Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31342e302f32342d3234203d3e20323138393131.roa
File: 3231372e32352e31342e302f32342d3234203d3e20323138393131.roa (raw, json)
Hash identifier: 6zBnZAV6U4SxORPivplOWbpDZeUBoKVCeSnCOrEOuro=
Subject key identifier: 7D:46:7C:B9:67:E1:2F:E6:BF:24:A3:C6:85:90:24:BA:7D:3B:3F:5A
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 1ACA26F75A0C07AB4523CAF0AB4CC8157284DBED
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31342e302f32342d3234203d3e20323138393131.roa
Signing time: Sat 10 Oct 2026 02:53:50 +0000
ROA not before: Sat 10 Oct 2026 02:48:50 +0000
ROA not after: Sat 09 Oct 2027 02:53:50 +0000
asID: 218911
IP address blocks: 217.25.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 16:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:ca:26:f7:5a:0c:07:ab:45:23:ca:f0:ab:4c:c8:15:72:84:db:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Oct 10 02:48:50 2026 GMT
Not After : Oct 9 02:53:50 2027 GMT
Subject: CN=7D467CB967E12FE6BF24A3C6859024BA7D3B3F5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7e:64:f4:5d:63:06:c4:25:0a:52:df:a8:8a:
e3:df:27:7b:17:2c:83:52:d8:49:c3:f6:e1:0a:9d:
8a:4c:b3:86:80:d4:64:2c:14:cc:f8:83:95:b4:e4:
e8:cd:36:b1:d9:07:17:3a:a9:41:c0:c9:fb:c4:a3:
80:2e:1b:22:6b:cd:05:4f:c8:da:1b:e2:c3:b7:bc:
ed:a3:e0:0d:0a:1c:21:18:7a:ae:85:1f:8c:b3:f4:
a2:8a:b7:bc:34:2b:3a:eb:85:d9:f6:de:eb:84:7f:
a9:bb:43:85:ca:4a:f2:f7:d0:31:ca:e5:8e:2d:dc:
02:b7:96:cf:19:f9:ba:8c:07:30:34:79:3d:3d:eb:
a1:64:a1:fd:b9:57:8f:75:1d:96:4d:85:98:50:69:
9c:5a:20:11:63:3a:27:e4:9c:7f:a7:5b:18:cc:19:
85:6b:82:d1:0b:99:7f:db:62:ba:40:68:bc:cc:3e:
90:e5:99:72:58:01:ff:99:f8:39:bf:d4:4f:fd:81:
9c:c5:aa:28:df:7b:99:f2:1f:ef:9c:54:68:ca:6a:
94:a1:63:be:7e:5a:b8:c1:69:ca:3a:5c:82:da:68:
62:51:6b:e0:e1:80:6d:0b:db:8c:a1:30:b5:ce:50:
f7:83:08:6f:a3:c4:1e:86:5a:16:26:fa:3f:dc:5e:
16:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:46:7C:B9:67:E1:2F:E6:BF:24:A3:C6:85:90:24:BA:7D:3B:3F:5A
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31342e302f32342d3234203d3e20323138393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.14.0/24
Signature Algorithm: sha256WithRSAEncryption
55:20:f3:91:09:d7:e8:47:ce:6a:ab:71:71:a0:62:f8:a6:97:
28:42:1c:56:04:df:cc:91:7b:05:19:61:50:db:1c:82:bb:d6:
c6:87:b5:69:22:2b:3d:a2:c4:df:f9:db:5f:d8:18:fa:85:d9:
99:85:46:3b:fe:c0:41:d1:bd:8e:ec:cf:d4:d3:b8:d0:f2:39:
3c:2b:6c:5e:87:d0:76:a2:b5:56:2f:6a:d4:fa:65:1e:3d:f7:
ac:42:48:c6:63:7d:8a:96:10:dd:34:0a:ac:ef:1c:77:3c:fb:
1f:23:aa:9a:ee:94:55:4d:bb:00:9c:5a:30:50:a2:e4:35:16:
9a:fc:67:a5:38:a1:01:46:a5:94:61:32:d8:92:6a:76:b7:15:
bd:7d:15:ec:40:0c:c9:21:a7:3c:e0:27:fa:df:67:06:f5:56:
b5:d1:4c:b1:3b:3b:e3:cc:07:19:57:2c:61:4d:62:cd:a9:97:
0a:2e:15:95:7e:a6:b4:1d:b2:ae:4b:36:35:4c:f3:a8:bb:6a:
67:56:23:78:c3:6a:87:73:c9:2a:4c:b7:92:a1:89:8f:04:c0:
d8:92:8b:2a:3e:b0:09:56:3d:a7:eb:de:8d:06:55:38:bc:2f:
59:c9:84:0a:88:b9:67:23:77:ff:b2:84:22:f4:cc:ba:c7:3d:
05:ef:7b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:13:58 2026 by rpki-client