Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31302e302f32342d3234203d3e20383334.roa
File: 3231372e32352e31302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: hfJ4SibvFwDIroIB4sGwG6yD3Breq9HTjicnMOM55ww=
Subject key identifier: 69:91:F3:E8:B1:99:B4:E1:BE:34:D1:65:4A:96:B4:B5:41:53:65:D2
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 3ED60E53DF753E58B428E1F2075426F48E21F865
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31302e302f32342d3234203d3e20383334.roa
Signing time: Sun 11 Oct 2026 09:05:45 +0000
ROA not before: Sun 11 Oct 2026 09:00:45 +0000
ROA not after: Sun 10 Oct 2027 09:05:45 +0000
asID: 834
IP address blocks: 217.25.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:d6:0e:53:df:75:3e:58:b4:28:e1:f2:07:54:26:f4:8e:21:f8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Oct 11 09:00:45 2026 GMT
Not After : Oct 10 09:05:45 2027 GMT
Subject: CN=6991F3E8B199B4E1BE34D1654A96B4B5415365D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5e:73:d7:c3:34:21:20:83:4a:ff:16:0a:2a:
5a:dd:19:59:27:06:b4:d2:ed:56:61:96:77:07:b9:
88:c2:62:45:01:57:2a:f8:68:aa:b5:7f:63:28:8a:
a9:4e:d6:59:ab:a5:8d:c8:da:96:40:36:19:e7:8a:
c5:41:c4:39:e1:d6:00:3a:2d:a1:44:6f:e7:bf:c1:
45:e2:07:ef:9e:a0:90:c0:24:c8:b2:8e:ba:02:ba:
20:81:fe:36:61:da:23:6b:87:f7:ce:41:5c:52:de:
2a:4e:57:eb:9f:b4:50:ec:dc:8f:04:d0:11:df:9f:
2d:30:ad:e3:5f:8f:75:87:e7:74:53:9c:0f:e8:fd:
53:11:7f:49:cf:24:00:31:54:d4:94:89:23:8a:40:
a5:9c:57:6b:ed:8e:77:ba:b0:d7:37:ab:b0:ad:b4:
1d:70:99:fc:bf:42:6e:9d:dc:b7:70:d1:99:d9:e9:
59:11:e9:c0:47:e5:81:50:0c:c0:64:88:4c:38:35:
6e:06:95:f0:69:dd:d0:ba:62:eb:73:8f:b6:c2:81:
e2:01:7d:be:af:a1:d8:8a:bd:4e:84:26:d3:46:66:
1f:3f:96:b2:97:e2:4d:e4:c0:34:7a:cf:51:be:fb:
38:fc:2b:23:28:33:ff:87:ff:68:d8:35:17:be:8b:
0c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:91:F3:E8:B1:99:B4:E1:BE:34:D1:65:4A:96:B4:B5:41:53:65:D2
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.10.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:64:87:dd:2b:ba:15:ef:fd:b2:46:83:09:9c:9c:77:5f:32:
26:92:47:52:08:59:4e:da:28:d4:9d:23:7e:bb:4d:be:3e:90:
ec:ff:5b:e1:df:ef:62:fc:bb:fe:b0:68:44:42:8c:0a:83:8f:
5b:92:4f:b2:d9:48:a3:1a:12:2d:ac:ea:b1:55:c5:52:ca:02:
43:25:0f:7c:5c:3d:08:69:f6:2b:31:b1:9f:39:31:bf:3e:5f:
d2:b9:0d:d7:db:76:a0:83:00:9f:de:05:1b:2b:ba:44:d1:ed:
e1:f1:41:fb:a4:a4:f6:2e:76:de:2a:b2:9e:b0:7d:c7:d7:95:
d8:4c:7b:08:f5:20:61:ea:19:df:0f:90:b8:3c:1b:b6:cd:ab:
6e:26:60:b3:ae:72:da:9c:06:ff:31:d3:89:7a:24:d4:87:e9:
e3:d2:6f:ef:a7:e1:f1:9c:3b:a4:bf:2d:d3:bf:64:de:15:94:
74:58:00:ed:9d:a4:fc:08:3e:67:ff:24:ee:70:22:36:89:85:
50:16:85:bd:5a:6e:71:d1:e4:f1:0b:e5:6a:1f:36:11:a6:1a:
93:fa:86:f6:40:35:12:9b:4b:a8:de:16:06:f6:fe:7d:7f:6d:
34:2d:db:1c:ef:4a:b0:7d:f3:2f:d3:9e:94:df:73:3c:27:75:
32:c2:dc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 19:01:55 2026 by rpki-client