Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e312e302f32342d3234203d3e20343032323635.roa
File: 3231372e32352e312e302f32342d3234203d3e20343032323635.roa (raw, json)
Hash identifier: VANfTBfZigI792G4QZ62stYln+FE6haw31ZdE6HIoqY=
Subject key identifier: A3:2B:5A:29:3D:2F:C9:17:34:9F:65:57:6A:C4:54:6F:73:6B:12:87
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 280E14B00F875604E9D06DD721F0F8427B74900D
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e312e302f32342d3234203d3e20343032323635.roa
Signing time: Fri 04 Sep 2026 06:03:57 +0000
ROA not before: Fri 04 Sep 2026 05:58:57 +0000
ROA not after: Fri 03 Sep 2027 06:03:57 +0000
asID: 402265
IP address blocks: 217.25.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 23:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:0e:14:b0:0f:87:56:04:e9:d0:6d:d7:21:f0:f8:42:7b:74:90:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Sep 4 05:58:57 2026 GMT
Not After : Sep 3 06:03:57 2027 GMT
Subject: CN=A32B5A293D2FC917349F65576AC4546F736B1287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f0:e5:59:c6:b6:5c:a9:51:96:a1:6b:ba:65:
d9:ad:d4:a6:96:a5:fb:c1:2f:f1:0c:b8:a8:20:5e:
ae:aa:8a:fa:ca:e6:c6:0d:c0:ef:df:db:71:e0:04:
8c:7e:6e:68:55:28:76:f0:3d:7f:4a:f8:f2:34:06:
bc:7b:de:b5:8f:7c:00:24:a6:36:c1:fd:59:6f:6c:
9b:fe:6e:e4:1d:4c:96:7a:bd:d7:9c:3e:fc:60:5c:
b5:62:aa:53:74:ce:b1:73:f8:76:bb:51:08:e0:21:
8a:35:2d:38:11:86:e1:56:0f:1d:c5:f8:aa:b3:4d:
2a:09:c4:0b:30:38:84:b5:41:77:71:12:d9:42:f1:
20:19:91:c8:9a:67:dd:fd:ac:eb:28:1c:68:4e:82:
4b:1b:e5:4b:76:72:2e:cd:c4:c0:9c:95:30:42:b3:
1b:98:d6:a1:d8:95:5a:e1:f9:f6:2b:18:09:53:12:
b6:ae:6f:91:0c:c5:f8:8a:08:03:2f:3e:3c:af:44:
d4:59:19:cd:d5:71:09:0a:94:b9:fe:f8:9c:63:fc:
52:9e:ae:15:fd:a7:cd:56:fd:4f:02:22:4f:cc:45:
fb:69:ec:59:a7:e2:d5:d6:b4:79:66:fd:51:a9:3f:
49:46:d0:db:4e:36:d9:87:c1:43:19:a9:00:c7:97:
da:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2B:5A:29:3D:2F:C9:17:34:9F:65:57:6A:C4:54:6F:73:6B:12:87
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e312e302f32342d3234203d3e20343032323635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.1.0/24
Signature Algorithm: sha256WithRSAEncryption
49:58:9e:e4:82:da:18:46:2e:b1:f2:dc:87:18:b2:19:25:fa:
bb:45:83:9e:45:ad:95:fe:75:22:2a:8f:c2:11:19:f5:b1:f8:
3e:9a:c5:b7:ed:bb:db:92:c8:41:1c:84:fd:75:e6:32:51:e2:
86:ef:a1:e7:77:7e:e2:81:21:03:14:52:b5:fc:36:05:17:af:
2b:a9:bf:cc:9f:4e:dd:ad:ed:6d:62:55:f6:1e:3d:e8:2c:d7:
d7:84:96:3f:7e:8e:dc:5c:b3:0f:d9:02:8a:ea:33:21:9a:9a:
70:e1:c7:c5:01:82:82:46:a6:8d:06:fd:93:7e:ac:3c:08:a0:
0b:dd:51:5a:64:3c:ff:60:11:19:47:62:8c:33:a4:e4:c4:a9:
04:54:60:7a:62:da:9e:3d:65:31:da:42:0c:73:d7:1f:41:5d:
86:89:d4:93:a2:ac:1d:e8:be:23:4e:4a:7e:76:e9:76:66:ee:
7d:9e:a0:49:14:79:68:95:0e:f3:46:23:94:b1:09:05:d9:55:
db:95:45:cc:42:b4:bb:92:7d:30:74:05:aa:2a:29:e8:62:0c:
0f:b2:9e:8f:bd:31:78:da:8d:a6:a8:b2:0c:6a:32:fa:f7:46:
ae:60:42:d5:b3:fd:59:68:d7:49:f4:80:ea:3b:4f:89:bc:ac:
8b:ef:77:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:03:11 2026 by rpki-client