Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32302e302f32342d3234203d3e20323138383837.roa
File: 38372e3235342e32302e302f32342d3234203d3e20323138383837.roa (raw, json)
Hash identifier: ZhpNPPOoxuBKWgyygAwSStAMQzGmmwb/Gzjd7NA4m2g=
Subject key identifier: 73:7F:A2:B0:B0:38:7E:81:46:4A:6B:CB:37:66:EF:BB:64:7A:D1:DE
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 52597396E25287DF001B6CE9544BEE63373FBCF3
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32302e302f32342d3234203d3e20323138383837.roa
Signing time: Mon 07 Sep 2026 09:32:51 +0000
ROA not before: Mon 07 Sep 2026 09:27:51 +0000
ROA not after: Mon 06 Sep 2027 09:32:51 +0000
asID: 218887
IP address blocks: 87.254.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:59:73:96:e2:52:87:df:00:1b:6c:e9:54:4b:ee:63:37:3f:bc:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Sep 7 09:27:51 2026 GMT
Not After : Sep 6 09:32:51 2027 GMT
Subject: CN=737FA2B0B0387E81464A6BCB3766EFBB647AD1DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a8:b1:de:db:0e:7d:8b:80:21:28:a3:b0:e8:
f8:ee:61:5c:98:42:55:b1:e1:66:32:8f:b0:b8:03:
8f:16:75:bd:1e:95:1e:33:5e:e9:f2:28:0d:3f:67:
f5:f5:bf:16:e2:33:79:fb:57:20:62:4b:cd:de:89:
64:36:0e:2e:03:b7:d8:1d:f8:7f:9a:3a:90:e1:ca:
68:ab:53:8c:b5:6b:ad:b0:f0:6f:9f:29:fe:d7:81:
67:c8:c4:18:89:5a:ec:f4:63:df:6f:93:a8:80:7b:
7e:ce:13:7d:ea:7d:66:8f:e9:17:7d:03:40:3a:19:
42:de:77:4c:d2:fc:72:ba:8d:2a:4f:4d:3f:c5:3f:
7d:83:7c:99:b5:5b:b2:98:67:83:05:3c:dc:ae:ca:
75:ad:4b:74:d1:02:9a:72:31:1d:f6:1e:58:ea:43:
ee:68:a3:e5:1e:90:b6:bc:0a:68:83:c3:8b:25:31:
3a:8c:4b:ea:36:1e:35:8f:3f:a5:6f:b0:b0:ca:ba:
ec:f7:43:43:5a:4e:88:cf:0b:a4:bc:84:f8:d7:37:
82:ac:25:62:63:c5:90:02:c5:d4:e0:93:6c:88:57:
23:61:ce:c8:21:d7:b2:e4:4a:94:98:12:18:51:0b:
13:7d:57:2b:de:08:e3:2d:81:0c:c1:d6:95:f7:25:
42:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7F:A2:B0:B0:38:7E:81:46:4A:6B:CB:37:66:EF:BB:64:7A:D1:DE
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32302e302f32342d3234203d3e20323138383837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.20.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:76:9d:88:b3:d5:cb:79:03:b0:1f:1a:16:be:a7:3f:dc:e8:
1a:03:12:2b:f4:2f:f7:af:b1:aa:72:4c:3f:ec:0f:d9:ab:24:
80:ce:2f:4e:86:37:f9:cf:ef:af:f2:e2:3f:1b:51:7b:9b:40:
09:48:7f:88:b8:68:95:97:6f:11:b5:e2:b3:5c:a4:57:71:9d:
1f:17:5c:6d:a2:ed:b1:78:cd:d6:46:8c:45:7c:e4:04:b9:c3:
1c:92:ad:1c:00:75:3f:4b:f6:5a:78:06:0e:82:d6:e0:36:c5:
fd:e1:cd:17:fe:86:e6:de:e8:2e:4f:92:eb:92:03:bf:d5:d8:
cd:e8:fd:49:a8:db:17:b2:a2:1b:8d:88:e5:b8:92:47:ce:c1:
51:f1:54:e8:27:fc:84:e9:3c:99:98:7d:6a:a4:b9:37:a3:6a:
d7:db:43:dc:5d:47:82:e8:de:5f:94:00:a8:ea:14:35:39:c3:
cf:dd:f5:11:95:2e:a2:73:ce:8e:7a:22:93:bd:f9:c7:69:b9:
0d:7e:6c:ea:de:45:02:02:01:0b:f9:24:da:57:c5:5e:f9:6d:
72:bf:e6:a2:45:e1:e4:e7:ff:c2:79:42:63:f8:d5:9c:2b:ea:
f3:8b:82:f0:8f:15:64:57:ba:28:ec:f8:4b:ad:0c:fc:9c:7a:
8d:de:23:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 07:33:00 2026 by rpki-client