Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e352e302f32342d3234203d3e20313532363036.roa
File: 3231372e32352e352e302f32342d3234203d3e20313532363036.roa (raw, json)
Hash identifier: GTx2ecxjIU1Obn0tq0ZnUe94Y1jEkKYXqzAsor0gkEw=
Subject key identifier: BB:D4:30:75:14:5F:2C:C8:38:86:E0:6C:51:BF:83:E1:EB:49:25:E2
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 4FE84EE37DD392C7D1BF460BC321361D39A1103D
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e352e302f32342d3234203d3e20313532363036.roa
Signing time: Fri 26 Jun 2026 06:43:28 +0000
ROA not before: Fri 26 Jun 2026 06:38:28 +0000
ROA not after: Fri 25 Jun 2027 06:43:28 +0000
asID: 152606
IP address blocks: 217.25.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:e8:4e:e3:7d:d3:92:c7:d1:bf:46:0b:c3:21:36:1d:39:a1:10:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Jun 26 06:38:28 2026 GMT
Not After : Jun 25 06:43:28 2027 GMT
Subject: CN=BBD43075145F2CC83886E06C51BF83E1EB4925E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7b:12:b5:aa:c3:dd:d4:5c:a3:2e:da:ec:69:
5a:b5:da:f7:d3:6c:db:95:be:c3:87:fc:98:1d:c2:
43:b5:58:5e:d6:47:0c:3a:f9:77:51:08:4e:5b:ab:
fe:4f:9a:09:75:59:28:35:a9:99:05:6c:aa:b2:8f:
31:29:be:d6:f7:83:d8:2c:db:5e:1f:e0:8e:49:42:
a1:94:a3:3e:10:05:71:84:ab:0b:a0:2c:42:f0:a2:
46:dd:1b:68:06:c8:54:a4:ed:86:27:bc:80:ea:f5:
90:ef:3f:ec:fa:08:7a:f9:4b:b5:fd:16:7a:b3:2b:
ab:2b:ea:a7:4d:d2:87:5f:dc:ca:e0:92:81:d1:27:
8b:fc:ef:4a:f3:05:ac:80:0d:71:5f:33:3e:ed:5b:
f4:45:cd:b4:04:d3:51:38:f3:6c:55:31:82:17:5b:
e8:d0:5f:35:8d:90:ad:1e:70:d8:b8:8f:39:98:3a:
f8:fb:07:36:a7:ee:2b:2d:ab:68:9b:6a:c5:77:64:
91:7f:1f:9c:ce:52:90:69:2a:a4:2d:5a:52:76:6c:
22:f7:6c:4c:13:37:94:1d:99:a3:bc:d7:e0:fc:16:
f1:56:09:94:54:0c:80:2a:47:0f:29:ae:57:21:3e:
97:18:45:e0:45:8f:5c:58:d3:71:9a:3b:e5:e7:18:
02:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D4:30:75:14:5F:2C:C8:38:86:E0:6C:51:BF:83:E1:EB:49:25:E2
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e352e302f32342d3234203d3e20313532363036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.5.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:26:55:dc:6f:be:1a:a9:e4:39:c8:d5:b6:3f:35:88:f0:2e:
31:77:22:3b:2c:2b:41:61:0f:f7:9d:3e:fb:32:5c:84:1a:a4:
81:14:a6:61:8f:e7:8d:78:b5:c8:7a:2b:fd:f5:22:8f:36:44:
9a:df:74:a6:4b:38:1e:ea:92:7e:02:0d:20:70:ba:00:f9:81:
fc:1d:10:29:49:4b:f9:14:96:e3:c1:c2:98:43:48:59:33:a7:
2c:fb:ad:d2:2f:ab:4a:1a:cd:0c:59:de:59:a4:f9:8c:2b:9c:
fd:b4:8d:c9:a0:db:44:27:a9:c5:fd:e2:3f:c7:37:61:11:75:
15:33:65:ec:f2:6c:d1:3d:29:42:f0:48:c7:2e:3a:13:ef:ac:
77:60:b5:40:f4:fb:4e:a4:02:81:c5:ad:6b:a3:b8:60:76:7f:
fc:36:e8:42:82:db:b4:be:dc:e0:0a:90:08:f7:29:a0:8c:9b:
80:4a:7c:bb:83:3e:29:a9:13:68:32:64:0f:ad:45:30:6b:0d:
11:bb:a1:9d:75:69:9d:29:49:a6:b7:43:a3:15:e5:10:6b:99:
c9:be:93:79:77:35:ff:c1:78:53:cf:54:bc:83:93:3e:b1:8c:
ab:02:28:2b:5f:67:8a:74:e3:58:77:07:5b:ca:6a:54:7c:50:
c1:18:90:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:09:14 2026 by rpki-client