Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32342e302f32342d3234203d3e20323138363235.roa
File: 38372e3235342e32342e302f32342d3234203d3e20323138363235.roa (raw, json)
Hash identifier: sTTe5OsbHCgQiAmQMPOzIV1LQbXo98I0ZmLtX2GsdFs=
Subject key identifier: 1F:E0:12:DF:39:6A:C4:63:E7:BB:0A:42:59:13:27:2E:C0:F2:4D:9F
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 2A55222AC48CBE52A82BA0CAD280E3BB878C0327
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32342e302f32342d3234203d3e20323138363235.roa
Signing time: Thu 24 Sep 2026 06:52:25 +0000
ROA not before: Thu 24 Sep 2026 06:47:25 +0000
ROA not after: Thu 23 Sep 2027 06:52:25 +0000
asID: 218625
IP address blocks: 87.254.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:55:22:2a:c4:8c:be:52:a8:2b:a0:ca:d2:80:e3:bb:87:8c:03:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Sep 24 06:47:25 2026 GMT
Not After : Sep 23 06:52:25 2027 GMT
Subject: CN=1FE012DF396AC463E7BB0A425913272EC0F24D9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d5:0e:d3:63:06:96:ea:a2:25:83:66:0f:5b:
5d:cd:18:18:4b:96:97:33:f5:8e:df:59:94:c2:44:
89:dc:c8:b5:b9:f8:4b:87:e0:43:cb:c6:9a:bc:ce:
55:15:75:90:36:d0:f7:ad:19:7e:e9:3b:2e:f3:67:
c1:4c:ca:e9:1e:34:7a:b5:26:52:0b:fd:65:9a:de:
19:b2:a0:0f:d8:e2:46:e6:41:5d:a1:8b:b7:ac:42:
21:12:12:75:36:41:e1:58:15:8f:c2:8d:fb:af:0b:
5c:a8:16:98:7a:50:e6:6a:a9:86:9d:16:b6:83:f5:
09:4c:8c:e8:19:e7:58:b6:53:e2:72:56:1b:50:c7:
ce:cd:e8:40:8d:5c:22:d8:55:68:7f:87:50:4e:04:
80:62:6c:81:ea:b2:a7:c8:b7:24:d1:c9:fe:1f:a1:
0a:de:af:02:87:78:77:a4:82:a3:bc:24:af:91:1a:
e9:a6:23:98:b1:cd:99:3b:36:b5:0a:64:d0:ff:ca:
65:96:76:56:1e:af:cb:d3:b5:77:04:96:79:08:da:
96:2a:64:ec:81:0f:18:40:4b:2d:96:d5:84:4a:92:
e0:3a:d4:3f:c3:2e:f3:08:b2:07:38:4d:9c:99:91:
ad:5e:46:c9:1e:79:35:2d:2c:4b:0d:53:7a:23:67:
f8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E0:12:DF:39:6A:C4:63:E7:BB:0A:42:59:13:27:2E:C0:F2:4D:9F
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32342e302f32342d3234203d3e20323138363235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.24.0/24
Signature Algorithm: sha256WithRSAEncryption
41:41:07:7f:c1:88:8b:83:a4:42:9a:ec:3f:c1:dc:0f:e3:f4:
7a:24:13:c7:05:d7:95:4b:62:99:d1:08:a3:6a:c1:15:5c:fd:
b5:10:c5:7e:09:e3:9d:44:e2:21:a2:ca:2b:95:89:13:32:7a:
20:18:a6:03:44:62:aa:2e:20:f2:ac:c7:2b:9f:8c:91:fe:de:
ac:bb:9a:66:92:15:27:da:22:ce:ff:86:8c:a3:ca:e9:f5:41:
d9:3e:f9:99:0b:12:ee:6d:ae:4c:51:d2:33:6f:af:c6:94:ca:
14:7e:96:61:db:d9:0b:b6:bc:ff:3f:f5:f9:de:52:03:c3:80:
a8:23:52:f1:bb:03:85:eb:85:11:13:34:bd:ae:92:e0:72:59:
06:66:ca:f9:89:87:eb:27:66:ed:a7:7c:6b:90:c5:4d:55:23:
20:f6:4d:c5:2e:61:01:e4:96:22:bc:d2:63:3b:18:24:d8:d7:
8e:fe:cf:07:02:95:0b:34:d3:2f:df:dc:97:c0:ce:36:98:ab:
12:a4:7f:bd:76:53:7a:7b:f2:b7:9b:40:04:5f:be:44:94:b7:
67:f3:95:37:33:d5:24:2d:b0:f4:ea:7d:66:e6:87:cc:ae:0f:
f7:7a:f4:e5:7d:ce:3a:e1:27:45:7d:fc:1e:35:33:ea:ac:f7:
88:a7:58:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:58:00 2026 by rpki-client