Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31352e302f32342d3234203d3e20313532373236.roa
File: 38372e3235342e31352e302f32342d3234203d3e20313532373236.roa (raw, json)
Hash identifier: GSSgH83pI/WSimA4p0HnpB9Vc7IOSSfTc+beOvXRhGU=
Subject key identifier: E8:7C:A6:CA:C3:F8:D4:4A:9F:F9:07:42:4F:F3:B8:82:58:DD:2E:DF
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 76C75E54F8DD6A18E375E6E0D1E2E1FFF538CD2B
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31352e302f32342d3234203d3e20313532373236.roa
Signing time: Fri 02 Oct 2026 19:36:25 +0000
ROA not before: Fri 02 Oct 2026 19:31:25 +0000
ROA not after: Fri 01 Oct 2027 19:36:25 +0000
asID: 152726
IP address blocks: 87.254.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 09:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:c7:5e:54:f8:dd:6a:18:e3:75:e6:e0:d1:e2:e1:ff:f5:38:cd:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Oct 2 19:31:25 2026 GMT
Not After : Oct 1 19:36:25 2027 GMT
Subject: CN=E87CA6CAC3F8D44A9FF907424FF3B88258DD2EDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:49:80:19:fb:3f:5a:9e:28:e1:94:59:16:
3d:94:4d:a9:3a:c0:ff:2c:86:bf:11:70:e9:45:5e:
f5:37:23:e4:98:7b:36:0b:4e:45:a7:f9:db:e9:98:
61:f6:6d:c4:03:5f:be:1e:44:ff:41:0e:47:fc:84:
8e:40:02:a8:9c:ca:01:74:cd:ff:7a:ee:42:26:72:
be:11:4c:79:0b:cb:6d:9a:7c:da:ce:29:7b:e9:2c:
f1:57:0f:d5:55:45:60:c2:ea:01:0a:5e:c6:26:b1:
ee:d9:20:6a:a3:a3:04:89:24:4b:51:f5:05:18:98:
68:bd:22:e6:19:92:89:3e:54:04:27:44:3c:a6:e0:
e8:40:52:6f:41:26:31:21:65:01:9d:84:af:cd:f3:
8c:5d:51:8e:be:4f:53:58:70:81:3e:91:b2:9d:ac:
47:31:0b:23:9d:f2:e3:52:64:c1:ca:fa:70:55:87:
40:15:f4:f2:92:8b:4e:21:61:38:1f:e4:05:78:ab:
81:1d:39:48:1d:03:93:35:1c:6f:1e:c7:31:7f:4a:
99:dc:8e:de:ff:3c:9b:eb:d1:33:41:9c:51:ac:b6:
1d:12:5a:9a:bf:c0:ca:1c:4b:d4:68:f1:9c:4a:8c:
81:3f:da:88:08:24:f7:52:9d:73:c4:a3:06:09:d2:
67:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7C:A6:CA:C3:F8:D4:4A:9F:F9:07:42:4F:F3:B8:82:58:DD:2E:DF
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31352e302f32342d3234203d3e20313532373236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.15.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:75:b9:a2:da:ef:ca:8a:4d:04:ca:e4:59:e8:cf:77:08:db:
78:ab:3d:e8:7b:c2:ac:b2:55:44:3b:10:86:79:a6:dc:ad:c1:
9a:ff:d6:bd:2f:f0:95:78:32:3e:ba:f1:95:31:43:b1:58:e5:
2f:4a:c5:44:b1:dc:a1:0d:0c:50:03:40:c4:99:57:69:e2:d0:
05:38:33:ba:32:c2:63:71:3d:67:ae:3e:02:e5:0d:58:62:3c:
69:df:4d:58:79:04:45:ca:10:5c:7e:4f:1d:e0:c8:e8:9a:7c:
1b:ce:0c:e2:16:09:4e:9e:1c:fb:2d:c1:88:cb:92:6d:66:12:
86:20:99:ad:bb:2c:88:9b:0d:72:c5:ac:7b:72:99:4d:f0:c6:
67:96:a6:0e:fe:4a:95:99:c7:7e:df:bb:20:17:bb:9f:24:3d:
40:bd:3c:a2:78:2e:f7:47:9b:24:a5:87:91:9c:ea:8a:e2:e2:
7e:08:dd:b1:68:83:2a:b6:01:c5:56:34:c9:28:99:76:e1:0b:
27:25:68:9d:1d:da:29:5f:91:26:74:eb:01:ba:41:13:0f:24:
4e:1c:e8:87:a2:17:33:7d:27:0d:e9:ee:82:b3:cf:31:57:7a:
10:12:8f:b0:04:f3:a5:2c:a9:a3:b5:03:d9:09:ee:60:ca:f0:
68:4c:07:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:55:46 2026 by rpki-client