Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e362e302f32342d3234203d3e20313937313733.roa
File: 3231372e32352e362e302f32342d3234203d3e20313937313733.roa (raw, json)
Hash identifier: kYFhpIFB7sQ4plsLv55NXEH2ur4uD2Dvnnf/Bn8wlhY=
Subject key identifier: D3:6B:DA:65:D3:90:43:78:D4:0B:E6:4D:53:7E:6D:05:74:C5:D9:C3
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 71C1B00231A10E04D99C31F06725E8314A316CD0
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e362e302f32342d3234203d3e20313937313733.roa
Signing time: Fri 17 Jul 2026 06:13:53 +0000
ROA not before: Fri 17 Jul 2026 06:08:53 +0000
ROA not after: Fri 16 Jul 2027 06:13:53 +0000
asID: 197173
IP address blocks: 217.25.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:c1:b0:02:31:a1:0e:04:d9:9c:31:f0:67:25:e8:31:4a:31:6c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Jul 17 06:08:53 2026 GMT
Not After : Jul 16 06:13:53 2027 GMT
Subject: CN=D36BDA65D3904378D40BE64D537E6D0574C5D9C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e0:71:4a:34:72:85:cc:83:61:cc:38:a9:32:
3d:f6:f0:f5:7a:25:25:e3:51:04:3b:11:22:e7:49:
f1:04:1e:4f:0b:18:e7:63:be:4f:ba:2a:cd:d8:62:
63:2f:79:df:7c:2a:c6:7c:fc:f8:ab:09:40:e6:81:
ea:81:9b:49:5d:cd:e8:93:8e:ed:19:58:ef:e5:0f:
a0:69:04:7a:cf:c3:62:53:a9:e0:12:94:73:7d:0c:
24:51:3c:48:1a:5e:32:2d:8a:30:d3:26:a5:02:13:
c0:ea:a3:78:08:7c:88:11:c9:1f:b4:4b:2a:94:b4:
31:23:52:a5:ae:11:25:04:4b:1b:c6:65:fc:3f:a0:
92:b4:08:d8:da:e6:55:d1:e4:ec:45:ab:bf:11:44:
d3:0d:0c:bc:b6:0f:b8:f6:e4:b4:14:c7:08:ad:75:
c4:27:42:93:e2:d0:ef:a5:1e:b9:5a:13:c7:84:eb:
4d:c4:a1:3d:82:a5:04:de:fc:03:3c:12:f3:8f:f5:
6b:8a:20:4a:9d:3e:48:24:1f:6d:01:94:9f:ff:53:
e7:77:29:ed:a4:57:ef:ad:05:9e:6a:fe:8c:7e:cf:
fc:30:e1:e0:b3:72:e4:0a:63:ee:b6:c1:3d:26:11:
04:6f:82:89:67:7e:fc:eb:ac:df:94:a6:50:5a:cb:
12:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6B:DA:65:D3:90:43:78:D4:0B:E6:4D:53:7E:6D:05:74:C5:D9:C3
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e362e302f32342d3234203d3e20313937313733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.6.0/24
Signature Algorithm: sha256WithRSAEncryption
76:bb:21:b0:da:cd:c6:eb:16:1e:15:2d:3b:8f:7a:4b:26:e1:
8c:86:65:8c:35:97:38:b5:fa:41:59:da:0c:57:19:91:aa:5c:
4d:df:4e:aa:1f:db:ab:9a:f1:48:7e:8a:78:7f:c5:26:0c:44:
a3:5e:7e:ae:14:62:a8:8e:5e:52:83:cd:9e:bd:ce:c4:40:ba:
c2:92:5f:d2:82:73:e0:88:dd:4a:3e:bc:1a:b9:fb:ca:ff:85:
c6:9e:28:3c:bd:85:7c:02:3d:83:bd:05:7d:31:92:40:ca:d4:
92:68:52:27:dc:38:9e:e1:78:e9:b5:fb:f2:96:c6:2c:3c:35:
6d:b5:54:35:ab:15:7b:a7:0c:9d:c2:2f:ba:c5:bd:ad:f3:c2:
14:a1:d0:3e:95:5b:6a:2d:56:b9:cb:63:20:ba:9b:28:34:29:
1e:29:e9:04:1f:09:2f:29:eb:09:fb:d6:5f:45:0b:64:47:4c:
bb:0e:56:25:17:78:04:be:ba:01:32:bb:22:3a:d5:fd:56:27:
f4:e0:31:2e:73:26:2e:31:10:d6:9a:86:e4:83:55:a1:c6:3a:
95:4b:99:b4:7e:8a:3a:41:41:36:e5:ee:f9:03:57:e9:8b:28:
70:9c:a1:a4:62:75:78:17:39:66:1e:6e:73:89:80:29:d0:41:
80:5e:7c:c3
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUccGwAjGhDgTZnDHwZyXoMUoxbNAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJiZmQ0ZTAyMTU0N2QwMzBhYzEwYjAyMTM1MzVkNGM2
OTY4ZWVkZTAeFw0yNjA3MTcwNjA4NTNaFw0yNzA3MTYwNjEzNTNaMDMxMTAvBgNV
BAMTKEQzNkJEQTY1RDM5MDQzNzhENDBCRTY0RDUzN0U2RDA1NzRDNUQ5QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS4HFKNHKFzINhzDipMj328PV6
JSXjUQQ7ESLnSfEEHk8LGOdjvk+6Ks3YYmMved98KsZ8/PirCUDmgeqBm0ldzeiT
ju0ZWO/lD6BpBHrPw2JTqeASlHN9DCRRPEgaXjItijDTJqUCE8Dqo3gIfIgRyR+0
SyqUtDEjUqWuESUESxvGZfw/oJK0CNja5lXR5OxFq78RRNMNDLy2D7j25LQUxwit
dcQnQpPi0O+lHrlaE8eE603EoT2CpQTe/AM8EvOP9WuKIEqdPkgkH20BlJ//U+d3
Ke2kV++tBZ5q/ox+z/ww4eCzcuQKY+62wT0mEQRvgolnfvzrrN+UplBayxK3AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU02vaZdOQQ3jUC+ZNU35tBXTF2cMwHwYDVR0j
BBgwFoAUIr/U4CFUfQMKwQsCE1NdTGlo7t4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNhYWNkMTctYmY5ZC00N2RiLTg2NGQtZjljN2MyYmUx
ODNhLzAvMjJCRkQ0RTAyMTU0N0QwMzBBQzEwQjAyMTM1MzVENEM2OTY4RUVERS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lyX1U0Q0ZVZlFNS3dRc0NFMU5kVEds
bzd0NC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjNhYWNkMTct
YmY5ZC00N2RiLTg2NGQtZjljN2MyYmUxODNhLzAvMzIzMTM3MmUzMjM1MmUzNjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzkzNzMxMzczMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANkZ
BjANBgkqhkiG9w0BAQsFAAOCAQEAdrshsNrNxusWHhUtO496SybhjIZljDWXOLX6
QVnaDFcZkapcTd9Oqh/bq5rxSH6KeH/FJgxEo15+rhRiqI5eUoPNnr3OxEC6wpJf
0oJz4IjdSj68Grn7yv+Fxp4oPL2FfAI9g70FfTGSQMrUkmhSJ9w4nuF46bX78pbG
LDw1bbVUNasVe6cMncIvusW9rfPCFKHQPpVbai1WuctjILqbKDQpHinpBB8JLynr
CfvWX0ULZEdMuw5WJRd4BL66ATK7IjrV/VYn9OAxLnMmLjEQ1pqG5INVocY6lUuZ
tH6KOkFBNuXu+QNX6YsocJyhpGJ1eBc5Zh5uc4mAKdBBgF58ww==
-----END CERTIFICATE-----
Generated at Fri Jul 17 14:26:25 2026 by rpki-client