Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e342e302f32332d3234203d3e20383334.roa
File: 38372e3235342e342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: QDz1OvrGk6oQ6FbKJRTi8srlSc6w9Ov4aUyF0knIyW0=
Subject key identifier: 25:C2:38:E1:8A:59:E1:E3:51:12:FF:60:AF:E3:3D:29:BF:D8:00:8A
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 5F82286BC13A27080266A7840D6510F291AB06C1
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e342e302f32332d3234203d3e20383334.roa
Signing time: Wed 26 Aug 2026 11:22:23 +0000
ROA not before: Wed 26 Aug 2026 11:17:23 +0000
ROA not after: Wed 25 Aug 2027 11:22:23 +0000
asID: 834
IP address blocks: 87.254.4.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:82:28:6b:c1:3a:27:08:02:66:a7:84:0d:65:10:f2:91:ab:06:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Aug 26 11:17:23 2026 GMT
Not After : Aug 25 11:22:23 2027 GMT
Subject: CN=25C238E18A59E1E35112FF60AFE33D29BFD8008A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b5:9e:e9:b1:be:6b:a7:46:a0:1f:2c:37:06:
d0:02:da:4c:c6:77:c6:a8:60:e2:b0:41:98:08:57:
79:e7:10:de:30:84:c7:b6:cf:d7:04:42:e1:4d:06:
49:5b:38:d6:55:98:a7:4a:f3:0c:25:bb:7e:10:44:
aa:ec:66:ba:01:ab:bb:28:da:99:85:07:14:54:09:
90:ff:c3:44:63:be:78:b1:61:e6:b7:38:da:79:25:
2f:12:8f:70:c2:b3:e6:8a:c7:1b:d2:c4:9c:52:05:
b0:5a:d9:30:39:2b:87:f8:23:1a:ab:da:da:fe:aa:
d7:6a:c3:69:9c:61:9d:e8:20:da:c7:1b:42:43:5d:
a3:ac:0f:e8:3b:26:1e:bf:08:28:05:11:68:1f:89:
56:02:fd:cc:ed:ae:37:7f:68:6f:76:b2:91:ae:ed:
eb:16:fc:2f:0f:77:0c:b7:32:4f:46:3b:0e:85:55:
c9:fc:94:d7:6b:d8:4a:96:ae:cd:73:bd:f0:67:9e:
e9:58:1e:b0:83:04:37:2e:d9:05:94:f7:76:fc:e0:
8c:08:12:c7:30:03:e4:5d:64:50:a1:5e:d7:83:47:
84:e4:16:08:3e:be:6e:37:05:c3:98:81:03:56:4f:
ee:c0:79:0b:ab:a6:63:5c:92:64:66:b4:67:7a:0e:
cd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C2:38:E1:8A:59:E1:E3:51:12:FF:60:AF:E3:3D:29:BF:D8:00:8A
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e342e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.4.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:0e:96:85:8a:5e:c7:e3:5d:63:56:e6:32:d1:02:21:f5:79:
0c:e1:65:45:b6:5e:4e:1a:38:b5:35:34:fe:a6:ed:1f:f1:ea:
a6:78:72:b7:e4:9d:70:f4:97:b3:59:92:0c:44:e2:02:65:b9:
f5:ae:64:a4:0b:97:f4:a4:15:05:07:24:5b:8c:97:4c:3b:a9:
b1:0e:be:c9:22:f8:e7:27:b2:29:ae:61:53:04:7f:1b:70:f6:
d3:35:a3:7f:ac:6e:05:36:76:f8:7d:11:41:85:77:0f:af:51:
5a:bf:2d:63:df:e1:80:08:d5:75:50:83:7a:93:53:50:70:03:
2f:78:0c:9e:17:1d:b5:c2:71:55:60:1e:fc:fd:4c:28:be:34:
38:53:7d:8f:66:1d:e1:af:88:b6:65:4f:f2:2f:78:a3:13:43:
c2:40:4f:e0:56:7b:82:bb:3f:e6:4e:45:b7:9e:de:6e:dc:a7:
cf:cc:db:1c:35:8e:d7:12:3a:fd:52:48:8f:83:ea:38:57:33:
61:ff:89:88:84:78:a0:9e:08:ee:9b:da:5b:2c:9e:f7:4f:d5:
f5:81:78:92:c3:a5:d5:16:38:ee:dd:17:92:01:2f:08:bd:8a:
c9:3a:9a:f3:a5:2b:e6:fd:93:e3:f1:f4:c4:ad:a8:65:f9:41:
12:f4:f3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:20:06 2026 by rpki-client