Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32352e302f32342d3234203d3e20343032323635.roa
File: 38372e3235342e32352e302f32342d3234203d3e20343032323635.roa (raw, json)
Hash identifier: PRZtxjYbgqdYHgrXt1B72AkNdzyck5gWx69C5yMLpR8=
Subject key identifier: 9D:F1:BA:2F:1A:3D:00:E9:D6:49:2D:6E:E1:D9:13:64:CA:AB:C8:B0
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 1EBD18E09F7D2292695B704C113FBC3F2A30BA1F
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32352e302f32342d3234203d3e20343032323635.roa
Signing time: Sun 30 Aug 2026 06:52:47 +0000
ROA not before: Sun 30 Aug 2026 06:47:47 +0000
ROA not after: Sun 29 Aug 2027 06:52:47 +0000
asID: 402265
IP address blocks: 87.254.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:bd:18:e0:9f:7d:22:92:69:5b:70:4c:11:3f:bc:3f:2a:30:ba:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Aug 30 06:47:47 2026 GMT
Not After : Aug 29 06:52:47 2027 GMT
Subject: CN=9DF1BA2F1A3D00E9D6492D6EE1D91364CAABC8B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:98:5f:e1:1e:98:b2:43:a2:50:43:19:6f:95:
2c:41:1e:5f:c6:44:57:bd:0b:f7:7a:6b:66:7c:20:
7e:3a:6f:ae:2b:0a:3c:ac:f8:eb:e2:3f:0c:70:8c:
33:86:00:6a:36:35:95:0e:9c:6a:28:ec:5f:ca:80:
37:12:57:95:f7:04:b1:e3:95:7e:5b:d5:ef:bb:52:
a1:95:c1:65:d2:90:b5:30:80:8f:b7:9b:87:b4:c6:
4b:df:b6:32:99:8e:7b:25:a5:76:cb:32:6b:97:80:
d5:fa:4a:c8:cd:03:cd:14:5b:82:e4:3b:85:29:ba:
4c:79:ac:73:b4:60:8e:ea:f4:85:3e:bc:9d:18:73:
1f:e9:db:12:f0:e0:11:70:79:33:3a:70:32:83:c4:
33:30:cc:b3:d6:55:98:67:22:5d:13:9d:f2:6a:b3:
3e:e3:f9:1a:58:21:72:db:e6:a7:82:53:b4:39:6a:
47:a0:96:9e:c6:b3:da:fa:dd:7d:66:cc:fe:48:f4:
a7:16:f3:90:e2:45:e0:00:0e:98:b4:a9:7b:33:c2:
85:ff:28:d8:8e:52:5d:08:87:5c:cd:eb:ed:7b:ff:
47:fd:66:9f:7e:84:9f:1d:93:b3:67:00:59:9e:bf:
e4:62:fb:de:1d:d7:4d:03:6a:6c:da:2c:3f:c8:cb:
44:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F1:BA:2F:1A:3D:00:E9:D6:49:2D:6E:E1:D9:13:64:CA:AB:C8:B0
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32352e302f32342d3234203d3e20343032323635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.25.0/24
Signature Algorithm: sha256WithRSAEncryption
38:5f:41:87:80:10:74:b6:a7:cd:81:ea:20:14:46:cb:21:6c:
06:29:53:69:ed:2d:75:54:a3:97:c4:79:28:ae:6b:14:e8:63:
1a:6c:08:82:08:88:5a:03:78:a9:53:ac:d7:b3:ea:5b:32:24:
3f:25:39:11:c3:d6:fc:c6:5b:30:c0:65:2d:dd:ba:29:19:19:
a4:d5:d8:df:a7:31:fe:55:2d:a3:dc:32:67:8e:5f:6e:f9:2f:
15:03:d6:d6:9a:71:cb:9a:10:76:17:46:2e:c9:4a:93:47:92:
8d:b8:dd:94:1d:41:d8:6b:37:8e:d6:20:82:e5:5c:1e:45:64:
ce:d3:61:72:07:6c:c5:0c:61:71:8c:c6:37:1d:a4:33:eb:13:
c9:26:f3:57:3b:5e:e8:1e:13:4d:1f:a5:84:fd:29:be:db:01:
c2:6a:2c:d9:40:3c:44:17:32:2d:94:6a:5b:15:24:c0:bb:8f:
10:1b:ff:73:d8:2c:5d:fb:3b:77:ec:f9:9b:e3:ee:a7:18:c4:
ad:f4:0f:95:3e:b8:34:1f:8e:40:f9:7d:bf:21:5e:c4:14:15:
8d:38:73:81:96:36:b5:af:72:30:30:8a:03:6b:3b:d8:cf:9b:
08:ee:12:fb:fa:66:13:65:54:c4:51:a9:01:ff:43:e7:00:86:
d8:85:46:33
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUHr0Y4J99IpJpW3BMET+8Pyowuh8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJiZmQ0ZTAyMTU0N2QwMzBhYzEwYjAyMTM1MzVkNGM2
OTY4ZWVkZTAeFw0yNjA4MzAwNjQ3NDdaFw0yNzA4MjkwNjUyNDdaMDMxMTAvBgNV
BAMTKDlERjFCQTJGMUEzRDAwRTlENjQ5MkQ2RUUxRDkxMzY0Q0FBQkM4QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5mF/hHpiyQ6JQQxlvlSxBHl/G
RFe9C/d6a2Z8IH46b64rCjys+OviPwxwjDOGAGo2NZUOnGoo7F/KgDcSV5X3BLHj
lX5b1e+7UqGVwWXSkLUwgI+3m4e0xkvftjKZjnslpXbLMmuXgNX6SsjNA80UW4Lk
O4Upukx5rHO0YI7q9IU+vJ0Ycx/p2xLw4BFweTM6cDKDxDMwzLPWVZhnIl0TnfJq
sz7j+RpYIXLb5qeCU7Q5akeglp7Gs9r63X1mzP5I9KcW85DiReAADpi0qXszwoX/
KNiOUl0Ih1zN6+17/0f9Zp9+hJ8dk7NnAFmev+Ri+94d100DamzaLD/Iy0QXAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUnfG6Lxo9AOnWSS1u4dkTZMqryLAwHwYDVR0j
BBgwFoAUIr/U4CFUfQMKwQsCE1NdTGlo7t4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNhYWNkMTctYmY5ZC00N2RiLTg2NGQtZjljN2MyYmUx
ODNhLzAvMjJCRkQ0RTAyMTU0N0QwMzBBQzEwQjAyMTM1MzVENEM2OTY4RUVERS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lyX1U0Q0ZVZlFNS3dRc0NFMU5kVEds
bzd0NC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjNhYWNkMTct
YmY5ZC00N2RiLTg2NGQtZjljN2MyYmUxODNhLzAvMzgzNzJlMzIzNTM0MmUzMjM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDMyMzIzNjM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
V/4ZMA0GCSqGSIb3DQEBCwUAA4IBAQA4X0GHgBB0tqfNgeogFEbLIWwGKVNp7S11
VKOXxHkormsU6GMabAiCCIhaA3ipU6zXs+pbMiQ/JTkRw9b8xlswwGUt3bopGRmk
1djfpzH+VS2j3DJnjl9u+S8VA9bWmnHLmhB2F0YuyUqTR5KNuN2UHUHYazeO1iCC
5VweRWTO02FyB2zFDGFxjMY3HaQz6xPJJvNXO17oHhNNH6WE/Sm+2wHCaizZQDxE
FzItlGpbFSTAu48QG/9z2Cxd+zt37Pmb4+6nGMSt9A+VPrg0H45A+X2/IV7EFBWN
OHOBlja1r3IwMIoDazvYz5sI7hL7+mYTZVTEUakB/0PnAIbYhUYz
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:29:39 2026 by rpki-client