Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e322e302f32342d3234203d3e20313337313738.roa
File: 3231372e32352e322e302f32342d3234203d3e20313337313738.roa (raw, json)
Hash identifier: U00AwvGQuiC9d8eQqZLrEGpku+90mUPwp8I3u+18jK8=
Subject key identifier: E2:1D:C6:2E:26:B5:78:D9:42:BC:1C:6F:F4:BC:B4:FB:8F:CA:E9:FF
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 04F4CD06E75E174B72E97427E30FBAF102B79E20
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e322e302f32342d3234203d3e20313337313738.roa
Signing time: Mon 22 Jun 2026 09:42:45 +0000
ROA not before: Mon 22 Jun 2026 09:37:45 +0000
ROA not after: Mon 21 Jun 2027 09:42:45 +0000
asID: 137178
IP address blocks: 217.25.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:f4:cd:06:e7:5e:17:4b:72:e9:74:27:e3:0f:ba:f1:02:b7:9e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Jun 22 09:37:45 2026 GMT
Not After : Jun 21 09:42:45 2027 GMT
Subject: CN=E21DC62E26B578D942BC1C6FF4BCB4FB8FCAE9FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4a:39:40:b9:e9:a8:7d:89:3b:39:bd:3b:28:
fe:bf:f5:32:38:e3:66:fb:02:5a:4a:df:2c:2c:01:
03:ce:12:01:9b:b1:06:b6:22:97:1d:f6:8c:22:59:
f9:6e:1e:06:33:02:74:40:f2:94:5a:52:c6:1e:70:
2b:0b:69:1c:9b:e6:b0:23:c6:dd:a8:17:79:ea:63:
0d:b6:97:29:65:40:23:c8:50:ab:d2:d8:4b:d8:96:
91:8c:36:29:c8:88:ea:51:82:be:5d:62:fd:e7:c0:
cc:88:4a:55:73:ec:f3:2a:88:13:93:e1:06:b7:52:
e0:8b:18:fe:2c:bb:4d:e9:fb:9e:22:d9:3f:e2:1a:
65:f6:86:c2:cf:f5:27:6d:af:b0:42:e9:c2:3e:7f:
9f:b1:93:1b:74:6f:52:e2:60:ad:9f:3c:bc:fa:de:
27:8c:41:8d:15:a5:f5:07:ce:7f:fe:7b:4b:b5:d0:
88:49:2b:6a:b2:40:c5:89:bd:4e:96:91:e2:57:fd:
a9:93:89:02:14:30:08:8f:5c:00:3e:e5:5f:66:02:
4f:d7:fb:41:22:ca:7b:c3:65:82:2a:84:b1:f4:c2:
be:26:bc:cd:fa:3a:59:dd:84:00:1d:cc:3e:6d:c3:
57:00:ef:38:50:f7:59:47:99:da:ef:bb:41:b2:5c:
45:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1D:C6:2E:26:B5:78:D9:42:BC:1C:6F:F4:BC:B4:FB:8F:CA:E9:FF
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e322e302f32342d3234203d3e20313337313738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.2.0/24
Signature Algorithm: sha256WithRSAEncryption
21:db:c4:b5:38:12:1b:5d:fc:2e:f3:89:bf:f4:4f:4f:6e:b9:
28:bb:41:fd:e6:5e:f7:ab:a9:86:4f:fd:a2:2d:60:d3:6d:4e:
34:c2:fb:cb:e7:c6:92:3d:63:2d:22:d0:5c:d7:d5:ef:86:79:
28:16:41:fe:3c:d2:a0:8b:c0:0d:15:a3:65:00:4f:8d:21:6e:
b9:a3:9b:54:21:b6:02:09:f1:65:df:32:bc:bb:14:e8:c0:40:
ea:a1:23:a4:e4:0f:64:36:1d:25:dd:b9:67:02:e3:0f:f3:70:
ea:d2:2a:86:d5:47:99:d1:07:68:53:e1:94:6a:23:73:c6:cf:
86:d5:42:60:f5:9d:a7:2a:17:b2:1c:5e:80:07:7e:c1:e2:ad:
d8:f6:8b:1e:45:34:3e:38:ba:b6:bc:5f:d0:05:00:59:af:9c:
a2:59:cb:c4:9d:12:88:33:3f:23:63:00:0b:68:20:74:fa:5d:
7e:14:51:0a:f8:33:17:ef:7a:bb:da:e2:ec:b3:5f:3f:f1:25:
8c:02:ff:e9:3d:fd:73:52:3f:5a:75:7f:b9:8c:2d:e7:5c:8b:
7e:a9:a8:21:2f:17:56:48:18:bc:37:49:ec:55:39:ac:4b:a1:
dd:01:5b:46:c3:bb:0d:94:a2:3d:32:68:94:89:5c:62:42:3b:
6f:53:13:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:44:02 2026 by rpki-client