Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32312e302f32342d3234203d3e20383334.roa
File: 38372e3235342e32312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: YO22SGGezMTVu9V7vwCqHgqCbUCDHocViEMmr0QSr5E=
Subject key identifier: 63:77:88:5C:97:25:95:23:3B:C1:95:B1:1B:8E:86:23:5C:CC:17:22
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 23FC674C286C43DD7FFF79206D72CDC65DD0FCE2
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32312e302f32342d3234203d3e20383334.roa
Signing time: Sat 07 Nov 2026 00:06:04 +0000
ROA not before: Sat 07 Nov 2026 00:01:04 +0000
ROA not after: Sat 06 Nov 2027 00:06:04 +0000
asID: 834
IP address blocks: 87.254.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:fc:67:4c:28:6c:43:dd:7f:ff:79:20:6d:72:cd:c6:5d:d0:fc:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Nov 7 00:01:04 2026 GMT
Not After : Nov 6 00:06:04 2027 GMT
Subject: CN=6377885C972595233BC195B11B8E86235CCC1722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c7:32:bd:b0:e0:fb:ac:a9:2a:89:47:9c:ce:
23:65:86:34:17:f2:cb:c5:d2:de:7c:b9:a8:ba:d2:
47:f2:e5:bf:54:32:b6:1d:b9:af:1a:eb:00:11:fa:
63:67:7c:74:bf:63:0e:1a:b9:52:9b:1d:3e:d3:51:
0b:73:62:98:f2:d6:2f:3f:77:c1:a1:30:42:b7:aa:
bc:26:cd:47:8b:ba:1c:a0:c2:1a:fb:75:6e:b8:36:
fd:28:2f:1b:bf:98:ca:59:28:e0:b6:56:74:bd:e5:
83:e7:f1:05:28:22:55:df:3b:c6:65:3e:7c:9a:64:
e3:73:d8:d8:20:60:c6:0e:aa:57:74:2a:67:58:08:
9e:86:70:f3:66:ea:47:1a:a7:b6:f7:33:e6:c4:3a:
02:99:72:04:d6:24:ca:91:f5:4d:45:f7:b2:12:1f:
5e:2b:8d:bb:20:f0:37:2b:48:a4:98:f0:59:d4:ba:
48:70:68:1b:c8:7d:29:c5:c9:e1:c4:e6:1c:3a:b1:
53:24:6a:43:5e:a7:03:12:2d:18:44:c0:72:6e:e7:
e7:e2:5d:04:93:95:e7:8e:2d:a3:20:10:7e:d6:c3:
3d:9a:bc:58:69:32:7d:84:01:95:a9:d4:92:77:b2:
7f:ab:a0:33:06:18:53:d2:af:7b:b1:47:06:b3:1d:
2f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:77:88:5C:97:25:95:23:3B:C1:95:B1:1B:8E:86:23:5C:CC:17:22
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.21.0/24
Signature Algorithm: sha256WithRSAEncryption
14:b2:8e:ca:ba:6d:fa:67:d8:b7:ce:12:5f:ce:9e:28:1c:96:
99:b5:0c:bf:34:44:01:e6:7f:fd:83:53:f2:db:2d:6f:9e:55:
af:0c:ff:a9:e1:69:91:1f:81:b3:c5:26:f1:34:60:55:46:ef:
8a:a1:d3:e2:54:80:34:86:54:3c:55:41:d1:06:5a:53:7a:06:
a6:dd:a8:6c:68:b8:a7:90:fb:df:29:1a:ae:97:7f:ec:cd:e4:
a2:0d:c8:59:d9:94:0b:0f:b2:2b:ea:b3:25:4e:aa:fd:cb:19:
15:54:98:0d:04:73:60:13:5b:de:bd:36:03:39:65:ac:8e:3d:
c4:7f:41:0f:01:c7:e5:ae:0e:ea:95:ee:34:6d:b5:cd:57:48:
c5:a8:78:be:67:09:19:b7:0e:44:7d:f5:16:e4:78:49:71:77:
49:f7:cd:d9:2d:ab:ca:7a:ec:e9:8f:87:c7:8f:c8:18:3a:01:
04:bb:c7:fe:9b:ea:58:fc:5c:c6:bb:df:d6:ce:ee:9a:20:47:
13:7f:10:20:3e:4a:89:2d:80:6f:74:cd:42:cd:a9:47:e0:9d:
d7:a8:01:41:14:15:de:aa:3b:12:77:86:9b:8a:3c:87:d7:8e:
69:73:70:99:9e:45:e2:f2:3d:16:3f:b3:0f:0e:4f:1e:a4:a4:
05:ec:01:3f
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUI/xnTChsQ91//3kgbXLNxl3Q/OIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJiZmQ0ZTAyMTU0N2QwMzBhYzEwYjAyMTM1MzVkNGM2
OTY4ZWVkZTAeFw0yNjExMDcwMDAxMDRaFw0yNzExMDYwMDA2MDRaMDMxMTAvBgNV
BAMTKDYzNzc4ODVDOTcyNTk1MjMzQkMxOTVCMTFCOEU4NjIzNUNDQzE3MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtxzK9sOD7rKkqiUecziNlhjQX
8svF0t58uai60kfy5b9UMrYdua8a6wAR+mNnfHS/Yw4auVKbHT7TUQtzYpjy1i8/
d8GhMEK3qrwmzUeLuhygwhr7dW64Nv0oLxu/mMpZKOC2VnS95YPn8QUoIlXfO8Zl
PnyaZONz2NggYMYOqld0KmdYCJ6GcPNm6kcap7b3M+bEOgKZcgTWJMqR9U1F97IS
H14rjbsg8DcrSKSY8FnUukhwaBvIfSnFyeHE5hw6sVMkakNepwMSLRhEwHJu5+fi
XQSTleeOLaMgEH7Wwz2avFhpMn2EAZWp1JJ3sn+roDMGGFPSr3uxRwazHS+rAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUY3eIXJcllSM7wZWxG46GI1zMFyIwHwYDVR0j
BBgwFoAUIr/U4CFUfQMKwQsCE1NdTGlo7t4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNhYWNkMTctYmY5ZC00N2RiLTg2NGQtZjljN2MyYmUx
ODNhLzAvMjJCRkQ0RTAyMTU0N0QwMzBBQzEwQjAyMTM1MzVENEM2OTY4RUVERS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lyX1U0Q0ZVZlFNS3dRc0NFMU5kVEds
bzd0NC5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjNhYWNkMTct
YmY5ZC00N2RiLTg2NGQtZjljN2MyYmUxODNhLzAvMzgzNzJlMzIzNTM0MmUzMjMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/4VMA0G
CSqGSIb3DQEBCwUAA4IBAQAUso7Kum36Z9i3zhJfzp4oHJaZtQy/NEQB5n/9g1Py
2y1vnlWvDP+p4WmRH4GzxSbxNGBVRu+KodPiVIA0hlQ8VUHRBlpTegam3ahsaLin
kPvfKRqul3/szeSiDchZ2ZQLD7Ir6rMlTqr9yxkVVJgNBHNgE1vevTYDOWWsjj3E
f0EPAcflrg7qle40bbXNV0jFqHi+ZwkZtw5EffUW5HhJcXdJ983ZLavKeuzpj4fH
j8gYOgEEu8f+m+pY/FzGu9/Wzu6aIEcTfxAgPkqJLYBvdM1CzalH4J3XqAFBFBXe
qjsSd4abijyH145pc3CZnkXi8j0WP7MPDk8epKQF7AE/
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:05:32 2026 by rpki-client