Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e372e302f32342d3234203d3e20383334.roa
File: 38372e3235342e372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 29q364QRFm+ZSXs9P4TkUXN3aT2etKQQ0SupwFrpngI=
Subject key identifier: 0F:2F:CD:68:AD:0A:71:FA:FF:E6:4A:83:32:A0:95:35:19:D5:CC:D0
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 0AD11A1B6517A5953C2F2ADD77A76E56E9B847EF
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e372e302f32342d3234203d3e20383334.roa
Signing time: Wed 26 Aug 2026 11:22:23 +0000
ROA not before: Wed 26 Aug 2026 11:17:23 +0000
ROA not after: Wed 25 Aug 2027 11:22:23 +0000
asID: 834
IP address blocks: 87.254.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:d1:1a:1b:65:17:a5:95:3c:2f:2a:dd:77:a7:6e:56:e9:b8:47:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Aug 26 11:17:23 2026 GMT
Not After : Aug 25 11:22:23 2027 GMT
Subject: CN=0F2FCD68AD0A71FAFFE64A8332A0953519D5CCD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fe:16:c8:b4:66:fe:c6:05:d1:e0:ba:34:07:
9d:cb:db:fc:c1:81:9b:9c:e4:f6:1a:39:1c:31:0f:
a2:54:72:db:41:00:82:c0:4d:60:00:02:af:d6:cf:
70:b9:18:a0:6d:5c:df:75:b6:82:64:6b:68:54:32:
03:98:83:b0:44:1e:09:04:dc:63:b1:e0:52:d8:d1:
71:39:39:e7:24:fc:a7:13:da:2a:00:16:b1:19:e8:
87:89:d5:0a:ba:5d:b0:f1:fa:33:6b:92:74:72:a4:
b3:83:9a:fb:e3:eb:4b:f1:da:f3:a0:4d:9e:71:a4:
2c:cd:d8:5f:52:f3:56:5e:6f:b2:e7:a9:75:46:bc:
7b:dd:ac:7c:25:2a:5e:87:34:40:17:9f:03:0f:57:
f0:1b:ce:21:e7:3a:9a:1b:5a:dc:bd:bb:ed:53:2c:
8d:dc:8d:cc:1d:e2:d2:2e:ed:da:1b:1e:de:d8:54:
72:78:50:59:48:f6:40:51:2e:e1:8f:f4:1d:b9:77:
a6:4f:0d:fb:b2:d1:25:59:01:9a:db:cf:b5:12:7f:
25:fa:3c:3b:93:bd:48:1a:b3:d5:72:f4:bc:16:56:
bf:6b:33:ca:9d:c2:17:19:ad:81:6f:66:32:1b:d1:
4a:f6:ac:04:30:83:8a:36:88:1a:11:2a:79:07:ab:
49:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2F:CD:68:AD:0A:71:FA:FF:E6:4A:83:32:A0:95:35:19:D5:CC:D0
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.7.0/24
Signature Algorithm: sha256WithRSAEncryption
41:e8:82:8d:88:f2:07:a7:c6:bd:56:92:7f:0e:72:af:0a:3e:
61:fa:a4:10:b9:69:cf:29:43:2e:08:4f:1f:12:7c:52:19:14:
0c:66:5f:66:a3:13:7d:d7:0e:96:ba:c7:a8:7b:78:8e:56:02:
6a:db:f5:b3:be:11:0b:b4:75:67:24:c8:59:09:aa:ed:07:e0:
10:f7:67:93:5c:c6:06:85:b8:69:de:88:38:f5:19:83:c3:a3:
5b:96:9a:3c:c4:fd:9f:27:1b:0f:af:6f:2e:b4:96:e6:a8:a9:
f3:c4:45:73:9e:f4:e1:22:6d:18:2a:f9:f9:7b:d0:26:9b:3c:
f7:96:11:55:80:ee:7b:33:77:df:af:3a:36:a2:36:f2:a7:9a:
5c:51:2c:13:e1:f1:b3:28:e7:f3:87:f9:3c:90:83:f8:f7:51:
66:50:39:e6:16:0b:97:44:c7:80:f3:93:5a:93:82:d8:86:58:
e0:87:3d:74:dd:0d:a8:11:47:a2:c5:58:59:74:9d:42:c6:d9:
a4:d7:d7:0d:5e:15:79:b4:f4:2e:92:37:aa:28:26:56:64:74:
36:74:d9:06:03:d6:1a:95:b0:0b:ee:99:59:60:14:3e:17:0b:
12:cd:82:a1:f7:c2:bf:13:94:14:26:f4:b7:7e:fb:43:2d:ac:
bc:e5:ba:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:27:59 2026 by rpki-client