Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31352e302f32342d3234203d3e20323138393131.roa
File: 3231372e32352e31352e302f32342d3234203d3e20323138393131.roa (raw, json)
Hash identifier: wfvFmo8lCxQv3pQXDUXC+GbDCaW6aNhuY3C5NbrP9WA=
Subject key identifier: 0B:79:42:E1:D9:72:24:CF:59:27:92:47:72:BB:DC:34:E3:58:F9:28
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 0B5D78DEBD26018E7C19D16238D4BAC4E1955B77
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31352e302f32342d3234203d3e20323138393131.roa
Signing time: Tue 20 Oct 2026 12:12:03 +0000
ROA not before: Tue 20 Oct 2026 12:07:03 +0000
ROA not after: Tue 19 Oct 2027 12:12:03 +0000
asID: 218911
IP address blocks: 217.25.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:5d:78:de:bd:26:01:8e:7c:19:d1:62:38:d4:ba:c4:e1:95:5b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Oct 20 12:07:03 2026 GMT
Not After : Oct 19 12:12:03 2027 GMT
Subject: CN=0B7942E1D97224CF5927924772BBDC34E358F928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d0:41:11:8f:f1:92:90:10:e0:f4:90:63:a7:
8e:d4:9c:76:c8:99:b2:95:2e:d7:f6:a3:d0:8e:6f:
e6:c5:0a:ca:a3:64:b5:f7:23:c3:f5:44:b6:6e:58:
f7:a4:9c:eb:ab:46:df:3f:a6:ad:26:ed:7d:b9:37:
9e:9a:5e:c1:d0:ba:ad:57:00:a3:fd:a6:7b:18:cb:
98:3c:ba:81:d5:cc:6f:c8:e0:6c:64:cb:43:8e:da:
ad:2c:5c:59:ca:62:31:64:74:e4:7a:f7:4e:05:85:
2c:0c:69:21:9a:0f:4b:dc:1a:63:21:83:5a:c0:7e:
26:a8:96:6b:2c:c9:fe:5e:79:d9:76:33:7a:53:ae:
8b:04:da:80:bc:73:3e:47:c2:fe:a9:d5:57:9d:dc:
ea:43:b0:aa:7f:2a:3e:75:d7:4a:71:d4:97:00:a6:
ad:e0:5b:b0:56:bc:0b:29:e6:66:42:c1:38:02:ae:
b3:07:ef:98:cb:5a:78:28:61:16:36:da:07:b7:80:
01:22:23:44:47:45:2c:b4:59:24:d6:33:98:c0:dc:
31:57:e6:6a:a8:5f:14:a9:57:9a:8b:dd:42:25:ed:
e7:e3:2e:fd:b9:a5:2b:b9:f6:ef:ac:76:38:56:cd:
33:66:ff:dc:67:6a:95:10:1b:ad:40:ba:da:76:1d:
a4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:79:42:E1:D9:72:24:CF:59:27:92:47:72:BB:DC:34:E3:58:F9:28
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31352e302f32342d3234203d3e20323138393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.15.0/24
Signature Algorithm: sha256WithRSAEncryption
01:98:7b:ac:61:be:e0:4c:dd:c3:5d:f1:cf:e1:4f:30:ab:98:
f8:70:8c:2e:82:44:ba:ab:09:9c:01:d5:5d:54:47:f2:5f:57:
f9:db:af:3e:c9:4b:69:54:c6:8f:ec:a0:d6:2f:7f:0f:aa:59:
96:5c:b4:65:f3:90:8a:a9:c9:14:f6:61:cc:a1:c5:02:1f:47:
49:c7:12:30:db:5c:8f:5f:7b:73:93:d5:d0:35:a3:f9:e3:f3:
57:f6:9c:7a:4c:95:79:ed:11:53:3c:22:f7:5d:1c:11:c2:19:
ac:9f:f5:2f:4d:bb:d9:e3:3f:c0:45:50:a4:1a:58:c0:94:f2:
00:5c:d6:e8:71:9a:71:e3:37:11:d3:cc:e0:40:d6:40:8b:51:
4d:7d:ac:e4:91:3c:d4:b8:36:52:fb:70:91:3b:5d:ed:fe:0e:
52:6f:61:93:38:31:49:7d:56:e9:c9:6f:31:b1:b1:02:31:52:
74:3d:60:23:2c:f1:cf:ec:5d:b1:ea:ae:d5:00:91:d9:c0:b3:
65:55:5b:1e:92:ed:5b:9d:e2:df:22:c4:49:04:0b:93:59:0f:
56:00:93:fa:68:bc:bd:04:ce:fe:76:cb:71:44:78:05:8e:ad:
ee:dd:b1:6c:29:84:b2:a4:85:65:dd:32:6b:42:c4:1c:bf:bf:
14:3f:ff:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:16:45 2026 by rpki-client