Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32372e302f32342d3234203d3e20323036303932.roa
File: 38372e3235342e32372e302f32342d3234203d3e20323036303932.roa (raw, json)
Hash identifier: Xuw3TAANRJRfZ6808E5bRrhDo88u4xKeZ2EmRQyfhRE=
Subject key identifier: AF:7A:7D:14:30:D5:86:82:14:C5:43:BF:57:1F:2B:CC:6A:20:04:E3
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 48954627CC79AE5F953A37D863659EAD93F95CDE
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32372e302f32342d3234203d3e20323036303932.roa
Signing time: Fri 25 Sep 2026 08:50:01 +0000
ROA not before: Fri 25 Sep 2026 08:45:01 +0000
ROA not after: Fri 24 Sep 2027 08:50:01 +0000
asID: 206092
IP address blocks: 87.254.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:95:46:27:cc:79:ae:5f:95:3a:37:d8:63:65:9e:ad:93:f9:5c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Sep 25 08:45:01 2026 GMT
Not After : Sep 24 08:50:01 2027 GMT
Subject: CN=AF7A7D1430D5868214C543BF571F2BCC6A2004E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a3:c4:15:c9:96:cb:64:0b:d4:37:cc:30:d6:
3f:5e:41:27:6b:59:e1:6c:76:e2:99:ef:5b:87:3e:
42:73:ae:5e:d0:3d:88:e0:70:dc:0c:dd:00:ff:f9:
4b:d4:19:af:a7:ec:a2:79:b4:30:0e:15:b0:90:f0:
e5:76:69:08:f9:53:dd:8d:ea:a4:00:93:bf:34:03:
5f:c7:e6:c3:92:c7:ea:16:f2:b1:ea:fc:34:76:c6:
74:7e:76:c1:ce:b1:59:fc:c8:72:9e:c9:b4:05:c5:
00:2c:e6:90:eb:f0:ec:69:ec:4c:ea:d4:8e:44:88:
df:fc:ec:87:1a:be:9a:5f:a9:ac:ea:c3:1b:83:f0:
c9:6e:32:e8:15:f3:8d:6b:dd:8f:78:31:58:7f:e4:
1a:f7:7e:b9:f0:42:60:af:a4:f8:65:2f:cb:d8:38:
38:c6:0b:83:51:31:f1:8e:93:ac:c8:e1:7b:00:e2:
f1:48:1b:66:eb:82:2b:15:ea:5e:39:a2:ba:f6:f3:
51:f0:eb:35:33:3a:d7:b1:62:19:ef:dd:91:9a:d7:
ac:c1:6c:94:99:89:97:c9:f2:c6:af:84:aa:1a:ed:
e7:0d:b8:79:ba:79:e3:49:99:5c:e8:07:c0:b6:be:
d4:ab:17:e5:e9:77:f9:03:ba:0e:83:3a:99:fc:ce:
af:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7A:7D:14:30:D5:86:82:14:C5:43:BF:57:1F:2B:CC:6A:20:04:E3
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32372e302f32342d3234203d3e20323036303932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.27.0/24
Signature Algorithm: sha256WithRSAEncryption
52:cc:85:ca:cd:57:4f:80:03:f5:24:23:51:89:cc:10:71:e8:
8f:6a:cf:bc:87:70:29:a3:a4:3b:b0:1d:94:c2:07:e5:f4:f5:
22:85:13:0a:d7:cc:96:40:66:4a:6e:00:09:5c:73:fe:f5:8f:
b4:0e:93:28:30:3c:9d:eb:6c:8e:39:bc:e7:3a:2c:24:34:69:
0c:fd:89:2c:c6:e6:5e:f0:3b:af:2a:7d:34:3c:7e:42:96:87:
5c:90:1f:17:0e:7b:b4:76:19:af:40:5c:47:c1:31:6a:5d:87:
1f:9a:71:76:f4:ac:cb:1c:e6:b4:71:8e:8b:59:bd:4d:31:91:
4f:0a:48:6e:a9:a6:0b:9c:1b:7a:b7:51:3d:a4:10:f1:dd:92:
87:a5:0f:15:55:ce:01:e8:25:d0:10:fc:df:0a:5c:fa:78:1f:
f9:9d:94:12:2d:e1:13:94:5c:ec:b4:a0:66:ac:f9:47:52:08:
2c:e5:ad:65:83:cb:14:2b:45:ca:fc:fd:66:4a:2c:59:7f:49:
1c:50:73:a4:ef:a2:92:86:26:f5:de:37:01:dd:cf:77:df:eb:
0d:40:27:2c:8d:4e:71:ac:6f:50:4e:a1:6a:fb:63:43:6c:3e:
4d:8c:03:e1:10:82:aa:ae:d6:9f:0e:94:8c:61:2c:5f:57:28:
7e:35:c4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:59:13 2026 by rpki-client