Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e33302e302f32342d3234203d3e20343032323135.roa
File: 38372e3235342e33302e302f32342d3234203d3e20343032323135.roa (raw, json)
Hash identifier: aBTczmsq8IN60Au7OMn37bNpU6i4lBJqwVookSPCJuw=
Subject key identifier: 5B:BC:42:69:5B:7B:86:4D:BF:B2:27:06:09:ED:42:7F:A7:6F:56:E9
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 2AAF67B5E96E89A33FFE4EF3EEF06306F6D580B3
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e33302e302f32342d3234203d3e20343032323135.roa
Signing time: Tue 07 Jul 2026 06:44:26 +0000
ROA not before: Tue 07 Jul 2026 06:39:26 +0000
ROA not after: Tue 06 Jul 2027 06:44:26 +0000
asID: 402215
IP address blocks: 87.254.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 08:20:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:af:67:b5:e9:6e:89:a3:3f:fe:4e:f3:ee:f0:63:06:f6:d5:80:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Jul 7 06:39:26 2026 GMT
Not After : Jul 6 06:44:26 2027 GMT
Subject: CN=5BBC42695B7B864DBFB2270609ED427FA76F56E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2d:97:6e:c1:2f:b6:00:99:e3:86:70:ed:39:
fd:98:17:53:b1:60:02:b4:51:ed:25:3c:4e:b2:f9:
c8:71:c0:3e:80:c2:e6:c7:40:29:a0:f7:cc:6c:01:
98:ab:a1:83:3c:52:66:49:82:5f:4a:ab:37:b1:3b:
d3:4a:2d:bb:b7:b2:39:5b:ea:74:f7:a3:29:85:b8:
e9:52:9c:b3:33:46:c8:62:8b:07:22:48:b1:07:f8:
0a:8a:5a:cf:13:c4:4c:68:23:87:f5:e7:21:b7:95:
05:26:b8:2b:d1:5e:b6:bc:88:80:6a:be:4d:c9:95:
3e:35:b1:3f:9d:b3:04:d0:c1:4d:5e:b7:55:09:08:
dc:4e:d4:64:c5:ca:15:88:5e:06:a4:ed:83:55:09:
ba:db:3d:99:85:b1:5e:b6:01:9a:59:33:2b:95:03:
ad:fa:ad:43:d7:56:f4:e6:7d:e8:43:c3:67:cf:89:
0a:9c:03:e5:2b:59:c4:f5:ba:88:08:bf:a8:61:de:
cc:1d:23:24:27:64:5e:7d:cb:f3:28:d3:75:ec:e3:
82:82:54:cd:41:89:fd:8f:0b:4a:95:4e:37:f4:3e:
b6:a6:ed:ee:54:11:f5:1a:39:ac:31:03:35:6d:7b:
12:8a:93:30:0c:74:8f:02:c3:86:2e:e7:79:80:a9:
65:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BC:42:69:5B:7B:86:4D:BF:B2:27:06:09:ED:42:7F:A7:6F:56:E9
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e33302e302f32342d3234203d3e20343032323135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.30.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:64:7c:8c:47:3e:97:56:aa:f0:3f:d7:01:c0:44:cf:03:39:
73:e7:ee:e3:56:8c:85:0e:73:5c:d9:ab:fd:77:34:76:2f:4a:
f0:59:66:18:11:2d:94:57:66:0a:0e:4b:9c:2c:db:a6:04:80:
b6:53:ab:2e:aa:df:9b:cd:bc:78:0c:66:fe:04:41:2e:72:9b:
f7:3d:6f:c9:8d:65:d3:26:96:6f:c6:c9:c6:dd:e8:92:71:3d:
df:c9:0e:e8:94:2c:16:90:6c:e2:75:a4:2d:e0:74:c7:5f:9f:
41:1b:d8:4c:bc:70:67:4e:91:dc:c7:30:48:5d:55:1f:15:9c:
d3:18:03:d2:b6:94:82:21:2b:d9:44:ef:1e:bb:e0:de:6c:33:
b1:ee:f6:85:4f:8f:f4:68:1c:a5:a4:f6:26:e2:f1:64:1b:c3:
7d:96:8a:18:a8:59:c6:9a:4c:a6:0d:c8:dc:ab:df:35:a7:b7:
ba:7e:f9:b0:b3:60:3a:2e:f6:f1:b1:b3:29:b5:34:6e:c1:dc:
e4:d6:14:68:f7:a5:41:bd:d6:6a:52:10:68:08:36:75:47:8d:
22:7d:2d:17:be:6f:dc:b2:71:9a:7f:25:ae:24:e5:a1:af:6e:
f2:41:01:e6:77:8c:2d:9d:db:ab:68:8e:5a:55:4b:3d:ce:04:
cf:1d:42:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:27 2026 by rpki-client