Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32372e302f32342d3234203d3e20383334.roa
File: 38372e3235342e32372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: LwYf60BYgUg4jAkqEoQ2qZf65E6EJzilg8E4pulhHWA=
Subject key identifier: 53:2D:4F:14:33:70:B5:7F:F6:F8:22:35:1E:5C:9D:6C:8A:B5:96:0C
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 6044E3F6C73C6C0243B3D10832461D7C1E9D43C6
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32372e302f32342d3234203d3e20383334.roa
Signing time: Wed 25 Mar 2026 13:45:32 +0000
ROA not before: Wed 25 Mar 2026 13:40:32 +0000
ROA not after: Wed 24 Mar 2027 13:45:32 +0000
asID: 834
IP address blocks: 87.254.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:57:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:44:e3:f6:c7:3c:6c:02:43:b3:d1:08:32:46:1d:7c:1e:9d:43:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Mar 25 13:40:32 2026 GMT
Not After : Mar 24 13:45:32 2027 GMT
Subject: CN=532D4F143370B57FF6F822351E5C9D6C8AB5960C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b5:3c:14:e9:86:c5:07:7e:1a:09:08:99:9d:
f5:77:17:2f:56:d5:eb:69:5b:c6:82:ee:37:46:fd:
63:96:2e:b4:ce:a3:a6:7c:62:60:ab:81:e8:50:d8:
c4:86:cb:bc:2d:2d:3b:8d:9a:64:6c:2c:ca:f2:cf:
50:f1:2d:ec:59:3b:90:ae:10:dd:46:d4:34:62:af:
e1:eb:16:af:90:49:ff:ba:05:66:8f:c6:27:d1:30:
0f:8f:7c:f1:af:bc:41:5f:a7:3d:2b:83:eb:bc:7d:
a0:c0:dc:8f:26:ee:2f:23:ff:11:eb:23:1b:f3:af:
52:a0:1d:29:7a:18:6d:f5:01:1a:c3:3b:bd:29:ff:
48:e3:c1:b2:9e:96:70:cb:91:51:73:a2:23:e3:53:
e8:b8:38:ce:a6:73:13:fd:ef:14:18:5e:e4:67:03:
62:9c:54:a1:0c:40:5a:fa:fb:f4:3b:0f:db:38:bc:
3d:79:f9:99:48:c1:da:c2:66:3d:79:d0:2f:54:25:
3a:58:3c:7b:41:a4:e0:49:35:46:6f:4e:ab:56:46:
3b:ce:88:7e:5c:49:38:4c:ee:98:18:51:c6:89:91:
56:6d:15:1b:a3:25:75:2e:64:df:09:03:af:5b:59:
3e:1b:d9:eb:eb:02:5a:de:d2:8a:6c:77:7a:ca:55:
a2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2D:4F:14:33:70:B5:7F:F6:F8:22:35:1E:5C:9D:6C:8A:B5:96:0C
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.27.0/24
Signature Algorithm: sha256WithRSAEncryption
26:4c:e6:a5:cc:ed:46:cf:d6:cb:20:ad:0a:96:d7:6a:29:ac:
c1:87:35:d0:af:e7:86:ba:c2:a1:42:fd:f3:43:b3:39:2e:cf:
5a:e1:bd:e9:ab:f8:e0:ef:9b:40:6d:77:30:18:da:0e:d6:04:
27:c9:83:9a:38:dd:3e:40:53:09:a6:e3:c3:e5:4c:dd:ca:56:
83:17:15:6d:96:5b:ff:41:99:7d:47:d1:9e:d4:5c:2e:ec:21:
35:3c:70:c8:83:50:25:7d:0e:63:6a:03:78:f4:0f:81:05:bc:
e7:33:95:24:db:0a:89:1e:a8:1b:ea:c5:86:1c:bd:ae:9f:b5:
fc:6f:44:09:6d:dc:94:41:31:b5:59:50:d0:c1:97:cc:ad:0f:
85:51:3f:cc:94:5b:00:ce:4a:15:5b:78:6f:5d:8c:8b:26:b3:
69:e0:2c:66:64:da:da:48:b3:f6:b0:70:0c:e0:f0:bb:d0:98:
0b:95:94:52:4d:33:e5:c0:6a:8e:84:df:a6:8c:30:18:39:f6:
ba:45:fa:71:fb:91:37:55:cc:64:35:8b:aa:d5:3a:71:3a:f4:
a6:7f:dc:05:4d:11:d7:61:ff:cd:9f:87:e3:64:14:06:ad:2b:
64:24:08:d2:2f:ce:20:db:33:a1:67:db:3b:09:07:d1:cf:68:
f2:fd:59:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:34:02 2026 by rpki-client