Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e362e302f32342d3234203d3e20343031333632.roa
File: 38372e3235342e362e302f32342d3234203d3e20343031333632.roa (raw, json)
Hash identifier: lNHbvVUsjRQWADwz+5BXy+SD2pwhPF26pAipPx7926o=
Subject key identifier: C9:8A:C0:83:A5:CF:8D:2C:AC:D4:4A:B0:C1:0E:72:7E:EC:FD:C5:42
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 01085CB70B765ABE2CD03723C69F8F5190297784
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e362e302f32342d3234203d3e20343031333632.roa
Signing time: Wed 26 Aug 2026 11:21:51 +0000
ROA not before: Wed 26 Aug 2026 11:16:51 +0000
ROA not after: Wed 25 Aug 2027 11:21:51 +0000
asID: 401362
IP address blocks: 87.254.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:08:5c:b7:0b:76:5a:be:2c:d0:37:23:c6:9f:8f:51:90:29:77:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Aug 26 11:16:51 2026 GMT
Not After : Aug 25 11:21:51 2027 GMT
Subject: CN=C98AC083A5CF8D2CACD44AB0C10E727EECFDC542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1b:e2:b9:87:65:b1:04:a4:49:5b:ed:dd:44:
47:06:e9:ea:66:03:d1:e4:30:2f:97:b6:f2:6b:32:
f0:84:d2:ea:99:ab:6c:ea:84:45:11:3b:c6:f0:48:
95:1e:39:19:15:66:42:e4:b9:26:85:a2:20:d0:79:
0f:aa:d0:0b:79:7d:8b:1f:a7:5e:2c:db:87:ea:7c:
84:93:59:8b:ea:64:4f:e9:ee:0a:f8:fb:11:60:bb:
e6:b6:16:0a:d3:bf:c1:d4:e8:51:89:db:48:f6:d0:
05:4e:ac:6a:f0:a7:77:7b:94:71:68:ea:a1:d3:39:
97:c6:0c:c0:32:06:ee:51:73:ba:35:00:7c:f7:f0:
0f:02:81:fc:b3:dd:6a:15:ea:dc:bf:4a:53:54:2d:
65:17:4d:8f:14:fc:90:2d:ca:37:c5:19:f6:bb:6d:
45:5c:b2:6d:82:ff:6e:a3:c6:48:7d:93:42:a3:67:
d8:b7:6b:af:50:10:65:37:58:ab:18:73:a6:af:10:
ed:f6:c1:33:bd:af:87:f9:bf:df:7e:b5:1e:fc:0a:
f7:6a:8b:dc:10:cc:52:e2:82:34:72:b7:3d:a0:a2:
05:63:34:f3:d5:69:13:20:9c:30:a4:ed:d8:83:be:
95:65:dd:15:4e:e2:0f:ad:d5:b5:e7:75:f1:cc:79:
9b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8A:C0:83:A5:CF:8D:2C:AC:D4:4A:B0:C1:0E:72:7E:EC:FD:C5:42
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e362e302f32342d3234203d3e20343031333632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.6.0/24
Signature Algorithm: sha256WithRSAEncryption
47:af:89:fa:64:9e:22:43:af:b1:1c:53:04:8d:86:fa:3e:7a:
e3:f3:ba:07:97:f5:71:dc:b7:0c:24:4d:dc:50:7f:e7:95:4e:
df:6d:8f:c1:2e:6a:5d:4c:7f:db:3c:57:20:22:1a:cc:86:80:
83:1e:4c:8f:eb:54:7a:40:4e:26:82:cd:c4:20:02:6c:8e:6d:
a2:ea:7a:73:7a:77:b3:97:97:46:be:97:23:11:f1:c5:63:99:
01:94:ab:ce:f3:91:b0:1b:a4:e5:39:be:e5:5d:93:2a:c4:7e:
08:40:c8:c9:90:17:b4:4d:23:70:32:16:d9:ef:bb:b5:26:5d:
8d:53:4a:66:05:1c:65:ea:75:86:ae:73:2e:a8:eb:ae:b9:0e:
d2:f6:f6:83:1b:d1:19:ae:98:22:6c:c6:3c:82:43:1e:d5:f8:
e7:04:ab:f5:93:03:0b:ce:32:8f:70:30:ad:f4:44:e9:68:24:
02:fd:ee:ec:62:0d:ca:aa:41:18:d1:ad:6c:36:34:a8:3b:4c:
69:91:e6:63:69:bf:22:91:e7:3d:58:c0:1a:16:d6:61:57:15:
69:21:6d:d0:db:62:1e:8b:32:42:f4:98:04:e7:6c:6b:d3:00:
76:1d:bd:9d:ff:f6:3f:83:4e:f6:7a:d0:b3:ae:f7:26:35:69:
56:9f:ac:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:06:26 2026 by rpki-client