Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e372e302f32342d3234203d3e20313532363938.roa
File: 3231372e32352e372e302f32342d3234203d3e20313532363938.roa (raw, json)
Hash identifier: /LE1eCYAVcrdhrBn4hmVDb4iIuc5MQAtnvceT3TN1bc=
Subject key identifier: 8E:42:72:BB:DF:C1:D7:11:D4:53:A1:BC:8E:D7:F4:6B:75:6E:44:B6
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 1A687EF44DE5B1C379D51ABFC2BBD3B0AD44A7A4
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e372e302f32342d3234203d3e20313532363938.roa
Signing time: Mon 10 Aug 2026 11:38:37 +0000
ROA not before: Mon 10 Aug 2026 11:33:37 +0000
ROA not after: Mon 09 Aug 2027 11:38:37 +0000
asID: 152698
IP address blocks: 217.25.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 11:55:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:68:7e:f4:4d:e5:b1:c3:79:d5:1a:bf:c2:bb:d3:b0:ad:44:a7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Aug 10 11:33:37 2026 GMT
Not After : Aug 9 11:38:37 2027 GMT
Subject: CN=8E4272BBDFC1D711D453A1BC8ED7F46B756E44B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:b8:db:f4:a5:57:84:6f:bd:cf:23:e6:f8:
29:04:02:63:41:38:29:02:01:49:69:ad:ae:f4:6f:
7a:86:2e:f2:13:f7:39:5b:9e:58:af:dd:b2:f6:bf:
97:aa:65:44:69:4e:d3:3b:47:cc:f3:65:2b:da:6d:
00:92:eb:a7:cb:4f:de:98:46:55:88:42:b7:01:50:
f8:36:47:5b:fe:63:ff:40:9c:50:ab:47:42:08:1a:
21:bb:7a:6e:56:bf:97:71:04:f4:59:56:2b:5d:20:
9d:3f:73:14:58:07:42:f1:7b:9b:c8:6b:43:9f:b2:
d5:96:15:58:11:d6:ed:32:84:f8:f5:5e:1d:88:ba:
ef:55:00:f9:41:3d:cf:1f:33:4e:ba:14:b2:1a:9c:
af:b2:3b:7a:46:11:77:06:8c:c8:58:6c:b3:bb:3a:
14:d4:6c:a5:86:a9:b2:68:eb:a7:9e:74:cd:95:61:
6b:10:c0:2b:25:15:62:81:af:46:75:24:ae:19:76:
ba:24:84:5a:30:89:bd:b9:1d:a0:85:51:0c:93:fe:
35:e1:ec:78:a2:7b:ec:13:b9:25:1e:6e:c4:8b:38:
68:0a:3a:84:42:98:56:34:6f:9b:5f:f6:6a:d2:06:
f4:33:99:62:bd:d6:b4:04:54:ac:d2:47:cd:24:9a:
6b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:42:72:BB:DF:C1:D7:11:D4:53:A1:BC:8E:D7:F4:6B:75:6E:44:B6
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e372e302f32342d3234203d3e20313532363938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.7.0/24
Signature Algorithm: sha256WithRSAEncryption
97:07:2f:6f:7d:b6:df:d0:71:04:8d:7f:30:f9:9b:bf:d5:05:
0b:73:ed:0d:33:e3:62:a1:39:87:77:98:bb:9f:36:0d:6d:09:
d8:67:5a:d7:62:88:a4:8d:c8:3a:73:6e:43:e3:cf:a5:e4:f2:
cb:8c:b2:77:bd:15:ae:07:ba:d4:96:95:f2:51:c3:ff:ee:62:
b8:81:99:be:e5:96:c8:8c:d0:57:ae:8a:cf:ed:63:a4:6d:16:
33:a8:6f:98:a9:71:de:a5:68:1a:cd:ad:01:57:54:ca:b6:9e:
61:94:bb:dc:af:ab:c2:c9:62:3a:56:ae:87:12:01:1b:22:5e:
f2:f1:76:35:87:a2:2d:90:8d:39:04:8d:91:f5:d7:14:ad:d6:
fa:80:05:a7:e4:ba:5a:ff:d2:49:f2:25:84:18:39:47:0b:2c:
84:a4:1d:e3:fe:0f:c4:63:39:b5:57:b2:6f:12:e5:a5:79:c9:
bc:74:92:74:27:39:4e:44:2c:a2:ca:03:7e:80:76:d8:18:2a:
bf:54:c3:19:2f:a0:e1:79:4e:9f:20:a4:ce:d8:08:bd:ec:c7:
06:78:cf:96:ab:bb:4a:cd:a6:81:17:ea:d9:4e:63:a1:09:46:
53:65:08:f6:a7:25:61:b1:fd:05:f3:6e:20:95:b6:58:ac:0c:
ab:07:0a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:28:03 2026 by rpki-client