Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e352e302f32342d3234203d3e20343032323135.roa
File: 3231372e32352e352e302f32342d3234203d3e20343032323135.roa (raw, json)
Hash identifier: N49knYnRcEAQkSTBfiK8BTZ+ks+ilNMO1EqZNeNi9VI=
Subject key identifier: C6:2E:68:A5:B4:A4:D4:BB:3B:E6:96:6C:D3:CC:E5:E1:EF:9C:F1:F6
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 622712FF33A386566226D6C14C9DC8FCB452A451
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e352e302f32342d3234203d3e20343032323135.roa
Signing time: Wed 08 Jul 2026 05:46:26 +0000
ROA not before: Wed 08 Jul 2026 05:41:26 +0000
ROA not after: Wed 07 Jul 2027 05:46:26 +0000
asID: 402215
IP address blocks: 217.25.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 08:20:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:27:12:ff:33:a3:86:56:62:26:d6:c1:4c:9d:c8:fc:b4:52:a4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Jul 8 05:41:26 2026 GMT
Not After : Jul 7 05:46:26 2027 GMT
Subject: CN=C62E68A5B4A4D4BB3BE6966CD3CCE5E1EF9CF1F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bd:dc:d7:d7:74:aa:05:47:ea:7b:b0:29:db:
4f:d9:b6:92:31:53:46:3c:45:5e:5f:c4:cb:66:4b:
21:63:b5:6d:b3:cd:f4:4d:4b:ba:78:76:ec:fa:d8:
bb:94:32:e6:9a:ed:10:6a:37:35:29:a9:03:63:62:
af:5b:bf:71:00:62:b9:31:26:25:2f:db:3d:a3:ab:
30:10:05:ed:f9:ae:47:e0:a6:ba:b9:1b:83:4b:68:
c1:99:5b:a1:20:49:9f:bc:a9:64:2b:cd:88:7b:fb:
98:fb:0b:8a:5a:5d:ce:05:55:9d:dd:ce:54:57:ab:
f4:2c:9c:c4:c1:eb:a8:d7:72:00:40:9c:4b:ca:6c:
ea:39:32:67:24:03:33:5e:72:fc:27:f9:e6:f2:e7:
ed:90:42:98:7c:db:86:23:82:2d:de:d1:3d:65:5c:
ee:8c:1d:8a:9e:72:48:37:d4:33:42:19:bd:53:39:
46:45:98:20:f8:d3:09:ac:02:ef:d6:af:d7:53:00:
c7:09:ff:5a:49:f8:e1:22:a6:02:95:ac:fe:ae:b4:
20:d7:20:61:1f:05:5c:36:f2:05:64:c0:ca:4a:a3:
65:65:a0:5e:ed:70:34:b0:4f:51:cc:8a:72:6b:25:
b5:6e:0b:3a:b4:26:b1:80:39:bd:b8:14:ba:19:74:
e0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2E:68:A5:B4:A4:D4:BB:3B:E6:96:6C:D3:CC:E5:E1:EF:9C:F1:F6
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e352e302f32342d3234203d3e20343032323135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.5.0/24
Signature Algorithm: sha256WithRSAEncryption
41:e1:96:7a:5a:fb:15:53:47:3f:4a:cf:de:0e:bc:c9:ca:45:
24:29:ca:9d:68:da:98:fa:cd:78:bc:01:16:26:17:de:94:5c:
a0:05:a0:39:c4:84:cf:9f:2f:e3:bf:ee:5f:1e:9d:ef:95:44:
f9:7e:73:5e:64:6c:6b:d3:48:f5:f6:39:5d:28:35:08:1f:c6:
f3:a8:81:8b:f4:bf:cc:ba:48:87:6f:23:2a:dc:d2:44:6d:c9:
df:d3:fd:88:c4:a4:9f:9a:95:7c:d4:f6:60:5a:9b:a1:9e:22:
0d:00:b6:ff:44:76:d4:c9:46:74:52:6e:a3:14:11:7e:ed:cb:
ec:5a:ae:5b:4e:81:93:d6:44:ed:3a:f4:5e:e8:73:19:73:f2:
1c:0e:45:03:46:cb:16:5f:45:da:00:29:57:d9:e4:63:3d:05:
51:fa:e1:24:f4:80:b1:d5:01:d3:70:cd:7d:67:42:0e:2b:fd:
77:37:42:18:9a:6a:33:f0:f6:e3:77:2c:b2:8f:e2:63:ff:55:
87:05:e0:18:4d:4c:a2:0e:74:f8:23:5d:82:8f:36:cd:93:aa:
39:a8:9e:54:f6:13:04:ca:1d:28:cc:fe:54:b6:12:b1:05:ed:
56:52:57:83:05:2b:46:55:dd:fd:25:ba:af:29:77:68:60:40:
e4:9c:6c:79
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUYicS/zOjhlZiJtbBTJ3I/LRSpFEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJiZmQ0ZTAyMTU0N2QwMzBhYzEwYjAyMTM1MzVkNGM2
OTY4ZWVkZTAeFw0yNjA3MDgwNTQxMjZaFw0yNzA3MDcwNTQ2MjZaMDMxMTAvBgNV
BAMTKEM2MkU2OEE1QjRBNEQ0QkIzQkU2OTY2Q0QzQ0NFNUUxRUY5Q0YxRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2vdzX13SqBUfqe7Ap20/ZtpIx
U0Y8RV5fxMtmSyFjtW2zzfRNS7p4duz62LuUMuaa7RBqNzUpqQNjYq9bv3EAYrkx
JiUv2z2jqzAQBe35rkfgprq5G4NLaMGZW6EgSZ+8qWQrzYh7+5j7C4paXc4FVZ3d
zlRXq/QsnMTB66jXcgBAnEvKbOo5MmckAzNecvwn+eby5+2QQph824Yjgi3e0T1l
XO6MHYqeckg31DNCGb1TOUZFmCD40wmsAu/Wr9dTAMcJ/1pJ+OEipgKVrP6utCDX
IGEfBVw28gVkwMpKo2VloF7tcDSwT1HMinJrJbVuCzq0JrGAOb24FLoZdODTAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUxi5opbSk1Ls75pZs08zl4e+c8fYwHwYDVR0j
BBgwFoAUIr/U4CFUfQMKwQsCE1NdTGlo7t4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNhYWNkMTctYmY5ZC00N2RiLTg2NGQtZjljN2MyYmUx
ODNhLzAvMjJCRkQ0RTAyMTU0N0QwMzBBQzEwQjAyMTM1MzVENEM2OTY4RUVERS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lyX1U0Q0ZVZlFNS3dRc0NFMU5kVEds
bzd0NC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjNhYWNkMTct
YmY5ZC00N2RiLTg2NGQtZjljN2MyYmUxODNhLzAvMzIzMTM3MmUzMjM1MmUzNTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzAzMjMyMzEzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANkZ
BTANBgkqhkiG9w0BAQsFAAOCAQEAQeGWelr7FVNHP0rP3g68ycpFJCnKnWjamPrN
eLwBFiYX3pRcoAWgOcSEz58v47/uXx6d75VE+X5zXmRsa9NI9fY5XSg1CB/G86iB
i/S/zLpIh28jKtzSRG3J39P9iMSkn5qVfNT2YFqboZ4iDQC2/0R21MlGdFJuoxQR
fu3L7FquW06Bk9ZE7Tr0XuhzGXPyHA5FA0bLFl9F2gApV9nkYz0FUfrhJPSAsdUB
03DNfWdCDiv9dzdCGJpqM/D243csso/iY/9VhwXgGE1Mog50+CNdgo82zZOqOaie
VPYTBModKMz+VLYSsQXtVlJXgwUrRlXd/SW6ryl3aGBA5JxseQ==
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:26 2026 by rpki-client