Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31342e302f32342d3234203d3e20313938343735.roa
File: 3231372e32352e31342e302f32342d3234203d3e20313938343735.roa (raw, json)
Hash identifier: 4/AGSq6kBSxukgG2E7JQaHX1UFWVm9CjEqmLxqxX2LM=
Subject key identifier: D7:5E:76:73:D3:D2:27:D8:EB:5C:C6:BB:45:8D:ED:10:E5:45:E8:54
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 3962EEA42C190FB595377F5C7E1161FBD1C89A71
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31342e302f32342d3234203d3e20313938343735.roa
Signing time: Sat 10 Oct 2026 02:59:17 +0000
ROA not before: Sat 10 Oct 2026 02:54:17 +0000
ROA not after: Sat 09 Oct 2027 02:59:17 +0000
asID: 198475
IP address blocks: 217.25.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:62:ee:a4:2c:19:0f:b5:95:37:7f:5c:7e:11:61:fb:d1:c8:9a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Oct 10 02:54:17 2026 GMT
Not After : Oct 9 02:59:17 2027 GMT
Subject: CN=D75E7673D3D227D8EB5CC6BB458DED10E545E854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:cf:08:3e:07:8b:55:0c:2e:55:ec:85:62:
8d:8a:96:1d:b5:93:fa:8f:4b:87:4f:89:41:02:d7:
1c:a0:5c:ae:e0:05:85:17:27:32:c6:60:ef:71:f3:
e9:61:51:08:8f:01:92:31:20:4c:4f:83:53:f7:48:
f8:86:f2:d4:4c:3d:88:f8:8b:7d:56:37:91:66:cf:
12:76:0f:51:8c:af:bd:db:a5:7a:7a:ae:22:c7:19:
78:29:33:ac:78:d2:4a:0d:7f:fc:a0:5a:61:5d:84:
ef:70:7a:83:73:11:91:ae:a8:3d:f3:59:eb:21:16:
0c:1b:0b:26:43:e8:cc:1a:be:ca:de:8d:d5:fe:c8:
2e:19:af:af:1b:84:a0:d8:e4:6d:15:8c:33:77:28:
15:f2:bc:df:04:f0:a6:c0:69:db:ed:da:45:81:86:
e8:d0:79:91:7c:59:ed:65:48:a5:96:9d:9a:60:11:
8a:6d:8b:9d:3c:8c:12:82:4c:74:58:c9:6f:f9:cc:
85:ec:23:33:28:cd:9c:b5:f5:cc:e5:8f:49:d8:87:
39:74:36:cc:07:d4:1c:60:cb:d7:bc:af:a3:66:a6:
55:86:c0:05:62:1f:a6:c3:9d:41:c4:1e:74:fe:72:
ed:6e:71:61:27:13:7e:d1:fc:c3:ae:54:51:9a:f0:
d5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5E:76:73:D3:D2:27:D8:EB:5C:C6:BB:45:8D:ED:10:E5:45:E8:54
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31342e302f32342d3234203d3e20313938343735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.14.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:e7:b5:d0:59:cd:9d:43:22:dd:ae:76:40:db:5d:95:17:bd:
ab:fc:c9:7c:ea:3b:22:54:1c:fe:b7:5e:43:ad:9c:65:de:99:
ab:08:7a:d5:3d:fd:fe:37:47:b4:0e:83:17:c7:7c:b5:30:a5:
73:8e:8d:b6:17:a3:a2:0d:80:2b:e6:08:38:e2:60:9d:57:59:
8e:76:9d:ac:41:9b:50:fa:74:6c:2c:e7:2c:d5:7d:68:4a:86:
f0:e0:12:ed:9c:28:e7:c5:23:92:f7:c6:54:4c:19:24:af:aa:
90:75:fd:75:79:1d:b3:01:fc:67:ea:55:70:2d:9b:b1:9f:8a:
2e:f9:3e:b6:12:0e:05:53:ae:d5:70:ad:35:4e:5d:d9:55:ca:
03:36:33:8a:22:fb:d1:26:0f:7e:fb:a4:20:fa:d9:ff:76:20:
b0:c0:fe:17:6d:c3:ab:fb:c6:e4:66:55:af:07:ed:a0:e9:fd:
d3:d8:01:8a:d0:45:53:53:7d:da:40:27:ce:9e:1c:5b:19:6d:
e6:7f:d6:37:99:16:cb:fd:93:2b:1e:ff:73:fe:81:db:08:eb:
80:c7:4d:46:a6:88:35:5d:cc:33:cb:5b:fc:5f:aa:71:74:03:
f7:55:5e:3e:b4:bd:a4:c2:f2:66:24:fd:1b:51:b7:44:cc:4a:
ac:dd:0b:c5
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUOWLupCwZD7WVN39cfhFh+9HImnEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJiZmQ0ZTAyMTU0N2QwMzBhYzEwYjAyMTM1MzVkNGM2
OTY4ZWVkZTAeFw0yNjEwMTAwMjU0MTdaFw0yNzEwMDkwMjU5MTdaMDMxMTAvBgNV
BAMTKEQ3NUU3NjczRDNEMjI3RDhFQjVDQzZCQjQ1OERFRDEwRTU0NUU4NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Zc8IPgeLVQwuVeyFYo2Klh21
k/qPS4dPiUEC1xygXK7gBYUXJzLGYO9x8+lhUQiPAZIxIExPg1P3SPiG8tRMPYj4
i31WN5FmzxJ2D1GMr73bpXp6riLHGXgpM6x40koNf/ygWmFdhO9weoNzEZGuqD3z
WeshFgwbCyZD6MwavsrejdX+yC4Zr68bhKDY5G0VjDN3KBXyvN8E8KbAadvt2kWB
hujQeZF8We1lSKWWnZpgEYpti508jBKCTHRYyW/5zIXsIzMozZy19czlj0nYhzl0
NswH1Bxgy9e8r6NmplWGwAViH6bDnUHEHnT+cu1ucWEnE37R/MOuVFGa8NWRAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU1152c9PSJ9jrXMa7RY3tEOVF6FQwHwYDVR0j
BBgwFoAUIr/U4CFUfQMKwQsCE1NdTGlo7t4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNhYWNkMTctYmY5ZC00N2RiLTg2NGQtZjljN2MyYmUx
ODNhLzAvMjJCRkQ0RTAyMTU0N0QwMzBBQzEwQjAyMTM1MzVENEM2OTY4RUVERS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lyX1U0Q0ZVZlFNS3dRc0NFMU5kVEds
bzd0NC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjNhYWNkMTct
YmY5ZC00N2RiLTg2NGQtZjljN2MyYmUxODNhLzAvMzIzMTM3MmUzMjM1MmUzMTM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzOTM4MzQzNzM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
2RkOMA0GCSqGSIb3DQEBCwUAA4IBAQAd57XQWc2dQyLdrnZA212VF72r/Ml86jsi
VBz+t15DrZxl3pmrCHrVPf3+N0e0DoMXx3y1MKVzjo22F6OiDYAr5gg44mCdV1mO
dp2sQZtQ+nRsLOcs1X1oSobw4BLtnCjnxSOS98ZUTBkkr6qQdf11eR2zAfxn6lVw
LZuxn4ou+T62Eg4FU67VcK01Tl3ZVcoDNjOKIvvRJg9++6Qg+tn/diCwwP4XbcOr
+8bkZlWvB+2g6f3T2AGK0EVTU33aQCfOnhxbGW3mf9Y3mRbL/ZMrHv9z/oHbCOuA
x01Gpog1Xcwzy1v8X6pxdAP3VV4+tL2kwvJmJP0bUbdEzEqs3QvF
-----END CERTIFICATE-----
Generated at Sun Oct 25 22:45:45 2026 by rpki-client