Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31302e302f32332d3234203d3e2039333034.roa
File: 38372e3235342e31302e302f32332d3234203d3e2039333034.roa (raw, json)
Hash identifier: ggxRDSIk4x8P9rbdr1wiNW32yw9uoE+S2USYJnBn0oI=
Subject key identifier: CC:89:21:AE:A0:1D:EE:1E:0E:26:BF:A3:E3:4B:96:F5:31:65:F3:CC
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 232C81F82A628E0DAD0F7F276D435C26C7F1A00D
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31302e302f32332d3234203d3e2039333034.roa
Signing time: Wed 25 Mar 2026 16:27:49 +0000
ROA not before: Wed 25 Mar 2026 16:22:49 +0000
ROA not after: Wed 24 Mar 2027 16:27:49 +0000
asID: 9304
IP address blocks: 87.254.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:57:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:2c:81:f8:2a:62:8e:0d:ad:0f:7f:27:6d:43:5c:26:c7:f1:a0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Mar 25 16:22:49 2026 GMT
Not After : Mar 24 16:27:49 2027 GMT
Subject: CN=CC8921AEA01DEE1E0E26BFA3E34B96F53165F3CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f7:35:40:e4:ae:4c:48:dc:4e:c2:06:5a:95:
8c:cd:ed:47:60:84:a8:43:02:ff:8d:b5:e0:79:00:
72:02:cd:5f:99:38:8b:20:a5:26:85:0b:78:c1:ec:
c8:a2:77:ca:54:ea:41:93:b6:44:c4:80:af:2d:a2:
5d:45:6e:36:09:93:26:b5:32:61:ac:6a:e3:51:31:
b6:28:bc:47:c2:05:51:13:fa:30:f1:2a:f5:d4:9b:
b6:a7:42:4c:c7:fa:73:bb:27:00:f3:47:e1:04:e6:
f9:31:ba:39:c8:9a:da:4a:00:a8:82:39:c3:bf:84:
63:7e:1f:ab:67:c6:7b:d2:b5:bd:81:78:86:c2:e1:
38:b5:93:68:4a:b2:a9:4b:53:b4:57:c0:55:b7:a4:
27:94:a4:17:bc:fc:4a:a1:2f:a0:90:e0:c4:cb:22:
96:eb:b3:b0:d5:47:03:41:f1:b1:05:9c:7b:c2:37:
96:59:c2:15:b7:fc:9b:82:db:6d:cd:a3:b8:96:3d:
6e:bb:3d:e7:bb:16:9f:4c:61:73:43:db:1b:a6:5f:
0c:90:7e:9c:33:ae:0f:2f:2c:8c:58:32:ad:50:8f:
d5:4e:23:bf:56:70:7b:6a:c3:d3:8f:45:63:16:fb:
d6:cf:db:f5:1b:88:45:d2:e4:dc:cd:e6:b2:c6:d2:
8a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:89:21:AE:A0:1D:EE:1E:0E:26:BF:A3:E3:4B:96:F5:31:65:F3:CC
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31302e302f32332d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.10.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:2c:91:c8:13:5b:10:f5:2e:b8:bd:42:3f:e6:c5:c9:d0:19:
8d:4f:55:fd:3e:dc:7f:08:65:eb:ac:ee:5e:30:ae:3c:e7:1e:
49:33:cc:09:53:fd:0e:da:d0:f5:a0:2f:55:ce:06:13:ff:dc:
56:da:d3:98:fd:4e:83:30:b6:9b:97:a0:c4:2d:af:95:d2:09:
27:3d:68:3f:ba:57:de:c4:b8:00:d2:8c:69:93:e8:9c:17:88:
42:90:1d:bf:01:0b:2c:aa:dd:e8:61:3d:57:9c:c4:2e:22:f3:
fc:89:fc:ff:e9:33:42:7b:18:08:00:95:f9:91:40:8e:6e:9b:
1f:ef:a7:6a:d8:cf:f4:79:61:38:81:a7:31:10:5a:d3:08:53:
5a:a6:8d:3c:db:8c:20:f9:6c:f0:e5:3a:30:60:ac:cc:e7:24:
ac:2b:2c:df:1b:87:24:aa:6d:bf:5a:35:ab:b9:2b:78:c4:a0:
c1:35:ce:9d:7c:09:2b:fa:6e:df:8e:3a:4c:c1:d6:4c:5e:9a:
84:b3:9b:e8:1f:5f:2c:65:16:82:de:aa:35:9a:7a:94:d1:2d:
0d:30:c1:d4:88:7a:6a:94:0b:a1:db:24:e9:9c:b5:ac:9a:f9:
2e:fa:bb:fe:3b:44:95:5d:e4:f3:15:8e:74:79:5a:7d:fb:7d:
cd:8d:70:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:28:22 2026 by rpki-client