Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31352e302f32342d3234203d3e20323139303735.roa
File: 3231372e32352e31352e302f32342d3234203d3e20323139303735.roa (raw, json)
Hash identifier: +dDC3qno9/dDOGrdBbQoDaYYLPHMualjwXdtFrHcKEc=
Subject key identifier: D1:D1:BC:9E:A7:87:E2:A7:78:D1:E4:84:CD:A5:9D:FD:C3:80:95:A4
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 4BC91DC27E71AA57CBCC4EDB46779DCE0CEFB596
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31352e302f32342d3234203d3e20323139303735.roa
Signing time: Tue 20 Oct 2026 12:12:03 +0000
ROA not before: Tue 20 Oct 2026 12:07:03 +0000
ROA not after: Tue 19 Oct 2027 12:12:03 +0000
asID: 219075
IP address blocks: 217.25.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 13:53:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:c9:1d:c2:7e:71:aa:57:cb:cc:4e:db:46:77:9d:ce:0c:ef:b5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Oct 20 12:07:03 2026 GMT
Not After : Oct 19 12:12:03 2027 GMT
Subject: CN=D1D1BC9EA787E2A778D1E484CDA59DFDC38095A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:af:12:5a:ac:32:40:6d:1d:43:26:dc:dc:80:
e8:cc:ed:5f:ec:0b:0e:bc:7a:59:25:7d:32:d4:2f:
5c:6b:e9:49:dc:c2:c9:5a:a6:f2:0c:d5:71:88:22:
f1:b0:06:72:ff:9a:49:09:d6:3e:55:c8:35:3a:f9:
ab:ee:11:b1:87:ac:2c:5e:b8:a3:b5:79:2c:3c:27:
eb:ae:cc:d9:38:11:b9:4b:77:fc:d4:fb:5d:98:aa:
9b:e6:99:cf:e1:49:b7:dc:26:fe:05:90:1a:2e:e3:
17:65:ce:2b:1f:a1:fe:70:30:44:92:29:b8:cd:c5:
b4:c3:72:3a:f4:25:24:45:3e:a0:6e:50:92:c1:aa:
0d:9c:50:4a:96:07:36:fb:1a:04:6a:e9:12:27:4a:
a5:83:60:14:89:81:80:e8:1b:fb:67:4f:35:fb:ef:
fd:4b:fb:dc:66:2a:a5:bf:2a:d3:40:b7:e6:fb:88:
47:65:fa:5d:28:a8:ca:41:27:fd:5c:b0:6d:62:11:
58:34:3a:14:af:85:b3:ca:cd:03:29:a9:4a:cb:14:
4c:f0:3b:20:3a:a5:dd:94:6e:aa:b7:b1:6a:05:7a:
6b:9b:7f:16:eb:e0:56:ab:e5:a6:7e:bb:48:d5:7b:
ce:c8:e8:90:68:08:30:a7:00:11:26:7c:8b:bf:0f:
8b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D1:BC:9E:A7:87:E2:A7:78:D1:E4:84:CD:A5:9D:FD:C3:80:95:A4
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31352e302f32342d3234203d3e20323139303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.15.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:d1:77:d1:31:30:a2:60:59:0b:81:98:1a:a5:f4:c7:f3:06:
1b:a1:bc:00:27:85:09:c0:fb:ed:86:b3:00:da:d0:5b:45:06:
e1:87:cc:a9:f8:53:79:aa:1b:fe:9a:5e:42:03:78:84:fa:ac:
22:6a:dd:d7:b5:55:25:7a:c6:f7:2e:2e:34:ea:09:b7:df:82:
44:f3:22:87:99:83:8e:f0:77:44:60:7d:c4:b9:ed:66:0e:cb:
f9:7c:87:b5:ea:ed:78:2e:61:f7:36:93:62:c2:52:b4:ff:06:
da:ce:ed:25:ce:69:f2:ea:45:06:bc:be:d9:d1:46:c4:6d:6e:
36:28:51:38:0c:07:dc:64:8f:42:a5:00:cf:dd:1b:bd:83:b2:
90:14:1c:2d:bf:b6:aa:a2:86:59:40:e2:3e:3a:88:46:68:4f:
fd:dc:9b:23:3b:c5:5a:01:b1:36:31:cb:a1:50:f2:d4:e1:95:
e1:08:03:ea:aa:17:da:41:19:24:f3:d8:09:41:90:bc:fc:82:
19:97:12:08:b6:c1:d0:8b:0e:e7:62:24:ec:ff:66:f2:04:b6:
63:8f:21:55:9c:8e:51:d7:42:33:4d:b5:17:58:58:63:f2:6b:
1a:09:30:ec:c1:a9:fd:3f:ef:f6:1c:f1:3b:c8:f0:70:bc:b5:
85:99:99:c9
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUS8kdwn5xqlfLzE7bRnedzgzvtZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJiZmQ0ZTAyMTU0N2QwMzBhYzEwYjAyMTM1MzVkNGM2
OTY4ZWVkZTAeFw0yNjEwMjAxMjA3MDNaFw0yNzEwMTkxMjEyMDNaMDMxMTAvBgNV
BAMTKEQxRDFCQzlFQTc4N0UyQTc3OEQxRTQ4NENEQTU5REZEQzM4MDk1QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFrxJarDJAbR1DJtzcgOjM7V/s
Cw68elklfTLUL1xr6UncwslapvIM1XGIIvGwBnL/mkkJ1j5VyDU6+avuEbGHrCxe
uKO1eSw8J+uuzNk4EblLd/zU+12Yqpvmmc/hSbfcJv4FkBou4xdlzisfof5wMESS
KbjNxbTDcjr0JSRFPqBuUJLBqg2cUEqWBzb7GgRq6RInSqWDYBSJgYDoG/tnTzX7
7/1L+9xmKqW/KtNAt+b7iEdl+l0oqMpBJ/1csG1iEVg0OhSvhbPKzQMpqUrLFEzw
OyA6pd2Ubqq3sWoFemubfxbr4Far5aZ+u0jVe87I6JBoCDCnABEmfIu/D4sTAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU0dG8nqeH4qd40eSEzaWd/cOAlaQwHwYDVR0j
BBgwFoAUIr/U4CFUfQMKwQsCE1NdTGlo7t4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNhYWNkMTctYmY5ZC00N2RiLTg2NGQtZjljN2MyYmUx
ODNhLzAvMjJCRkQ0RTAyMTU0N0QwMzBBQzEwQjAyMTM1MzVENEM2OTY4RUVERS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lyX1U0Q0ZVZlFNS3dRc0NFMU5kVEds
bzd0NC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjNhYWNkMTct
YmY5ZC00N2RiLTg2NGQtZjljN2MyYmUxODNhLzAvMzIzMTM3MmUzMjM1MmUzMTM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM5MzAzNzM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
2RkPMA0GCSqGSIb3DQEBCwUAA4IBAQAK0XfRMTCiYFkLgZgapfTH8wYbobwAJ4UJ
wPvthrMA2tBbRQbhh8yp+FN5qhv+ml5CA3iE+qwiat3XtVUlesb3Li406gm334JE
8yKHmYOO8HdEYH3Eue1mDsv5fIe16u14LmH3NpNiwlK0/wbazu0lzmny6kUGvL7Z
0UbEbW42KFE4DAfcZI9CpQDP3Ru9g7KQFBwtv7aqooZZQOI+OohGaE/93JsjO8Va
AbE2McuhUPLU4ZXhCAPqqhfaQRkk89gJQZC8/IIZlxIItsHQiw7nYiTs/2byBLZj
jyFVnI5R10IzTbUXWFhj8msaCTDswan9P+/2HPE7yPBwvLWFmZnJ
-----END CERTIFICATE-----
Generated at Thu Oct 29 16:43:42 2026 by rpki-client