Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e33312e302f32342d3234203d3e20323030303137.roa
File: 38372e3235342e33312e302f32342d3234203d3e20323030303137.roa (raw, json)
Hash identifier: lbbXKkkoJ4X5dFgdoGsgrLdnfR7I5el1vS65pf+Zkis=
Subject key identifier: 22:3B:80:FC:0E:AC:87:D3:B4:78:9D:54:18:9C:36:B1:59:AF:1D:19
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 07AAD31322DBAF09AF8CDA30C1EA4C712599BAEF
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e33312e302f32342d3234203d3e20323030303137.roa
Signing time: Fri 21 Aug 2026 11:58:44 +0000
ROA not before: Fri 21 Aug 2026 11:53:44 +0000
ROA not after: Fri 20 Aug 2027 11:58:44 +0000
asID: 200017
IP address blocks: 87.254.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:aa:d3:13:22:db:af:09:af:8c:da:30:c1:ea:4c:71:25:99:ba:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Aug 21 11:53:44 2026 GMT
Not After : Aug 20 11:58:44 2027 GMT
Subject: CN=223B80FC0EAC87D3B4789D54189C36B159AF1D19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7e:a8:fd:f6:36:41:d7:de:a1:03:a5:73:0d:
d8:d6:e7:c6:c1:08:a1:2c:ee:0e:e5:2d:73:05:86:
54:8c:8b:cc:62:ca:42:4d:a3:92:c9:62:f0:28:46:
f7:73:00:08:5f:cc:73:cd:f8:8d:42:36:e5:a4:89:
85:d5:7d:c4:dd:51:3f:8d:78:17:54:b3:24:d2:07:
5a:53:89:42:21:0b:0b:9f:da:9b:9d:e3:57:e9:ce:
33:73:44:f5:a8:67:36:81:eb:ff:7a:1f:d1:b4:4f:
46:09:06:e4:d3:64:5f:dc:0a:39:aa:1e:63:19:4b:
92:54:c3:f7:3c:6c:ba:90:83:85:5c:3c:7c:b3:29:
8f:ec:16:95:92:ef:dd:54:8b:38:d2:cf:b4:2f:9c:
d0:c7:77:e4:e1:67:4c:7d:b7:c4:fe:cc:ad:9f:f7:
0a:e1:2b:99:0e:93:d8:ec:18:a9:dd:ce:e5:7f:18:
43:bb:0d:3c:09:b9:94:03:c8:80:df:13:bc:e1:cd:
55:5d:5f:47:71:03:04:31:3b:f7:ab:65:4d:7c:95:
ae:01:e4:ee:cf:50:3d:11:72:94:8b:ef:73:73:86:
e4:95:39:ea:74:ca:3b:8b:ea:14:24:e5:c5:fc:d2:
dc:9a:0b:41:83:c6:00:c5:58:72:09:82:1c:05:28:
32:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3B:80:FC:0E:AC:87:D3:B4:78:9D:54:18:9C:36:B1:59:AF:1D:19
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e33312e302f32342d3234203d3e20323030303137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.31.0/24
Signature Algorithm: sha256WithRSAEncryption
91:75:35:19:ed:6d:18:30:cb:ce:8f:b8:f1:bc:c1:19:4d:c1:
1e:6c:08:6b:28:c2:e2:c5:88:4c:8b:9c:90:1e:96:24:68:48:
42:46:d3:8b:07:99:49:e2:5d:d9:1d:22:29:cb:d6:42:b7:fc:
ee:d4:5b:5e:ce:73:97:74:50:04:4a:cc:7f:09:12:b1:8f:a4:
32:27:c8:7e:81:02:63:e9:26:6e:37:24:a6:58:4c:2c:e6:b8:
a4:b3:8b:58:68:8a:69:0a:5a:ca:02:6f:40:66:57:87:e9:85:
46:7e:d3:76:72:8d:c4:01:c9:86:a7:3f:91:1a:68:fb:33:1d:
6c:66:ff:3f:1b:8e:1a:b9:53:a1:ee:83:23:55:be:ec:43:0c:
69:cf:d0:52:82:67:1e:1c:49:56:02:b5:76:f5:b9:da:9f:ca:
41:79:b4:41:6b:1c:19:bf:c6:40:1b:74:03:14:d2:0e:e6:3f:
0c:da:70:38:f4:ef:89:2b:63:34:e5:af:e5:b2:0c:62:f7:b5:
b6:11:8f:2c:cd:6d:36:cb:3a:e3:38:63:d1:30:49:83:9e:8b:
83:e8:55:a8:93:a8:ba:63:d5:11:71:51:39:4c:79:da:2c:ed:
43:c1:44:9d:5d:e1:6d:42:39:91:10:c7:66:de:c8:bd:1e:fb:
66:4e:5d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:53 2026 by rpki-client