Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31342e302f32332d3234203d3e2039333034.roa
File: 38372e3235342e31342e302f32332d3234203d3e2039333034.roa (raw, json)
Hash identifier: zOjJfKXFDDK8FWQuGoyGMyabfyxwg6zgnL0YaVQFH20=
Subject key identifier: 69:83:3E:FA:CD:F7:DE:90:93:AE:62:67:0A:6F:E2:F2:62:7D:05:3A
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 6DCAD90470292D04C54892AF647AF59BC58D43EF
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31342e302f32332d3234203d3e2039333034.roa
Signing time: Wed 25 Mar 2026 16:27:48 +0000
ROA not before: Wed 25 Mar 2026 16:22:48 +0000
ROA not after: Wed 24 Mar 2027 16:27:48 +0000
asID: 9304
IP address blocks: 87.254.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:ca:d9:04:70:29:2d:04:c5:48:92:af:64:7a:f5:9b:c5:8d:43:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Mar 25 16:22:48 2026 GMT
Not After : Mar 24 16:27:48 2027 GMT
Subject: CN=69833EFACDF7DE9093AE62670A6FE2F2627D053A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:84:17:08:09:db:aa:9b:ee:09:ff:78:73:
90:09:6b:c7:da:8d:2f:66:ba:81:e6:97:c7:74:7a:
8b:15:70:3d:09:43:10:52:f2:c1:65:8d:d8:6a:cf:
53:b6:09:74:d3:63:56:2b:18:02:65:e2:2c:23:df:
f4:e8:b5:4c:e6:ae:9d:5b:67:62:a7:cf:d3:27:0e:
8f:08:17:8c:a0:e5:24:f5:dc:f3:92:7b:82:cd:e8:
fd:bd:ed:d0:f9:10:e4:a7:bc:47:58:8f:bb:ff:d0:
b0:70:0a:6f:69:20:bd:5c:cf:d7:34:8a:eb:42:3c:
7f:dc:b9:52:d8:74:10:96:06:a0:1b:77:f2:05:6a:
4b:af:b8:20:7a:d7:e1:17:63:c4:62:57:87:93:06:
0e:9b:5e:71:19:11:7f:3d:49:39:73:c6:bd:c8:27:
05:31:16:75:57:fe:00:2a:1b:72:f7:2a:de:00:ed:
2d:03:64:b4:96:25:4b:4b:17:7b:c1:6e:e3:05:ca:
0a:d3:7f:d8:63:6b:c0:5b:3e:01:38:93:6d:c6:e0:
2d:7d:dc:4a:0b:12:b8:26:e2:0e:f2:85:77:92:f1:
25:26:77:f1:64:4a:5a:99:83:d5:8b:9e:ef:14:5b:
46:17:bc:5d:c8:63:f6:d1:38:b5:a6:a4:a3:58:2f:
eb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:83:3E:FA:CD:F7:DE:90:93:AE:62:67:0A:6F:E2:F2:62:7D:05:3A
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e31342e302f32332d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.14.0/23
Signature Algorithm: sha256WithRSAEncryption
22:c2:4a:b1:c9:2e:a5:51:59:fb:c5:6c:65:df:fe:07:1a:66:
2f:4b:2b:58:a5:42:0f:1e:1b:6b:98:ea:60:7e:5b:31:70:c0:
89:dc:92:b9:86:65:d5:ba:91:84:23:ca:a1:f6:d2:4c:ef:58:
78:4a:1b:45:b3:e6:92:da:bf:11:fa:f9:19:f6:c5:59:1c:08:
60:60:08:eb:1b:e8:58:e8:e5:c2:72:70:f6:9c:db:6d:81:90:
23:7a:14:98:3b:e8:28:2a:78:f8:94:3c:60:42:56:3b:30:7b:
6e:c8:48:f8:99:bd:78:d2:4a:2c:3a:4e:3a:5b:9a:9b:d4:33:
3e:2c:d0:d9:77:d9:5d:8d:a8:7f:46:24:6d:9c:b4:47:89:5e:
ed:db:27:b1:0e:92:39:e7:5c:ee:1b:d8:b8:d2:84:bb:74:5e:
6d:c2:1f:59:26:e3:88:7e:98:dc:cc:4a:07:bc:07:c3:a0:11:
e5:e8:34:90:cb:e0:b7:be:f4:34:3c:45:5d:43:2a:8c:dd:0b:
95:41:3e:b3:5b:a1:c1:a7:d2:27:0a:72:cc:8c:d7:15:67:e0:
62:24:fd:68:2d:3f:41:d9:8d:da:7b:3c:ba:47:58:ea:91:9e:
26:3f:af:a9:44:7b:d4:ec:17:07:84:66:36:3f:01:58:5c:7b:
f9:df:33:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:11:41 2026 by rpki-client