Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32362e302f32332d3234203d3e20383334.roa
File: 38372e3235342e32362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: w9sLIE/EHsISMO1IIkxi33z9DQ/fromvY/u2VTNmgo4=
Subject key identifier: 7C:0B:54:34:77:3C:74:4D:21:CB:9F:19:94:21:F7:59:B0:61:80:89
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 68E0D45922EE06522FEF3D9F65978901661CD5B4
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32362e302f32332d3234203d3e20383334.roa
Signing time: Sun 26 Apr 2026 07:49:49 +0000
ROA not before: Sun 26 Apr 2026 07:44:49 +0000
ROA not after: Sun 25 Apr 2027 07:49:49 +0000
asID: 834
IP address blocks: 87.254.26.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:14:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:e0:d4:59:22:ee:06:52:2f:ef:3d:9f:65:97:89:01:66:1c:d5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Apr 26 07:44:49 2026 GMT
Not After : Apr 25 07:49:49 2027 GMT
Subject: CN=7C0B5434773C744D21CB9F199421F759B0618089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:22:cf:c2:9a:a3:8d:7b:5e:df:22:23:50:9f:
cc:37:1e:9b:fb:08:4e:52:4f:d4:fa:30:d8:61:22:
9a:1b:75:34:40:a1:e1:5f:62:a9:e9:fa:ed:e7:4b:
6e:ed:09:f6:74:97:75:61:7f:84:98:3f:55:e0:ee:
69:52:94:5f:51:30:f0:89:eb:58:b5:67:80:bd:04:
d6:2f:83:69:dc:fc:c1:02:29:f4:95:6e:63:cc:22:
79:96:43:d2:bb:f7:b7:ca:0c:f8:19:b1:ad:5e:76:
14:f2:4b:73:f7:2a:80:28:7a:e7:98:5d:56:83:1a:
81:7d:fb:6d:61:a3:8e:f9:1d:7c:75:71:a8:04:07:
2b:db:5a:67:b6:4f:04:a7:b9:47:e3:63:91:68:24:
db:96:1c:b3:c9:84:78:fa:38:56:1e:99:67:d7:88:
12:5b:80:c6:b0:2a:c6:2c:1b:1c:e9:17:f3:bb:03:
0f:12:fb:c3:49:ae:7f:39:d5:6a:5c:22:1a:63:21:
b7:56:fe:f5:ae:53:11:a3:70:d9:10:8f:41:55:98:
dc:41:53:1b:5e:87:91:08:5c:07:fa:53:36:2b:24:
9a:94:72:95:f3:2c:c8:8a:05:bd:77:e0:83:b1:ee:
76:3b:ea:d5:0f:16:c4:92:9a:06:62:0f:c3:11:c8:
6a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0B:54:34:77:3C:74:4D:21:CB:9F:19:94:21:F7:59:B0:61:80:89
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.26.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:56:df:23:bd:69:43:7a:53:c5:7f:3d:a8:34:1c:88:e8:8b:
68:47:30:01:93:95:a9:b5:60:80:07:e2:33:d5:07:4c:33:3b:
8e:e8:08:ac:30:1a:e0:15:94:e2:9e:2f:2e:02:02:53:05:80:
81:16:06:c2:ab:75:a2:64:ac:45:4c:89:61:1c:b7:c1:f2:52:
07:aa:58:49:2b:6a:2a:74:7b:ca:9f:44:7a:26:6c:24:5d:29:
f7:70:61:8f:9f:16:79:05:eb:76:1d:a3:db:d7:6a:a5:00:23:
2d:81:2b:f5:03:98:66:75:30:09:41:4c:0f:a0:f5:d4:64:f8:
11:44:5d:44:43:69:ac:65:55:9e:b0:80:e3:4e:aa:fc:b6:b5:
41:57:73:52:9b:98:f3:0e:1f:f8:5c:80:6b:34:c5:bb:f8:eb:
78:0d:fc:34:76:66:6a:34:41:31:d6:75:6f:8c:38:f5:3a:d4:
49:29:28:d1:73:b1:03:5c:8c:a1:ef:b6:da:87:b3:88:2f:f5:
f3:b1:56:ac:f5:3b:e4:87:bb:aa:64:f3:cb:6e:39:e3:55:79:
05:8c:2d:4d:6f:67:7b:99:ce:ef:a1:65:b3:db:73:58:06:22:
ae:9e:4b:ab:1f:83:55:49:58:29:70:5c:4d:dd:04:39:5b:56:
32:04:1c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:01 2026 by rpki-client