Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e372e302f32342d3234203d3e20313531333839.roa
File: 38372e3235342e372e302f32342d3234203d3e20313531333839.roa (raw, json)
Hash identifier: 1Tzx5DQRwmTkt6C12jNRCoCqpdsvp6el2+ypdu0Bwro=
Subject key identifier: 58:2B:C1:30:08:BB:85:CB:BD:6A:6C:E0:EE:40:09:93:61:B4:E9:86
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 5A20D77E257E65D51829F928F9D23BFDC93B1968
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e372e302f32342d3234203d3e20313531333839.roa
Signing time: Thu 07 May 2026 17:04:10 +0000
ROA not before: Thu 07 May 2026 16:59:10 +0000
ROA not after: Thu 06 May 2027 17:04:10 +0000
asID: 151389
IP address blocks: 87.254.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:14:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:20:d7:7e:25:7e:65:d5:18:29:f9:28:f9:d2:3b:fd:c9:3b:19:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: May 7 16:59:10 2026 GMT
Not After : May 6 17:04:10 2027 GMT
Subject: CN=582BC13008BB85CBBD6A6CE0EE40099361B4E986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:87:f4:97:89:f8:7b:b7:05:c8:f7:9e:44:b7:
2f:ce:88:46:8c:1d:6c:a5:ab:bc:94:77:b7:b7:7b:
a4:2a:41:5c:b6:ab:44:16:fc:a9:9d:ac:16:2e:ee:
ee:48:0c:e5:5b:45:19:09:6b:bc:bb:01:96:11:37:
c4:c8:f6:e8:6b:d9:0c:5e:92:1b:c1:62:18:8e:3f:
31:70:7d:ea:4e:61:3e:14:be:d2:97:5e:af:d3:54:
05:40:c2:5d:75:e9:c1:44:8b:3e:d3:b1:77:46:eb:
39:fa:26:57:e9:f5:20:12:6a:27:9b:ac:b1:08:9e:
b6:48:e3:78:06:c5:2b:31:6d:a9:91:78:b6:10:46:
9e:9b:80:58:75:48:34:40:6c:4f:b0:b5:57:ef:f1:
ab:a0:59:58:12:35:a0:bd:13:d3:29:90:f6:3d:ea:
c0:42:a1:be:5c:77:94:d3:c9:35:2f:9b:74:20:83:
83:b8:70:3a:10:84:b8:be:ed:3d:02:b5:02:31:4b:
61:2b:4f:aa:b3:73:20:d5:06:2a:6e:0d:bb:70:08:
5f:40:65:6a:85:63:3d:8b:6c:4c:4f:cb:f8:d6:7c:
e8:a2:b9:8f:d2:b5:a8:32:e2:74:d3:33:8d:d1:d6:
19:85:28:ea:fd:be:a9:66:c4:70:e7:24:a2:9c:9f:
c9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2B:C1:30:08:BB:85:CB:BD:6A:6C:E0:EE:40:09:93:61:B4:E9:86
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e372e302f32342d3234203d3e20313531333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.7.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:5c:29:fd:f8:7e:a4:18:13:ce:65:65:df:9d:1b:61:04:fc:
29:90:f0:6e:eb:e3:96:aa:b7:eb:ef:90:46:9c:65:b0:32:fe:
c0:a8:3a:ef:7b:34:ea:e6:40:96:75:ba:2a:bc:e4:1c:24:8c:
2c:de:c8:86:40:8d:af:70:be:0b:52:f7:98:1c:5c:03:11:cf:
5a:db:a0:5e:56:8a:d6:e7:2a:05:35:9b:c4:d5:08:99:75:80:
32:a9:8b:c9:25:61:07:32:02:0a:86:9f:17:96:30:bc:c3:16:
61:23:ba:9c:20:25:b7:ac:a9:e4:ce:09:31:46:71:bb:29:77:
0e:83:cc:e8:c9:bd:e6:7c:d4:7a:c5:26:54:d2:f4:bf:91:37:
de:b9:30:9f:42:21:cd:60:10:ab:76:7e:26:38:40:ed:f1:13:
6d:ab:96:4a:49:e7:bf:d4:7b:43:1a:49:a5:66:0e:b2:b0:b2:
53:84:8e:c0:bf:50:0f:25:25:00:78:fb:20:83:7b:f5:b4:95:
2d:8c:ef:03:09:00:ba:73:3f:7b:88:50:7a:57:39:f1:ed:de:
22:7e:96:74:1e:61:c1:5b:27:96:93:12:2d:91:b7:9c:84:a6:
0b:dc:30:1a:f1:97:72:c0:e1:2e:8c:f3:61:16:8e:81:30:2f:
a8:24:57:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:08:28 2026 by rpki-client