Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e312e302f32342d3234203d3e203239383032.roa
File: 3231372e32352e312e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: gVMFsL1+w+J00kOn7BuEjBsUXi6YaE8/Mve6X6O6dFo=
Subject key identifier: 3D:D9:21:03:04:1A:8C:18:C3:9D:0D:34:63:8E:29:F3:BA:E5:59:43
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 333DFEAA105C6940360BC71228965C5A589B3C92
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e312e302f32342d3234203d3e203239383032.roa
Signing time: Mon 02 Mar 2026 11:38:37 +0000
ROA not before: Mon 02 Mar 2026 11:33:37 +0000
ROA not after: Mon 01 Mar 2027 11:38:37 +0000
asID: 29802
IP address blocks: 217.25.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:3d:fe:aa:10:5c:69:40:36:0b:c7:12:28:96:5c:5a:58:9b:3c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Mar 2 11:33:37 2026 GMT
Not After : Mar 1 11:38:37 2027 GMT
Subject: CN=3DD92103041A8C18C39D0D34638E29F3BAE55943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:aa:92:ea:38:2a:b2:48:cd:2c:bf:cc:48:d4:
0a:e5:9e:05:26:a8:61:a4:07:9b:15:0d:32:be:60:
05:f5:e3:c9:f1:ea:54:0d:f1:60:41:4f:1a:d0:5e:
0b:5b:8c:77:ca:3c:04:9f:21:5e:a4:3d:5d:e1:ec:
73:10:d1:5a:44:b7:54:44:ed:4a:5a:29:09:c1:c4:
67:92:3c:82:47:5f:d9:df:49:f6:72:87:0d:3c:46:
fe:8e:f0:78:fd:f8:15:c1:a2:99:b5:39:e6:3c:19:
3d:99:61:6d:22:16:0b:e0:60:bd:da:b3:4f:6e:7b:
2b:9a:12:1b:33:3a:25:0d:9c:bd:b7:6f:e7:51:dc:
8a:50:8a:a0:35:e4:df:66:bb:80:02:e3:e0:98:18:
bc:47:57:e4:97:c9:17:07:58:eb:6e:b4:53:e3:db:
04:7f:19:c6:f6:e1:63:7e:7c:e8:b4:28:c1:b5:33:
26:a7:9d:c9:d1:b2:87:40:ed:d1:cf:4a:4d:fe:77:
94:03:f2:28:99:16:c8:c8:4b:18:e3:08:c9:e4:ec:
86:5d:ce:6e:ad:7c:95:d4:70:fb:61:f2:7f:d8:6f:
74:21:48:36:e4:28:bd:16:ce:ef:62:39:2b:41:04:
a4:ad:81:12:e9:bb:2b:5f:93:b5:51:92:d4:21:74:
9f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D9:21:03:04:1A:8C:18:C3:9D:0D:34:63:8E:29:F3:BA:E5:59:43
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e312e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.1.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:52:72:55:b0:53:12:1e:8d:9e:6d:f5:e4:f1:7a:65:39:bf:
ca:cd:fa:cb:61:da:aa:91:a4:54:5b:e0:f6:26:14:f4:aa:3b:
09:27:12:26:13:17:31:56:95:55:7a:80:83:0c:99:eb:d5:33:
ff:a8:50:66:6e:ff:78:a8:4e:25:c0:28:ee:da:96:58:bc:4d:
01:07:19:f3:18:31:87:12:e1:f7:e7:03:7f:36:9e:1c:a0:54:
4f:e8:0d:df:87:e7:aa:91:bc:f9:11:13:cb:b7:4f:04:f1:4b:
15:a4:31:e4:4c:39:2f:ca:c4:c2:cb:e2:22:52:31:70:9c:52:
9d:a8:0b:6a:78:bd:e2:3b:15:41:16:d3:98:36:89:9c:48:88:
a8:3b:ec:ac:7c:d9:ca:5e:f5:dc:5f:f4:5a:6e:99:b7:41:99:
7c:fe:f7:f2:2b:df:de:b7:0a:22:d0:aa:84:c8:94:6a:05:c8:
ca:de:ca:44:26:14:62:6f:39:b4:39:09:65:85:ff:e0:95:02:
79:8e:d5:4f:00:18:49:50:ee:8b:49:93:81:89:77:c4:c8:c8:
8d:05:9e:b2:02:e6:bb:9e:fd:16:a4:80:ab:4b:80:a0:7e:81:
32:d0:c4:84:d0:1e:eb:87:66:4b:8a:f8:25:f7:ec:77:d3:a2:
bb:56:99:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:32:41 2026 by rpki-client