Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32362e302f32342d3234203d3e20383334.roa
File: 38372e3235342e32362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: IlGOj4Fq9cmG2HYcdx1Ff+S28/NQNuVvBQ7XsNr4s20=
Subject key identifier: F6:05:38:40:59:19:90:F1:15:3F:A8:E6:69:24:8D:7E:5C:69:B4:68
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 40A58503BC2DE17B016AA7EBEB66F9AC82E8D0ED
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32362e302f32342d3234203d3e20383334.roa
Signing time: Thu 14 May 2026 07:46:42 +0000
ROA not before: Thu 14 May 2026 07:41:42 +0000
ROA not after: Thu 13 May 2027 07:46:42 +0000
asID: 834
IP address blocks: 87.254.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 20:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:a5:85:03:bc:2d:e1:7b:01:6a:a7:eb:eb:66:f9:ac:82:e8:d0:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: May 14 07:41:42 2026 GMT
Not After : May 13 07:46:42 2027 GMT
Subject: CN=F6053840591990F1153FA8E669248D7E5C69B468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f4:12:ee:6a:46:f1:15:91:67:1e:61:16:cc:
c5:85:a1:bd:ef:f6:da:0d:5f:7b:9c:c8:78:08:23:
53:ab:02:c7:81:06:53:24:61:75:9a:4a:34:1a:a5:
9d:21:b0:db:41:24:96:1c:0f:d6:04:58:68:7e:fb:
1d:dc:6d:6e:89:f8:20:18:4e:a0:cd:ca:25:61:ca:
0a:79:03:17:1f:e4:94:bb:4c:8c:2a:54:7c:4e:28:
83:b8:47:a0:58:e9:ce:6e:e8:82:80:e7:e7:2e:e2:
ff:1a:1e:6d:fa:15:68:de:cf:2e:60:30:a3:07:db:
12:4d:d3:9c:f3:45:99:2d:19:78:59:fc:86:c2:b8:
15:85:22:2e:a3:3e:92:c8:04:ed:2b:76:fb:fb:fe:
b7:c3:52:b6:c9:97:b7:08:38:97:c1:54:7d:23:a8:
3e:cb:21:07:93:13:a1:1a:55:09:88:fd:5f:0a:5d:
f5:c4:b4:da:b2:45:cc:e7:73:04:2d:59:a3:3c:44:
13:dd:a6:b4:9e:3b:e4:59:d9:6e:61:fc:e8:86:82:
a4:99:fc:fc:a8:a7:dd:35:b4:3f:db:46:3f:7a:80:
c9:a7:8b:b9:9f:f9:93:51:dd:07:bf:ef:1b:d8:ee:
4e:bc:29:66:45:8b:a7:f1:6d:6a:7f:0e:ee:a4:67:
88:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:05:38:40:59:19:90:F1:15:3F:A8:E6:69:24:8D:7E:5C:69:B4:68
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.26.0/24
Signature Algorithm: sha256WithRSAEncryption
24:49:2c:5e:49:79:4b:be:09:00:be:8a:46:9d:8b:83:c4:3a:
c4:f5:37:24:80:42:99:9d:fe:2e:3c:9d:3f:65:cb:79:f8:41:
f8:c7:cb:bc:f0:13:29:a1:ae:97:87:22:4c:20:09:d9:f7:72:
fe:cb:06:b6:dd:d4:32:8a:d8:6f:e9:a0:1a:a0:4d:b3:80:3d:
11:e5:02:26:75:a8:db:99:a2:4c:03:60:56:aa:44:e9:93:3a:
3a:da:f2:25:23:ca:49:48:18:2b:12:65:8a:ed:b7:c5:c1:2a:
21:8d:82:35:eb:6a:b2:44:46:ec:86:29:95:eb:5a:d8:e4:34:
ca:cd:f3:fc:11:19:b2:5a:fb:55:17:92:55:17:3b:fe:d4:21:
d2:3e:9b:5e:03:0d:7d:9f:aa:de:f7:52:55:dd:9c:10:dd:db:
ce:b6:d6:2f:17:cd:f0:6d:9a:47:b4:f1:98:25:65:8b:40:71:
16:ed:9d:d0:80:24:6f:70:19:42:16:db:75:af:94:ec:b5:0a:
37:71:0f:28:18:fd:49:d0:e4:96:91:90:53:ad:e0:97:d6:5e:
7d:bf:36:c9:49:33:9e:a8:9d:80:ea:0a:93:6e:fa:28:78:aa:
b1:ca:8d:82:96:c1:6b:4d:57:92:60:83:75:18:68:c8:81:15:
2a:e1:31:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:24 2026 by rpki-client