Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32352e302f32342d3234203d3e20313734.roa
File: 38372e3235342e32352e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier: STs/Odq8qO0vXfvacpj/VHN/A8uqTrPbGQfYucpP36w=
Subject key identifier: AC:9B:C1:38:41:2F:FA:01:B5:F7:14:47:8C:D7:B9:F2:7E:0F:D8:66
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 3D4086D4269F0A030092AC5629B5E955C18FD736
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32352e302f32342d3234203d3e20313734.roa
Signing time: Fri 20 Mar 2026 15:38:51 +0000
ROA not before: Fri 20 Mar 2026 15:33:51 +0000
ROA not after: Fri 19 Mar 2027 15:38:51 +0000
asID: 174
IP address blocks: 87.254.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 21:58:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:40:86:d4:26:9f:0a:03:00:92:ac:56:29:b5:e9:55:c1:8f:d7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Mar 20 15:33:51 2026 GMT
Not After : Mar 19 15:38:51 2027 GMT
Subject: CN=AC9BC138412FFA01B5F714478CD7B9F27E0FD866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:90:27:0f:74:4a:eb:dd:88:c0:b6:2e:45:ef:
e8:f3:df:6d:37:e1:94:36:49:6b:ed:3a:e2:da:59:
72:60:30:bc:09:1c:62:a4:e2:cd:8c:76:b8:12:de:
b7:c3:bf:cf:64:f0:c2:59:c7:eb:ef:a2:b3:61:09:
10:72:73:6c:8f:18:62:b3:f1:6b:64:36:d0:63:7f:
56:6f:20:01:83:98:50:e0:98:08:25:bf:78:27:22:
20:86:b5:50:0d:05:d6:37:0f:7a:10:49:8d:cf:6a:
7c:46:16:c3:e6:74:83:50:ab:a5:05:e4:38:fa:90:
27:3a:5c:6d:5a:49:19:90:1f:c0:79:6c:91:3d:0f:
07:ab:35:58:b0:6f:0f:90:c3:f7:a6:eb:e6:1f:46:
24:bc:ef:ce:33:e8:8e:5a:e2:7d:85:12:f4:6d:56:
aa:2a:1f:70:fc:de:2f:37:fa:88:a9:75:f7:08:19:
af:54:d7:21:1c:1e:85:64:3b:ff:56:d9:c6:39:86:
09:07:aa:27:c6:48:0d:0e:d1:26:d9:48:2b:ac:38:
a6:3c:d5:9f:9e:db:90:41:a2:11:40:00:5d:0c:51:
bb:77:d2:78:ee:5f:4b:66:71:55:4e:85:f4:0a:76:
0a:6a:f0:be:8b:62:17:b6:9e:36:7e:e8:e8:05:85:
38:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9B:C1:38:41:2F:FA:01:B5:F7:14:47:8C:D7:B9:F2:7E:0F:D8:66
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32352e302f32342d3234203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.25.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:cb:bc:10:80:44:be:08:77:02:bd:00:c9:cf:d8:27:08:3e:
a5:8a:4c:e5:3d:e8:6b:33:cb:19:18:20:eb:d7:a9:da:de:ba:
0b:40:7b:04:a4:e5:4c:f8:f9:22:ce:51:f1:b8:fd:01:80:0f:
1d:fd:ea:fa:df:b9:37:43:da:3e:a9:59:c4:5d:9c:3d:77:a8:
f9:cf:df:6b:05:83:a1:09:11:82:36:fb:c3:85:5c:4f:5f:2f:
53:40:ff:7d:ef:ac:ef:51:30:2e:29:bc:74:21:05:94:ec:f6:
81:d0:58:36:05:8f:7e:d5:b3:5e:d3:ad:7c:e9:a3:fc:db:c0:
77:18:3e:08:56:0d:4f:ab:cf:d6:1a:36:07:93:3d:bd:12:f5:
41:3f:db:ee:23:50:cb:71:d5:b2:f8:a9:8a:e5:d0:2c:0b:ca:
52:da:d3:05:be:86:09:29:90:3a:ea:b4:12:7a:d3:46:a5:7e:
3c:e9:e3:b0:8c:b4:c9:07:17:df:da:65:8c:57:db:58:6c:23:
93:67:3a:b4:0d:f9:42:08:fe:fc:d0:62:92:28:6c:82:17:21:
7f:f7:a3:41:a8:e7:f8:0b:5f:95:b3:b0:1c:6e:8b:da:0f:c3:
86:0f:a6:91:14:54:1c:59:59:09:18:d2:f0:0f:ad:2b:f9:c9:
2d:b4:07:96
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUPUCG1CafCgMAkqxWKbXpVcGP1zYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJiZmQ0ZTAyMTU0N2QwMzBhYzEwYjAyMTM1MzVkNGM2
OTY4ZWVkZTAeFw0yNjAzMjAxNTMzNTFaFw0yNzAzMTkxNTM4NTFaMDMxMTAvBgNV
BAMTKEFDOUJDMTM4NDEyRkZBMDFCNUY3MTQ0NzhDRDdCOUYyN0UwRkQ4NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQkCcPdErr3YjAti5F7+jz3203
4ZQ2SWvtOuLaWXJgMLwJHGKk4s2MdrgS3rfDv89k8MJZx+vvorNhCRByc2yPGGKz
8WtkNtBjf1ZvIAGDmFDgmAglv3gnIiCGtVANBdY3D3oQSY3PanxGFsPmdINQq6UF
5Dj6kCc6XG1aSRmQH8B5bJE9DwerNViwbw+Qw/em6+YfRiS8784z6I5a4n2FEvRt
VqoqH3D83i83+oipdfcIGa9U1yEcHoVkO/9W2cY5hgkHqifGSA0O0SbZSCusOKY8
1Z+e25BBohFAAF0MUbt30njuX0tmcVVOhfQKdgpq8L6LYhe2njZ+6OgFhThJAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUrJvBOEEv+gG19xRHjNe58n4P2GYwHwYDVR0j
BBgwFoAUIr/U4CFUfQMKwQsCE1NdTGlo7t4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNhYWNkMTctYmY5ZC00N2RiLTg2NGQtZjljN2MyYmUx
ODNhLzAvMjJCRkQ0RTAyMTU0N0QwMzBBQzEwQjAyMTM1MzVENEM2OTY4RUVERS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lyX1U0Q0ZVZlFNS3dRc0NFMU5kVEds
bzd0NC5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjNhYWNkMTct
YmY5ZC00N2RiLTg2NGQtZjljN2MyYmUxODNhLzAvMzgzNzJlMzIzNTM0MmUzMjM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/4ZMA0G
CSqGSIb3DQEBCwUAA4IBAQB6y7wQgES+CHcCvQDJz9gnCD6likzlPehrM8sZGCDr
16na3roLQHsEpOVM+PkizlHxuP0BgA8d/er637k3Q9o+qVnEXZw9d6j5z99rBYOh
CRGCNvvDhVxPXy9TQP9976zvUTAuKbx0IQWU7PaB0Fg2BY9+1bNe06186aP828B3
GD4IVg1Pq8/WGjYHkz29EvVBP9vuI1DLcdWy+KmK5dAsC8pS2tMFvoYJKZA66rQS
etNGpX486eOwjLTJBxff2mWMV9tYbCOTZzq0DflCCP780GKSKGyCFyF/96NBqOf4
C1+Vs7AcbovaD8OGD6aRFFQcWVkJGNLwD60r+ckttAeW
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:16:26 2026 by rpki-client