d3e20323138383632.roa
File: 38372e3235342e31342e302f32342d3234203d3e20323138383632.roa (raw, json)
Hash identifier: F1OX6LNWl+YwC+chgvQSQD6NIxsSYKS/34Wqd3CKlgY=
Subject key identifier: 80:4F:23:18:10:C2:80:69:CD:E0:28:F3:11:32:51:06:9B:EA:25:F6
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 692EF811F8FA1C383AA72BAF535EE0BE5DE9306A
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31342e302f32342d3234203d3e20323138383632.roa
Signing time: Mon 07 Sep 2026 06:21:27 +0000
ROA not before: Mon 07 Sep 2026 06:16:27 +0000
ROA not after: Mon 06 Sep 2027 06:21:27 +0000
asID: 218862
IP address blocks: 87.254.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 03:52:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:2e:f8:11:f8:fa:1c:38:3a:a7:2b:af:53:5e:e0:be:5d:e9:30:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Sep 7 06:16:27 2026 GMT
Not After : Sep 6 06:21:27 2027 GMT
Subject: CN=804F231810C28069CDE028F3113251069BEA25F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:eb:e2:7d:93:ce:c1:ff:2c:de:f1:83:c6:b1:
27:8e:e4:74:4c:19:28:ae:81:b2:e9:9a:08:e2:e7:
1a:10:f3:a4:59:a8:c1:15:ee:43:38:70:7b:f1:ba:
70:ca:bd:b9:c5:60:43:18:2e:95:18:fd:93:34:f1:
82:ad:24:40:61:a0:6c:23:1f:cd:ff:08:41:c0:bb:
f0:c3:8a:77:67:6d:89:79:5b:ca:f1:04:2d:10:43:
29:df:0c:99:72:dd:0e:8e:31:17:3d:7b:3f:84:64:
82:eb:04:93:cf:9a:94:c6:d4:b7:62:e4:3c:54:a5:
90:e7:2c:b3:18:1a:11:49:69:cb:d5:71:a6:15:3a:
2e:9c:61:0d:0a:26:23:37:7a:1d:8b:ff:71:78:23:
3f:bd:aa:2a:c4:3a:e7:4e:88:d3:2c:40:8e:b2:70:
00:5a:71:94:33:c3:75:7a:7c:c9:df:eb:ca:1f:fc:
c5:12:3c:80:b8:8b:6a:72:7b:d4:f3:3d:6e:83:6e:
b6:3b:0a:de:d6:53:2d:f8:7b:8c:9a:62:5d:74:1f:
c2:fc:df:40:17:76:a6:91:1c:51:47:ff:63:93:b8:
8a:96:bf:97:cc:52:51:2e:a3:3a:8b:ed:98:97:e9:
76:eb:cb:cb:55:2d:62:22:c4:76:d7:85:42:73:eb:
38:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4F:23:18:10:C2:80:69:CD:E0:28:F3:11:32:51:06:9B:EA:25:F6
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31342e302f32342d3234203d3e20323138383632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.14.0/24
Signature Algorithm: sha256WithRSAEncryption
79:97:a5:88:23:19:66:e3:6d:99:a9:d2:5e:3b:1f:2a:29:a5:
96:86:8a:19:fc:24:76:dc:c6:3e:0f:25:45:4e:45:d0:b9:59:
41:db:1e:66:c5:f2:a5:ed:f2:94:c4:50:e3:9e:a4:ab:5d:38:
1d:44:7b:8e:f0:08:46:aa:a5:31:05:ff:41:6a:78:8b:d8:03:
f8:7a:67:12:b1:9b:a6:5e:0c:5d:c2:ae:2a:cd:5c:ed:bc:1e:
a5:80:7e:4a:ce:1c:3b:e5:fa:2c:22:c3:38:ed:dd:98:ea:00:
a0:85:f8:6d:0d:bd:f5:b1:92:cb:6b:46:9b:32:c3:c8:fe:1a:
9f:17:79:9f:d1:3a:8f:ed:fb:7d:20:f3:0c:b3:c4:e2:33:de:
24:d4:31:52:1a:3a:1b:4a:b7:d5:e0:59:15:76:f1:4b:e6:e4:
15:d8:4d:db:cc:a5:eb:e1:d7:34:8b:e3:8e:62:49:d8:50:a0:
a3:a6:c3:00:05:7a:2a:2d:cd:e0:44:59:f3:e5:49:5a:46:87:
7b:54:7c:06:e5:fc:9a:33:43:4f:e7:92:17:6f:22:c2:68:5e:
7b:93:2c:36:25:6b:98:bf:35:e7:2c:86:28:ca:8b:b8:7b:67:
e2:41:73:68:66:e0:4e:3c:70:be:ed:5a:86:27:8d:df:86:fe:
b9:f6:a3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 19:47:19 2026 by rpki-client