Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e33302e302f32342d3234203d3e20313339363432.roa
File: 38372e3235342e33302e302f32342d3234203d3e20313339363432.roa (raw, json)
Hash identifier: PildaL2G/1Iz0WikL3EaHgm4Yqx1DlYaCkSTihB5LTA=
Subject key identifier: C1:8A:54:93:97:0E:5C:5C:FB:85:4C:89:97:0A:0C:2E:C6:49:05:73
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 48261B7CFB42D83D05A0B62D6C86C3F67FCBC94E
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e33302e302f32342d3234203d3e20313339363432.roa
Signing time: Wed 01 Jul 2026 09:00:17 +0000
ROA not before: Wed 01 Jul 2026 08:55:17 +0000
ROA not after: Wed 30 Jun 2027 09:00:17 +0000
asID: 139642
IP address blocks: 87.254.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 07:45:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:26:1b:7c:fb:42:d8:3d:05:a0:b6:2d:6c:86:c3:f6:7f:cb:c9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Jul 1 08:55:17 2026 GMT
Not After : Jun 30 09:00:17 2027 GMT
Subject: CN=C18A5493970E5C5CFB854C89970A0C2EC6490573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ea:48:a6:92:0c:a1:61:35:ae:48:f8:a7:b2:
1d:5c:80:ed:48:8f:2f:f7:18:22:ef:2c:ff:ac:ca:
79:1f:34:ac:82:84:79:f4:8b:1e:ab:84:20:7c:97:
a4:63:86:99:f7:5f:f6:64:4d:8e:c7:da:14:71:a1:
60:3f:9f:e5:70:f5:61:54:31:d8:c7:57:46:1c:6e:
00:76:58:da:d5:56:87:cc:fd:58:42:b7:52:4b:1d:
2c:34:15:23:14:ab:65:55:9c:32:fd:f8:39:90:43:
76:0a:79:63:0c:41:4a:21:5f:86:db:58:4b:32:84:
a9:14:eb:6d:98:4b:1d:fa:9e:a0:21:20:d7:d7:50:
82:71:41:4a:6f:e3:c5:09:88:c4:1b:58:2b:5c:f1:
e8:1d:ee:d3:ff:a9:32:f0:72:33:d3:cd:f7:23:fd:
cd:86:8a:3d:9b:43:fc:19:d2:07:cd:ce:d1:09:7e:
86:85:25:5a:d2:2b:f7:88:ac:ec:1d:c1:9b:6c:2f:
0c:c9:0c:0b:ca:05:e1:14:03:64:f1:4e:35:68:97:
5b:2e:2a:35:a1:ae:c9:a2:56:dc:18:f0:13:3f:9d:
ed:38:f8:af:ae:57:ee:f5:7b:d4:e1:a0:c4:97:15:
3d:68:ca:bf:5c:46:0f:eb:88:3d:ab:ab:c7:b1:7e:
71:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8A:54:93:97:0E:5C:5C:FB:85:4C:89:97:0A:0C:2E:C6:49:05:73
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e33302e302f32342d3234203d3e20313339363432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.30.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:60:04:cc:ca:a7:b7:4e:cd:d2:72:8e:1b:46:e5:0e:d5:2d:
00:31:eb:44:3d:0a:90:9d:6b:cc:a7:6f:7c:07:eb:da:ae:2a:
99:34:57:2c:cd:74:dc:06:2f:24:7d:c6:59:e7:9d:bd:78:9e:
3b:6e:40:2a:ec:bb:0c:c2:4d:82:87:f5:c0:da:53:92:a3:5d:
b3:18:a9:dc:62:52:33:fd:f8:da:d9:e8:55:ef:c0:ce:11:e7:
e6:32:53:b4:bd:ed:6d:4b:0b:2f:c3:5e:8e:e4:2d:53:09:6c:
44:d4:8d:5d:71:4c:ab:74:b9:25:a2:d5:d1:3e:bf:f6:30:e4:
62:a4:cc:90:50:84:35:63:b0:aa:5a:ea:5b:fb:91:ed:63:33:
2b:c6:01:39:65:96:04:30:7f:53:c4:63:b3:15:15:c3:f4:00:
e1:6f:a5:28:42:99:3d:e3:b9:b2:6f:6a:82:e4:25:99:f5:9c:
95:96:fb:c2:29:2d:23:ca:38:69:da:26:24:64:87:98:df:33:
19:b8:b2:b0:bf:48:3a:13:fb:f4:66:2c:1c:55:f5:a6:f3:82:
95:d7:c8:87:43:1e:46:84:07:92:d5:2d:df:02:a9:cb:56:1f:
e7:95:01:29:35:68:dc:c5:bf:ad:89:f0:b3:0d:5a:0a:7e:83:
1e:3a:7b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 09:33:12 2026 by rpki-client