Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31332e302f32342d3234203d3e203133333335.roa
File: 3231372e32352e31332e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier: io4UFoc1YGnqjZfuSBnWpQH/OPOtN9A1OFdVrMznZWc=
Subject key identifier: 1C:B1:A0:D2:C0:19:F1:70:DF:1E:61:F8:E9:A0:32:F6:5F:61:4E:AB
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 230D503C158D8606606AB087349C41EE50BCBF8C
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31332e302f32342d3234203d3e203133333335.roa
Signing time: Fri 28 Aug 2026 07:54:20 +0000
ROA not before: Fri 28 Aug 2026 07:49:20 +0000
ROA not after: Fri 27 Aug 2027 07:54:20 +0000
asID: 13335
IP address blocks: 217.25.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:06:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:0d:50:3c:15:8d:86:06:60:6a:b0:87:34:9c:41:ee:50:bc:bf:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Aug 28 07:49:20 2026 GMT
Not After : Aug 27 07:54:20 2027 GMT
Subject: CN=1CB1A0D2C019F170DF1E61F8E9A032F65F614EAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bb:cc:20:e5:c0:0f:b5:71:bd:fd:e6:15:f6:
1f:ed:6e:d9:87:ae:cb:6a:00:67:0b:da:02:06:41:
58:8c:72:a9:15:1a:d3:db:30:81:f7:00:dd:ef:fb:
20:20:e7:87:41:5a:ee:e0:fe:e0:6d:7c:23:ba:1c:
39:bc:3a:51:d1:ca:ad:ff:1e:09:ff:27:54:34:4b:
55:7e:33:b8:42:ff:74:ca:3c:80:6e:43:7c:16:c5:
a1:a9:9e:f3:e9:b7:67:9e:0a:85:9c:3b:62:90:c9:
65:53:b1:45:b7:c6:b0:0b:16:a8:6c:0e:05:e5:bb:
09:c3:02:62:11:d8:b5:f9:fa:d1:1e:a5:46:23:5c:
90:9f:2b:8f:49:d9:c0:01:e8:88:03:bd:90:50:fc:
a7:52:0b:42:3e:3f:42:ef:28:50:9e:b6:69:b1:69:
ec:8a:ca:1b:0c:29:d6:c4:39:d3:74:9e:fc:11:7b:
9f:35:34:f8:47:46:b1:94:e0:dd:7a:92:47:fb:34:
73:7b:72:d3:a2:86:d9:ba:0a:4b:b2:88:b2:98:75:
7d:4a:88:f1:ae:f0:76:d9:5d:96:ba:1f:4b:6a:78:
4c:91:99:d3:41:1e:8b:03:26:ec:33:05:98:e5:2b:
3c:df:af:37:41:a4:08:14:a6:44:bc:63:62:58:ef:
e5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B1:A0:D2:C0:19:F1:70:DF:1E:61:F8:E9:A0:32:F6:5F:61:4E:AB
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31332e302f32342d3234203d3e203133333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.13.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:36:f4:8b:b2:de:3b:90:76:0a:3c:37:e3:8c:ee:b4:75:8a:
5f:23:ee:56:2f:1b:f8:fa:08:52:74:de:2f:2d:2f:59:b7:ad:
6b:ef:a6:75:fb:f6:c0:c4:09:06:2c:75:1b:9e:81:48:5f:f1:
ed:90:9a:1e:fc:f3:d5:56:f0:55:3d:85:57:5b:29:45:02:49:
1e:28:f7:4a:1f:fd:1d:27:b4:54:20:a1:c4:c5:27:f1:60:b6:
2a:07:05:6e:c1:02:f3:c8:6a:ad:0f:29:2b:3f:92:2f:c7:c9:
7e:32:66:c8:2c:b1:26:ee:ea:28:d8:03:cf:8f:ed:79:b8:fc:
e2:b5:aa:58:68:97:b9:d9:f0:36:be:90:95:2a:e6:40:85:c2:
16:be:ce:b7:fd:f3:92:e2:ca:9e:f4:c5:04:a7:df:07:67:e5:
c6:90:42:ba:f7:72:aa:79:c4:08:cb:ec:3a:ab:64:3d:3a:b7:
9f:6c:e9:48:4b:de:1e:3d:73:27:4a:3a:58:0f:fa:e6:67:0b:
b5:fa:d6:11:60:47:9a:ec:4f:8a:ae:df:51:9b:eb:41:b6:52:
39:61:9c:08:4b:a5:b8:49:f4:4b:09:96:c5:e2:3e:4c:14:18:
6e:bd:50:17:fd:4d:f0:f7:58:19:03:4d:f9:a1:14:b1:ca:85:
89:70:70:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:45 2026 by rpki-client