Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32362e302f32342d3234203d3e20323138383239.roa
File: 38372e3235342e32362e302f32342d3234203d3e20323138383239.roa (raw, json)
Hash identifier: E6a3DUIrDtWaQWEAr7GxRUGI6lo4FcU/j93xxkkfpm8=
Subject key identifier: 4C:81:C0:81:C5:10:DA:58:3C:44:98:22:EE:A0:76:A4:67:EF:4E:FC
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 74958B7F035DA404ABA6E275CAAD38321FC73CE3
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32362e302f32342d3234203d3e20323138383239.roa
Signing time: Mon 07 Sep 2026 05:57:41 +0000
ROA not before: Mon 07 Sep 2026 05:52:41 +0000
ROA not after: Mon 06 Sep 2027 05:57:41 +0000
asID: 218829
IP address blocks: 87.254.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 14:45:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:95:8b:7f:03:5d:a4:04:ab:a6:e2:75:ca:ad:38:32:1f:c7:3c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Sep 7 05:52:41 2026 GMT
Not After : Sep 6 05:57:41 2027 GMT
Subject: CN=4C81C081C510DA583C449822EEA076A467EF4EFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:12:96:d4:05:49:70:f4:23:8c:da:62:52:ad:
7c:87:48:14:ec:22:c3:8e:2a:cf:9f:5d:3d:88:e0:
94:06:a5:4c:71:14:c3:c1:20:25:65:73:68:64:91:
70:b9:f8:07:2d:e4:d8:f4:79:63:9b:6b:a0:28:30:
e5:9d:1b:c3:13:c9:db:93:09:d9:4d:34:3f:98:70:
7b:2f:ef:9f:55:4b:d1:b9:dd:88:a1:e8:31:1b:c6:
ce:4c:50:39:f7:dd:49:93:01:cd:86:cd:c7:a0:04:
9f:eb:65:4e:cf:4b:54:c4:ac:c6:f4:f0:bd:a9:c8:
49:9d:db:1d:8d:76:bb:b6:34:a5:bb:d5:b7:ad:d0:
a5:19:f1:be:41:78:31:3d:b7:01:9b:a2:b6:66:49:
39:f4:eb:7f:e3:68:f6:3f:01:7f:83:b3:95:f9:c9:
27:a0:dc:08:b5:b3:1e:c0:a8:9b:c0:28:7e:29:5e:
bd:ce:51:cf:f4:41:41:53:aa:8d:1a:18:0d:60:14:
31:bd:2d:41:ee:c7:42:7d:c8:f9:8e:cc:af:36:62:
9b:32:fe:7e:4a:92:38:7f:89:d8:48:f4:d2:2b:d1:
51:f6:2e:08:c7:bd:75:33:92:31:70:02:e8:99:6e:
f2:21:bd:67:e3:f9:a2:59:82:e3:76:dd:09:1b:a6:
21:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:81:C0:81:C5:10:DA:58:3C:44:98:22:EE:A0:76:A4:67:EF:4E:FC
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32362e302f32342d3234203d3e20323138383239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.26.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:ea:7e:20:55:88:8c:79:69:f8:9d:9e:fa:a9:6f:9a:a3:82:
b5:d8:3f:91:b7:55:28:db:0c:30:88:ec:88:29:b4:a0:df:3e:
4b:ab:37:90:df:73:3c:cb:74:3c:c8:7e:7a:62:d3:e3:43:e4:
5e:15:28:0e:a9:f6:ad:70:cb:ca:cd:3b:56:4a:67:25:57:39:
3f:d4:4f:93:01:12:7d:2a:2a:a2:59:94:d1:6c:79:b9:67:b5:
27:44:79:0f:c3:89:58:c2:c2:3e:d7:36:fc:f5:c2:5e:f3:1a:
c4:1c:7c:c3:87:0b:1a:c0:16:bb:ba:96:d5:07:f5:8e:da:83:
26:ce:0d:24:48:da:f4:3f:42:2b:22:b7:1e:46:65:81:53:2a:
18:38:f5:e4:5e:01:46:ac:99:c9:31:46:ab:bb:cc:6b:69:d5:
ce:5e:7e:f2:11:8a:19:b9:92:4c:9f:dd:f8:c9:0f:7d:0a:9f:
24:aa:e0:ff:eb:db:b9:f0:45:aa:5c:7a:15:21:0f:5a:b8:eb:
0d:2b:0f:0e:c2:83:5b:01:fa:ed:da:90:fe:5a:c2:e5:e5:4c:
46:e7:5a:35:82:b7:f1:3d:75:e3:b1:4b:1b:57:04:d0:32:ff:
ee:f1:19:49:c3:12:ec:e5:ec:bc:10:51:bd:bf:f0:e2:ce:a0:
a1:ce:c1:43
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUdJWLfwNdpASrpuJ1yq04Mh/HPOMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJiZmQ0ZTAyMTU0N2QwMzBhYzEwYjAyMTM1MzVkNGM2
OTY4ZWVkZTAeFw0yNjA5MDcwNTUyNDFaFw0yNzA5MDYwNTU3NDFaMDMxMTAvBgNV
BAMTKDRDODFDMDgxQzUxMERBNTgzQzQ0OTgyMkVFQTA3NkE0NjdFRjRFRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpEpbUBUlw9COM2mJSrXyHSBTs
IsOOKs+fXT2I4JQGpUxxFMPBICVlc2hkkXC5+Act5Nj0eWOba6AoMOWdG8MTyduT
CdlNND+YcHsv759VS9G53Yih6DEbxs5MUDn33UmTAc2GzcegBJ/rZU7PS1TErMb0
8L2pyEmd2x2Ndru2NKW71bet0KUZ8b5BeDE9twGborZmSTn063/jaPY/AX+Ds5X5
ySeg3Ai1sx7AqJvAKH4pXr3OUc/0QUFTqo0aGA1gFDG9LUHux0J9yPmOzK82Ypsy
/n5Kkjh/idhI9NIr0VH2LgjHvXUzkjFwAuiZbvIhvWfj+aJZguN23QkbpiEbAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUTIHAgcUQ2lg8RJgi7qB2pGfvTvwwHwYDVR0j
BBgwFoAUIr/U4CFUfQMKwQsCE1NdTGlo7t4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNhYWNkMTctYmY5ZC00N2RiLTg2NGQtZjljN2MyYmUx
ODNhLzAvMjJCRkQ0RTAyMTU0N0QwMzBBQzEwQjAyMTM1MzVENEM2OTY4RUVERS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lyX1U0Q0ZVZlFNS3dRc0NFMU5kVEds
bzd0NC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjNhYWNkMTct
YmY5ZC00N2RiLTg2NGQtZjljN2MyYmUxODNhLzAvMzgzNzJlMzIzNTM0MmUzMjM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM4MzgzMjM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
V/4aMA0GCSqGSIb3DQEBCwUAA4IBAQA96n4gVYiMeWn4nZ76qW+ao4K12D+Rt1Uo
2wwwiOyIKbSg3z5LqzeQ33M8y3Q8yH56YtPjQ+ReFSgOqfatcMvKzTtWSmclVzk/
1E+TARJ9KiqiWZTRbHm5Z7UnRHkPw4lYwsI+1zb89cJe8xrEHHzDhwsawBa7upbV
B/WO2oMmzg0kSNr0P0IrIrceRmWBUyoYOPXkXgFGrJnJMUaru8xradXOXn7yEYoZ
uZJMn934yQ99Cp8kquD/69u58EWqXHoVIQ9auOsNKw8OwoNbAfrt2pD+WsLl5UxG
51o1grfxPXXjsUsbVwTQMv/u8RlJwxLs5ey8EFG9v/DizqChzsFD
-----END CERTIFICATE-----
Generated at Sun Sep 27 07:49:46 2026 by rpki-client