Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31342e302f32342d3234203d3e20323139303735.roa
File: 3231372e32352e31342e302f32342d3234203d3e20323139303735.roa (raw, json)
Hash identifier: PRHelZeaYB0AdVnwbP3lCCm6w0hExVgIIITX5Ej+gHM=
Subject key identifier: 03:AA:2B:E2:E0:A0:51:DE:19:F9:5F:BB:1D:15:D4:85:C7:B1:79:1E
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 6F80FE7C505B7AE8BA55C58599F839A26AB49370
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31342e302f32342d3234203d3e20323139303735.roa
Signing time: Sat 10 Oct 2026 02:53:50 +0000
ROA not before: Sat 10 Oct 2026 02:48:50 +0000
ROA not after: Sat 09 Oct 2027 02:53:50 +0000
asID: 219075
IP address blocks: 217.25.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 15:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:80:fe:7c:50:5b:7a:e8:ba:55:c5:85:99:f8:39:a2:6a:b4:93:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Oct 10 02:48:50 2026 GMT
Not After : Oct 9 02:53:50 2027 GMT
Subject: CN=03AA2BE2E0A051DE19F95FBB1D15D485C7B1791E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:32:83:fe:d0:bc:5f:70:15:7a:a0:e9:fd:5e:
05:8f:47:28:6a:1b:64:a2:06:03:c9:51:82:30:28:
02:45:8d:96:ad:d2:b1:45:47:67:53:cf:cb:59:3e:
8e:fe:19:a0:55:7c:1f:dc:07:d5:e8:78:89:db:12:
64:aa:7d:1a:7a:77:17:9f:68:29:ec:b9:72:04:7d:
e3:db:32:da:43:4f:76:c5:0e:6e:e0:cf:41:67:f5:
14:bd:b0:b1:c3:46:fe:51:f5:be:c5:77:e5:d8:f7:
4d:8b:ea:55:5e:9e:e0:46:13:93:c3:36:40:7d:cc:
fd:b5:27:fa:f8:e7:0f:78:b7:73:75:79:d7:51:04:
16:7c:e6:d6:cd:57:e3:f8:bf:2f:85:7a:60:f0:86:
89:1a:23:60:ee:3f:43:d8:79:78:3d:e6:78:3f:a0:
6d:b7:c2:73:59:90:32:c6:cd:14:11:ab:52:7e:a7:
8b:1b:04:52:39:d1:89:f4:95:e5:dd:39:5b:ee:a2:
df:46:d6:74:9b:13:14:82:96:f0:8a:5b:47:c8:87:
bd:0c:08:85:de:30:e9:f7:0b:d8:05:3a:71:c7:45:
48:95:3d:d9:e0:6d:df:45:5f:ba:2c:37:59:50:33:
41:5f:46:58:29:f1:bf:d2:b9:b5:e5:19:07:ac:fe:
77:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AA:2B:E2:E0:A0:51:DE:19:F9:5F:BB:1D:15:D4:85:C7:B1:79:1E
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31342e302f32342d3234203d3e20323139303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.14.0/24
Signature Algorithm: sha256WithRSAEncryption
65:0f:88:4f:d3:d7:2e:44:0f:28:92:73:82:d1:b7:bc:f2:e5:
68:17:aa:57:8e:41:2b:7f:8a:0b:55:9a:ec:92:bd:a9:ca:68:
51:54:69:b2:d5:08:0d:d8:c7:c2:3c:d3:65:dc:57:c1:29:ee:
45:40:33:21:d9:5d:bf:e4:07:08:4f:b5:34:e4:f3:e7:33:fd:
79:4d:94:64:69:6b:5f:2b:d8:aa:c0:d9:c9:9f:b3:b1:4a:bc:
1c:55:65:c8:2f:d4:65:88:cf:f7:82:5b:df:3c:83:86:1a:8c:
67:dc:fd:df:b6:fc:b2:f6:c9:17:63:01:26:1e:97:5c:a3:48:
dd:5e:92:31:43:b4:c7:6b:08:0c:1e:bc:1b:7b:1f:07:e8:e3:
92:dd:ef:6b:bb:e1:18:52:86:4c:d1:3b:a9:a5:06:22:15:90:
06:f8:53:2a:58:53:17:9d:50:42:e7:28:69:d5:83:38:d6:db:
e5:84:18:b8:67:11:81:ad:9f:d8:49:8e:22:b5:79:63:40:24:
a9:b4:f8:ab:37:22:b0:69:d1:2a:3f:dc:8c:ae:67:2c:bd:74:
82:d1:58:0e:50:16:52:e0:0d:03:d0:79:d5:b8:41:28:fd:c4:
ef:fb:1b:9e:6d:69:de:fd:a8:2b:ab:4d:45:e9:50:29:f2:4d:
8b:1b:ff:4b
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUb4D+fFBbeui6VcWFmfg5omq0k3AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJiZmQ0ZTAyMTU0N2QwMzBhYzEwYjAyMTM1MzVkNGM2
OTY4ZWVkZTAeFw0yNjEwMTAwMjQ4NTBaFw0yNzEwMDkwMjUzNTBaMDMxMTAvBgNV
BAMTKDAzQUEyQkUyRTBBMDUxREUxOUY5NUZCQjFEMTVENDg1QzdCMTc5MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1MoP+0LxfcBV6oOn9XgWPRyhq
G2SiBgPJUYIwKAJFjZat0rFFR2dTz8tZPo7+GaBVfB/cB9XoeInbEmSqfRp6dxef
aCnsuXIEfePbMtpDT3bFDm7gz0Fn9RS9sLHDRv5R9b7Fd+XY902L6lVenuBGE5PD
NkB9zP21J/r45w94t3N1eddRBBZ85tbNV+P4vy+FemDwhokaI2DuP0PYeXg95ng/
oG23wnNZkDLGzRQRq1J+p4sbBFI50Yn0leXdOVvuot9G1nSbExSClvCKW0fIh70M
CIXeMOn3C9gFOnHHRUiVPdngbd9FX7osN1lQM0FfRlgp8b/SubXlGQes/nd5AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUA6or4uCgUd4Z+V+7HRXUhcexeR4wHwYDVR0j
BBgwFoAUIr/U4CFUfQMKwQsCE1NdTGlo7t4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNhYWNkMTctYmY5ZC00N2RiLTg2NGQtZjljN2MyYmUx
ODNhLzAvMjJCRkQ0RTAyMTU0N0QwMzBBQzEwQjAyMTM1MzVENEM2OTY4RUVERS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lyX1U0Q0ZVZlFNS3dRc0NFMU5kVEds
bzd0NC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjNhYWNkMTct
YmY5ZC00N2RiLTg2NGQtZjljN2MyYmUxODNhLzAvMzIzMTM3MmUzMjM1MmUzMTM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM5MzAzNzM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
2RkOMA0GCSqGSIb3DQEBCwUAA4IBAQBlD4hP09cuRA8oknOC0be88uVoF6pXjkEr
f4oLVZrskr2pymhRVGmy1QgN2MfCPNNl3FfBKe5FQDMh2V2/5AcIT7U05PPnM/15
TZRkaWtfK9iqwNnJn7OxSrwcVWXIL9RliM/3glvfPIOGGoxn3P3ftvyy9skXYwEm
Hpdco0jdXpIxQ7THawgMHrwbex8H6OOS3e9ru+EYUoZM0TuppQYiFZAG+FMqWFMX
nVBC5yhp1YM41tvlhBi4ZxGBrZ/YSY4itXljQCSptPirNyKwadEqP9yMrmcsvXSC
0VgOUBZS4A0D0HnVuEEo/cTv+xuebWne/agrq01F6VAp8k2LG/9L
-----END CERTIFICATE-----
Generated at Wed Oct 14 06:49:10 2026 by rpki-client