Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32342e302f32342d3234203d3e20383334.roa
File: 38372e3235342e32342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 7yikp/z/qWH5JI/YxCl7e8W/SvKcj65ynkk8VMtUC0s=
Subject key identifier: 09:F6:76:44:03:81:1C:2F:71:24:EB:DE:80:44:A3:92:9A:AC:AB:9D
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 607A6A68CFA1FD0B2A2C1A1AE9E2FACE330423B1
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32342e302f32342d3234203d3e20383334.roa
Signing time: Mon 20 Apr 2026 10:35:21 +0000
ROA not before: Mon 20 Apr 2026 10:30:21 +0000
ROA not after: Mon 19 Apr 2027 10:35:21 +0000
asID: 834
IP address blocks: 87.254.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:7a:6a:68:cf:a1:fd:0b:2a:2c:1a:1a:e9:e2:fa:ce:33:04:23:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Apr 20 10:30:21 2026 GMT
Not After : Apr 19 10:35:21 2027 GMT
Subject: CN=09F6764403811C2F7124EBDE8044A3929AACAB9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f7:88:bd:27:bb:4b:a4:3d:93:94:a5:a8:c5:
e5:a5:6c:b8:c4:94:7c:39:6f:0e:78:4e:0e:98:ef:
f9:b4:ce:2e:e0:97:0b:6d:7b:2f:d0:e6:69:91:f6:
96:08:e8:f3:93:e8:1c:f4:33:b9:ac:9e:85:89:ef:
8f:51:4e:ae:4a:0e:f9:a8:51:66:e8:75:47:73:99:
d7:9e:1a:6c:d1:be:8c:21:be:23:61:a5:57:02:fd:
63:8f:d6:26:8a:35:e2:61:20:66:90:92:91:a4:26:
28:bd:29:80:40:a6:36:7e:40:de:d7:de:36:15:7c:
37:15:3e:97:97:e2:8d:31:b1:4e:cd:9c:54:09:60:
4e:b7:97:9c:57:b6:16:7a:86:0b:1e:ef:d6:28:a6:
bb:55:d2:81:1a:88:89:42:12:b5:38:69:61:6a:51:
75:6d:8b:6f:d4:a7:9e:3e:55:8a:bc:c6:41:c4:d2:
b7:fe:88:83:00:1d:04:4a:33:e9:c6:15:82:36:68:
c1:8b:20:2f:18:73:e4:9e:31:16:63:c2:20:fe:de:
6e:e4:6c:c5:08:6c:3c:aa:c2:c6:d7:43:19:90:a8:
5b:53:45:cc:47:44:8f:e7:2c:ed:e4:70:ca:63:e1:
61:d7:6a:75:b7:e9:a1:18:8b:f9:33:80:68:e7:b6:
6c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F6:76:44:03:81:1C:2F:71:24:EB:DE:80:44:A3:92:9A:AC:AB:9D
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.24.0/24
Signature Algorithm: sha256WithRSAEncryption
86:d6:76:31:12:a7:db:04:4a:49:e3:53:19:bf:33:75:64:eb:
de:cd:30:78:d9:eb:76:1a:63:26:b2:f4:54:56:4a:c6:b0:e8:
45:90:df:4a:28:d4:14:e8:d2:b0:18:ac:53:7b:ad:91:42:ff:
c9:f3:9d:0b:c7:8c:a4:17:a3:62:57:01:ba:48:5a:b1:30:c1:
2f:e2:eb:50:7a:d3:dc:dc:a3:6a:ff:23:d3:b2:03:66:00:ec:
0a:63:2d:0c:7b:93:9b:7d:f7:21:21:ca:42:b8:af:c1:a1:45:
11:06:0f:1d:39:13:92:9e:97:f8:d9:0c:13:a3:be:10:6e:06:
ef:9b:d0:ef:15:82:8b:0b:a5:4a:7f:e3:13:85:55:e2:4f:f3:
d3:2b:38:8b:9f:27:f7:cd:5b:f3:8a:e1:b2:20:b2:ac:dd:b6:
58:a9:77:15:56:7b:29:ce:83:12:07:eb:e2:9d:0e:97:00:da:
47:21:1e:78:41:76:d3:8a:12:69:d1:81:e5:6d:a8:83:ca:a5:
54:b3:77:07:ab:b7:40:bb:17:22:c5:f5:fd:5c:da:f8:69:e2:
3a:f5:d1:52:cd:1a:8b:8c:4c:8b:34:e9:eb:eb:50:9c:74:28:
6e:74:31:c2:cd:3b:43:6c:f3:dc:74:17:b7:df:bc:bb:0d:69:
34:b3:fd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:34 2026 by rpki-client