Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31332e302f32342d3234203d3e20313939313836.roa
File: 3231372e32352e31332e302f32342d3234203d3e20313939313836.roa (raw, json)
Hash identifier: BDZh1Pi8rbZh6nir2QxJGP9zEek0IBLtx5Db2CdXo48=
Subject key identifier: 84:A6:65:2E:ED:0D:1B:C8:6E:E5:A3:66:43:BB:04:1A:D8:B8:DA:3D
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 628B14FD26C8153501F430C74321A0A4949F5557
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31332e302f32342d3234203d3e20313939313836.roa
Signing time: Sun 24 May 2026 09:09:49 +0000
ROA not before: Sun 24 May 2026 09:04:49 +0000
ROA not after: Sun 23 May 2027 09:09:49 +0000
asID: 199186
IP address blocks: 217.25.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 20:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:8b:14:fd:26:c8:15:35:01:f4:30:c7:43:21:a0:a4:94:9f:55:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: May 24 09:04:49 2026 GMT
Not After : May 23 09:09:49 2027 GMT
Subject: CN=84A6652EED0D1BC86EE5A36643BB041AD8B8DA3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:28:b0:2e:a1:fe:dd:c9:a8:6e:61:8d:17:05:
f2:cd:d1:5c:3d:3f:8a:f8:11:2e:bd:7c:22:65:e5:
53:cf:f7:14:8d:98:f7:f3:7d:c9:f2:0d:2a:88:a6:
ad:77:28:b7:7d:ae:49:11:70:68:e3:c9:4d:56:54:
60:5e:87:a8:25:82:16:98:d7:f9:67:18:75:b5:23:
d5:f5:7b:80:f3:de:9e:a4:e7:79:a2:6a:fe:9b:b5:
72:bc:17:af:07:ab:7b:08:9a:73:e0:49:a3:1d:df:
29:2c:4f:cd:af:f2:03:fb:d1:56:57:98:a0:2d:88:
12:cd:77:05:89:14:65:88:7f:14:b7:d2:55:4f:48:
d4:08:62:d8:0d:ae:2b:ae:44:c4:23:89:f6:f7:42:
4f:37:de:0b:2b:c9:5f:23:78:4a:c0:3b:91:4a:e6:
9f:a5:c7:77:b0:f6:20:01:71:62:6a:71:f3:cc:ed:
29:c1:4d:47:6f:2b:64:21:68:60:43:94:d8:ce:cc:
bd:93:26:28:df:43:35:5a:55:15:89:2e:9b:5a:d0:
26:c1:e7:82:56:9c:a6:c1:e3:e8:18:e1:fe:bf:07:
cc:ff:43:3f:b8:dc:0e:41:05:f0:ec:4f:b6:5f:da:
e7:1e:e4:41:f1:99:ca:50:b8:fd:8f:c7:51:21:31:
ea:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A6:65:2E:ED:0D:1B:C8:6E:E5:A3:66:43:BB:04:1A:D8:B8:DA:3D
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31332e302f32342d3234203d3e20313939313836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.13.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:a9:60:05:04:df:80:6d:91:2f:ed:fa:eb:9a:50:f7:92:f0:
a2:5b:f7:e0:20:e6:9e:a6:39:17:d8:c7:21:45:71:30:e7:13:
d7:ec:6d:6e:21:33:8b:c3:d2:5c:d8:b5:00:88:4a:63:69:06:
fb:f7:e0:e2:4b:4b:1a:7e:0d:3b:66:0e:33:35:5a:bf:9a:a8:
64:0c:8e:3c:c5:ee:e2:aa:72:1d:df:3c:77:8b:94:9b:6e:a6:
5a:91:00:25:d4:1a:08:83:97:86:36:a7:9d:1f:4b:f7:c0:9f:
cc:ff:a4:5c:c5:2f:cd:3c:95:88:ad:28:77:d5:94:99:2e:68:
25:d4:84:11:39:5e:77:0e:9c:53:6f:ce:b4:dc:15:61:43:42:
79:79:94:7f:88:a3:a1:10:8e:45:5f:89:df:52:6f:af:7a:34:
50:bc:ee:54:62:a1:50:b2:fe:71:48:97:6f:b2:06:0d:10:f6:
16:6f:41:e5:05:7d:12:99:20:0a:d5:88:67:67:78:2b:48:7d:
02:85:96:08:ee:20:de:d1:d1:11:80:1b:75:03:3f:64:d2:bb:
00:85:e7:a1:c2:8a:78:29:73:aa:7a:93:d0:be:fc:3a:0a:5c:
a1:2f:17:b7:a5:95:2b:0e:09:03:b7:80:0b:3b:9a:b3:2d:5c:
42:f4:10:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:00:18 2026 by rpki-client