Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31352e302f32342d3234203d3e20383334.roa
File: 38372e3235342e31352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Xc4miUzMjicIN9U1fZc4YR0yaqYSRAVWl/rg/3BgLSI=
Subject key identifier: 65:75:1E:E6:E0:69:B9:C7:2F:DB:89:E2:DD:C0:0B:22:36:4F:29:E6
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 123D13179DD17F5904ADA1E13A354E094E932910
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31352e302f32342d3234203d3e20383334.roa
Signing time: Fri 30 Oct 2026 19:31:33 +0000
ROA not before: Fri 30 Oct 2026 19:26:33 +0000
ROA not after: Fri 29 Oct 2027 19:31:33 +0000
asID: 834
IP address blocks: 87.254.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:3d:13:17:9d:d1:7f:59:04:ad:a1:e1:3a:35:4e:09:4e:93:29:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Oct 30 19:26:33 2026 GMT
Not After : Oct 29 19:31:33 2027 GMT
Subject: CN=65751EE6E069B9C72FDB89E2DDC00B22364F29E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d7:00:b6:15:e2:70:9c:4f:7a:4e:ec:93:a1:
bb:04:00:c8:5f:1c:4b:a4:4b:d5:1f:bc:75:1c:64:
1b:3b:29:e8:0d:96:5d:7c:21:40:d9:c0:43:11:f9:
a9:60:7a:c6:70:11:a5:f4:a3:8f:ae:c4:43:74:04:
34:d1:6d:d9:b4:bc:02:2a:12:f2:5e:72:6c:82:2a:
05:49:a4:ee:49:08:db:6b:58:7e:6a:6f:65:4a:83:
90:8f:f2:15:c9:41:ef:f7:05:ba:c8:ac:5d:32:f0:
ea:48:d0:86:f9:7a:ce:60:3e:cd:88:47:be:ac:66:
77:ef:ba:aa:f7:1a:17:11:72:f1:6c:d6:0d:07:98:
17:3a:f2:e8:31:76:95:df:f6:5f:51:8d:d6:52:47:
44:ff:51:8e:74:79:34:de:0c:b6:06:8c:ea:92:01:
8e:58:96:35:d8:95:e3:38:29:76:06:13:99:b5:f2:
dd:20:38:e8:a9:46:04:ca:db:fe:d6:c8:ca:c9:fb:
1c:6c:95:50:33:8a:1c:f7:7d:1e:60:87:6e:18:a3:
25:23:75:0b:39:c6:f1:5b:72:14:3c:d2:85:63:6e:
dd:43:42:2d:dc:5d:41:83:a9:08:4e:89:ff:d9:1e:
17:29:47:4f:1a:d5:45:d7:1f:6e:2b:ac:cc:12:00:
2c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:75:1E:E6:E0:69:B9:C7:2F:DB:89:E2:DD:C0:0B:22:36:4F:29:E6
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.15.0/24
Signature Algorithm: sha256WithRSAEncryption
99:07:68:1d:da:04:d3:d9:0f:b0:1e:ff:f9:b9:98:43:7c:64:
0b:f3:e7:95:61:89:63:dc:48:3f:a0:dc:9f:94:7f:38:c9:c9:
89:41:18:e5:ce:73:00:46:e7:b2:47:d0:6f:e0:82:4b:53:d5:
26:d7:37:1c:73:94:f7:f9:a4:ab:e0:01:40:f1:38:71:bb:98:
bf:62:b9:3c:d3:38:af:62:be:61:0f:cb:e4:d6:4c:b1:fe:03:
c5:17:29:03:c9:6d:bd:7e:b1:05:13:c9:ad:39:70:03:e5:f4:
bb:9a:ab:d6:2b:f8:27:86:8d:82:9c:f7:19:c9:79:d8:a7:6c:
92:b1:54:07:8b:b2:9d:9b:c0:4c:8d:61:67:12:d6:96:91:f2:
fe:35:5a:be:4b:1c:a0:55:42:84:ea:1e:b5:a5:5c:36:29:14:
c7:96:e5:4d:9d:f3:34:2e:ed:67:14:30:c1:5c:09:2b:16:32:
ea:15:17:56:e3:d8:2f:da:3e:40:56:6c:a1:e4:70:fa:d8:68:
fd:7b:4d:65:57:07:91:94:7c:63:e5:72:60:e6:d3:e4:69:40:
9b:f3:0f:22:82:bb:a0:13:6a:df:db:8a:c4:bc:b1:a0:c9:df:
10:ad:08:66:1d:68:e6:2d:a6:5c:57:fb:54:ac:fb:31:4d:6d:
c9:52:0a:fd
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUEj0TF53Rf1kEraHhOjVOCU6TKRAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJiZmQ0ZTAyMTU0N2QwMzBhYzEwYjAyMTM1MzVkNGM2
OTY4ZWVkZTAeFw0yNjEwMzAxOTI2MzNaFw0yNzEwMjkxOTMxMzNaMDMxMTAvBgNV
BAMTKDY1NzUxRUU2RTA2OUI5QzcyRkRCODlFMkREQzAwQjIyMzY0RjI5RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC51wC2FeJwnE96TuyTobsEAMhf
HEukS9UfvHUcZBs7KegNll18IUDZwEMR+algesZwEaX0o4+uxEN0BDTRbdm0vAIq
EvJecmyCKgVJpO5JCNtrWH5qb2VKg5CP8hXJQe/3BbrIrF0y8OpI0Ib5es5gPs2I
R76sZnfvuqr3GhcRcvFs1g0HmBc68ugxdpXf9l9RjdZSR0T/UY50eTTeDLYGjOqS
AY5YljXYleM4KXYGE5m18t0gOOipRgTK2/7WyMrJ+xxslVAzihz3fR5gh24YoyUj
dQs5xvFbchQ80oVjbt1DQi3cXUGDqQhOif/ZHhcpR08a1UXXH24rrMwSACytAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUZXUe5uBpuccv24ni3cALIjZPKeYwHwYDVR0j
BBgwFoAUIr/U4CFUfQMKwQsCE1NdTGlo7t4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNhYWNkMTctYmY5ZC00N2RiLTg2NGQtZjljN2MyYmUx
ODNhLzAvMjJCRkQ0RTAyMTU0N0QwMzBBQzEwQjAyMTM1MzVENEM2OTY4RUVERS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lyX1U0Q0ZVZlFNS3dRc0NFMU5kVEds
bzd0NC5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjNhYWNkMTct
YmY5ZC00N2RiLTg2NGQtZjljN2MyYmUxODNhLzAvMzgzNzJlMzIzNTM0MmUzMTM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/4PMA0G
CSqGSIb3DQEBCwUAA4IBAQCZB2gd2gTT2Q+wHv/5uZhDfGQL8+eVYYlj3Eg/oNyf
lH84ycmJQRjlznMARueyR9Bv4IJLU9Um1zccc5T3+aSr4AFA8Thxu5i/Yrk80ziv
Yr5hD8vk1kyx/gPFFykDyW29frEFE8mtOXAD5fS7mqvWK/gnho2CnPcZyXnYp2yS
sVQHi7Kdm8BMjWFnEtaWkfL+NVq+SxygVUKE6h61pVw2KRTHluVNnfM0Lu1nFDDB
XAkrFjLqFRdW49gv2j5AVmyh5HD62Gj9e01lVweRlHxj5XJg5tPkaUCb8w8igrug
E2rf24rEvLGgyd8QrQhmHWjmLaZcV/tUrPsxTW3JUgr9
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:31:27 2026 by rpki-client