Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e372e302f32342d3234203d3e20383334.roa
File: 3231372e32352e372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: E7YJ5DTD2yRF0BHGNuEBNEYqAZ0elyP0EYfo+7qxNLU=
Subject key identifier: 8C:A5:93:BF:3B:2C:65:62:57:BF:80:2E:DE:32:03:44:59:78:FE:10
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 7B7389B1B9A11B0AFCC15E1488214A6B88E86F18
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e372e302f32342d3234203d3e20383334.roa
Signing time: Fri 17 Jul 2026 06:15:40 +0000
ROA not before: Fri 17 Jul 2026 06:10:40 +0000
ROA not after: Fri 16 Jul 2027 06:15:40 +0000
asID: 834
IP address blocks: 217.25.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 02:49:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:73:89:b1:b9:a1:1b:0a:fc:c1:5e:14:88:21:4a:6b:88:e8:6f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Jul 17 06:10:40 2026 GMT
Not After : Jul 16 06:15:40 2027 GMT
Subject: CN=8CA593BF3B2C656257BF802EDE3203445978FE10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:52:dc:59:bc:73:67:e3:1f:54:ff:14:8b:67:
84:f0:d9:9a:10:cf:33:ca:bd:0a:92:62:a6:ff:34:
73:f0:6a:88:b2:95:d3:1b:4f:07:77:c4:9c:85:ae:
99:c4:0e:a5:77:b6:4c:bf:73:69:76:9e:5b:15:1e:
85:ea:39:41:30:e4:99:28:a6:76:31:2d:df:24:b9:
33:84:97:59:d6:5b:63:e6:37:43:1e:05:d7:e3:0b:
47:0f:db:e8:15:8f:ec:c2:dc:29:c5:06:c6:04:96:
71:00:77:40:74:a2:e4:ab:ad:a4:9e:1e:1f:c1:4f:
05:9e:ce:71:6f:1b:8d:6b:40:d3:ab:3b:7b:a2:63:
de:4a:01:65:8c:fd:a5:78:38:e1:90:8f:35:90:23:
b1:be:e7:8a:08:6e:f9:77:c9:e2:51:7a:6d:7a:4a:
61:d1:f3:bf:fb:47:6e:fd:fa:a6:5f:4e:bb:7d:21:
aa:11:f2:e0:ac:05:d4:ff:fa:46:45:ef:1b:1b:15:
ab:38:7c:dc:41:66:46:44:59:91:b6:81:fc:ee:4f:
e9:84:84:e4:ef:b6:b1:59:49:ef:7b:60:20:88:a4:
d2:cb:7b:37:02:06:ea:87:ca:8d:ad:c0:55:a3:4a:
97:7c:ae:fa:c1:9a:4f:5f:67:4e:b7:7b:9d:70:9a:
a4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A5:93:BF:3B:2C:65:62:57:BF:80:2E:DE:32:03:44:59:78:FE:10
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.7.0/24
Signature Algorithm: sha256WithRSAEncryption
72:94:71:88:75:02:82:ea:bb:c5:20:e7:04:43:ef:6a:b1:11:
fc:d2:94:95:e0:4d:9f:2d:46:22:17:b0:dc:02:10:43:1b:a9:
dd:6d:a6:f0:1c:d2:66:4a:af:ca:31:86:f7:3f:87:3e:d0:a7:
b7:88:ff:3b:0e:3c:aa:4a:b7:77:37:70:c6:13:94:cc:07:79:
6d:d5:d8:f2:9c:1b:77:42:2a:d3:04:58:63:9e:db:c4:41:79:
46:63:d2:9a:e8:f7:8b:53:4b:5a:77:41:32:00:6b:58:bf:52:
22:5e:82:38:0b:1f:d8:9f:fe:de:7a:84:91:5b:0f:16:77:54:
57:18:bb:b3:1e:26:43:06:34:53:21:e5:ac:c2:b1:81:84:7d:
16:7e:13:a8:fe:ab:d9:8d:e2:64:96:d5:ac:6e:6c:2f:bd:11:
86:0a:8b:0b:20:37:7c:90:65:65:8b:6c:4d:af:95:99:ac:bb:
b4:ec:74:50:00:93:fd:29:61:ae:0d:40:8e:2a:80:6a:ec:6e:
b8:c1:2e:bd:e1:2c:11:d7:56:c4:fb:9f:15:ae:8a:f1:32:1f:
0a:b3:f5:6f:40:13:41:41:c7:10:a4:34:f9:1e:9d:ac:66:67:
57:a0:06:3d:02:e6:0a:75:a4:4a:b7:79:90:46:cf:2c:08:a0:
90:f2:12:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:20:23 2026 by rpki-client