Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e342e302f32342d3234203d3e20383334.roa
File: 38372e3235342e342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: PNXFoHNjgUNmmJE688WOt9UbSfRoKZTfFv5wn37YGDo=
Subject key identifier: 00:4A:4D:AA:72:83:94:39:91:6F:FC:E9:62:44:B3:3C:63:E9:54:55
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 77B11BBF50AF7CC720DB9663120D0AC21552B76D
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e342e302f32342d3234203d3e20383334.roa
Signing time: Sun 28 Jun 2026 13:28:28 +0000
ROA not before: Sun 28 Jun 2026 13:23:28 +0000
ROA not after: Sun 27 Jun 2027 13:28:28 +0000
asID: 834
IP address blocks: 87.254.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:b1:1b:bf:50:af:7c:c7:20:db:96:63:12:0d:0a:c2:15:52:b7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Jun 28 13:23:28 2026 GMT
Not After : Jun 27 13:28:28 2027 GMT
Subject: CN=004A4DAA72839439916FFCE96244B33C63E95455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8a:5a:f8:76:fd:7a:13:a7:3b:bd:5c:ed:6f:
b8:74:10:dd:24:11:31:10:6a:ac:fe:ea:39:03:13:
70:5e:ce:05:79:16:19:e3:93:75:90:a4:e2:2a:d9:
5f:3c:81:68:59:87:20:13:2d:41:be:50:c4:f0:65:
69:be:45:4b:a9:91:e0:90:47:d1:40:be:4c:a1:6b:
30:80:bf:26:2d:70:65:5b:14:72:82:03:23:63:e2:
50:db:61:cc:b3:cc:2e:8b:60:99:ba:10:6b:a0:ae:
93:46:af:58:e8:be:37:d0:d9:e3:19:30:41:c4:a3:
49:bf:bc:d9:af:11:2f:93:e9:51:d9:d1:bf:13:f1:
96:6e:93:d5:e1:65:8c:14:ec:c8:28:68:6b:c1:74:
5a:17:d2:88:79:d1:21:fe:bc:3b:6e:e0:66:ba:f0:
fa:c0:e2:2c:fe:2c:7a:74:b0:6b:2f:03:33:09:91:
e2:07:7f:38:35:91:f3:cb:9f:23:6f:11:51:38:95:
ba:3f:e3:2b:61:53:e6:c7:50:41:79:bc:90:4b:59:
c9:3c:9b:87:df:ff:fc:14:49:37:dd:d8:01:35:2e:
32:e3:d8:66:b3:1e:48:af:d4:fd:32:86:79:18:69:
0c:fc:7c:8c:48:8b:cc:89:9d:2c:24:7e:d4:ab:82:
70:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4A:4D:AA:72:83:94:39:91:6F:FC:E9:62:44:B3:3C:63:E9:54:55
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.4.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:62:5b:fa:e4:9b:b1:21:da:55:e3:7a:b0:77:f0:03:ff:6c:
85:90:01:64:79:ab:2d:c7:7b:22:81:17:09:c8:f6:b7:dc:42:
cc:26:1a:3c:31:e2:26:32:33:8b:98:de:55:7a:2e:75:ef:35:
5e:13:1f:91:0e:f9:cf:bf:7b:ee:4a:3b:fe:a1:78:4f:eb:a3:
74:0e:64:82:a8:bc:f6:31:57:15:d3:ce:89:9f:df:c7:01:be:
2e:85:2e:0a:25:8f:62:ed:0d:72:74:d1:f5:32:6a:2c:d3:8b:
44:48:94:e2:f5:85:84:08:30:aa:f2:dd:8c:70:f1:46:ad:fa:
3b:74:e5:ac:8f:a4:4c:7e:f9:7f:2a:63:ba:f1:2d:95:97:d9:
76:a2:b4:4a:4e:30:88:8b:7d:33:1e:5b:72:db:fa:20:17:1e:
8b:a1:24:aa:71:cb:95:6f:12:8d:ec:f2:59:ce:b6:1e:a2:25:
41:c6:22:2c:d4:1e:a8:74:40:36:b7:7f:6c:bc:6d:aa:21:3b:
bf:4d:a9:65:db:29:3d:e3:84:cc:d0:20:85:05:e8:83:65:7b:
9f:d7:a3:11:9e:e8:7f:0c:e8:b2:de:f9:85:b8:97:ed:26:ee:
d9:bf:6a:27:06:0c:23:ad:be:08:4c:d4:bb:94:58:ba:64:be:
41:3e:0d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:59:58 2026 by rpki-client