Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32392e302f32342d3234203d3e20333939333539.roa
File: 38372e3235342e32392e302f32342d3234203d3e20333939333539.roa (raw, json)
Hash identifier: ai/dN9s+EI66RGZOYc3SnH50a9pPhR+Tuj1MQUDS0jQ=
Subject key identifier: 7D:3E:EC:57:72:66:7E:A2:CE:70:C4:A8:B6:16:0B:6A:C1:D6:9A:B1
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 678A07406F081DC40481971B80A681BE539FD95A
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32392e302f32342d3234203d3e20333939333539.roa
Signing time: Fri 04 Sep 2026 06:52:44 +0000
ROA not before: Fri 04 Sep 2026 06:47:44 +0000
ROA not after: Fri 03 Sep 2027 06:52:44 +0000
asID: 399359
IP address blocks: 87.254.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:8a:07:40:6f:08:1d:c4:04:81:97:1b:80:a6:81:be:53:9f:d9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Sep 4 06:47:44 2026 GMT
Not After : Sep 3 06:52:44 2027 GMT
Subject: CN=7D3EEC5772667EA2CE70C4A8B6160B6AC1D69AB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:96:30:1c:40:b6:48:0f:e9:5a:65:71:f5:53:
05:6c:51:89:34:75:87:00:32:7a:99:ad:e2:61:d1:
bf:6d:31:f5:80:d4:00:78:61:fd:5e:f3:b8:16:d0:
ef:4a:7f:09:38:14:75:49:e1:d3:0e:bc:b9:b9:95:
0d:a0:86:74:2c:37:f4:9a:b6:03:89:5d:58:bd:c2:
3d:0f:02:03:35:3b:9e:6f:03:04:01:e8:2a:d1:0e:
82:39:ae:59:5b:ff:36:e5:b3:f5:b2:fa:48:57:cd:
66:af:ae:80:5d:aa:b0:38:3c:08:d5:7e:e9:6e:bd:
46:03:6e:61:3d:df:28:bf:d9:72:b3:b9:40:0b:cc:
9b:f6:44:90:ba:6f:6e:1e:01:aa:d8:8c:52:f5:0c:
b5:0d:bf:d6:bd:a0:ae:06:95:5a:d2:4d:1d:84:ae:
38:df:47:1d:09:8d:db:76:6d:46:0e:28:a2:e2:85:
7f:cf:55:e9:2f:41:4f:0a:68:48:02:31:50:40:6c:
11:c0:73:92:0d:d0:81:44:ab:66:ae:4c:d7:c1:7e:
1c:bb:e3:19:1f:45:b7:2c:1d:f5:49:f2:d6:8d:fd:
9a:2f:35:1e:34:52:68:bd:54:45:a6:13:c6:41:cb:
b0:98:52:27:1b:4e:1c:eb:45:42:0c:12:90:db:11:
2b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3E:EC:57:72:66:7E:A2:CE:70:C4:A8:B6:16:0B:6A:C1:D6:9A:B1
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32392e302f32342d3234203d3e20333939333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.29.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:f5:7b:17:ca:29:f3:d3:ca:fc:8a:8e:63:fb:cf:cb:27:bb:
fd:a8:08:35:36:a0:36:42:07:f2:dc:8f:25:7a:81:11:a7:df:
e0:f1:6a:f8:1a:a1:ab:45:23:9a:38:b1:2f:f9:51:c8:41:17:
af:ed:2c:58:09:82:30:9d:f3:59:88:68:f6:e3:26:02:d3:b5:
bb:d7:c6:47:74:62:f6:03:60:89:41:08:a1:68:fa:65:c7:0a:
03:42:e8:0a:55:41:35:a2:5c:72:ec:52:e5:d7:67:73:f9:9d:
ae:67:92:5f:ef:1d:f0:47:dd:80:03:da:09:0f:c5:1d:fd:6d:
ca:48:a1:f3:06:e6:56:7f:4d:7d:82:71:fe:b4:53:bf:7e:7b:
fb:ea:cd:b3:7e:14:81:a7:0c:12:c6:f8:81:f5:99:07:8b:0f:
b8:a2:c3:88:bf:d9:53:02:e3:c2:62:ec:9c:55:ab:3c:63:f9:
42:e6:9e:01:2c:e1:24:25:d3:5a:8c:28:2c:c8:a5:3f:ce:45:
6d:0f:8b:e6:a3:e4:5f:67:4d:c4:ec:1f:06:59:fe:49:c6:80:
3b:44:d6:ba:25:d0:fd:57:20:9b:8c:40:9f:5f:0b:d7:5c:bb:
da:c3:62:31:1c:16:07:1d:f7:43:b2:17:fa:de:ec:7f:bc:23:
37:5d:b1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:03:10 2026 by rpki-client