Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e362e302f32332d3234203d3e20383334.roa
File: 3231372e32352e362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: lBgKW7MfWFpCCiYIPXIyT3IQMPdaMKH8epCdoqowelA=
Subject key identifier: 82:45:35:E8:B9:4C:42:10:68:C5:F5:36:04:1B:BC:0C:12:92:27:90
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 54C05C157C4F1ED763AE222DE2C219F495232D12
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e362e302f32332d3234203d3e20383334.roa
Signing time: Mon 08 Jun 2026 12:36:03 +0000
ROA not before: Mon 08 Jun 2026 12:31:03 +0000
ROA not after: Mon 07 Jun 2027 12:36:03 +0000
asID: 834
IP address blocks: 217.25.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:35:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:c0:5c:15:7c:4f:1e:d7:63:ae:22:2d:e2:c2:19:f4:95:23:2d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Jun 8 12:31:03 2026 GMT
Not After : Jun 7 12:36:03 2027 GMT
Subject: CN=824535E8B94C421068C5F536041BBC0C12922790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f6:bc:79:49:60:39:f7:3f:5d:16:66:57:1d:
f6:cf:2e:c0:e9:d8:99:d5:a3:f7:4f:2d:98:ad:ac:
2d:45:27:c1:7c:9e:82:01:e5:ba:6d:42:d7:70:69:
d1:10:51:06:f5:55:60:bb:9e:65:f6:00:16:d7:53:
4e:a7:51:06:05:02:f3:4f:7c:1a:59:11:9c:34:50:
97:ce:76:bf:b5:03:ae:c6:42:37:c2:9a:96:47:11:
a7:e9:a6:d6:57:0c:bb:45:b9:f5:92:00:86:f8:1d:
fb:6f:17:8b:c0:6b:27:52:ef:3b:8c:f5:8e:c2:33:
d0:79:6b:58:b8:33:0c:90:9a:db:54:14:91:49:a9:
84:66:43:1b:f7:4c:39:19:3b:fe:0a:6f:2a:92:e6:
1e:6a:35:05:15:84:80:95:ea:9c:c3:37:0a:7e:08:
56:ce:be:be:bc:4a:11:34:5d:4d:40:14:13:22:00:
a1:f4:71:b0:2e:28:98:46:e4:a1:a5:a2:2b:3f:cc:
88:c6:4a:42:a3:ee:79:fc:72:88:9b:8a:52:fe:fc:
0b:08:8b:8d:0c:e2:be:83:1b:7a:af:20:06:7d:1c:
1a:8d:f4:04:c7:10:3f:de:03:f1:9f:61:10:75:f0:
53:ed:4a:55:3e:06:45:8b:e6:fe:19:03:76:3f:57:
3f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:45:35:E8:B9:4C:42:10:68:C5:F5:36:04:1B:BC:0C:12:92:27:90
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.6.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:fa:0f:eb:6d:b4:9c:4c:90:3f:b5:f0:49:24:95:7e:8b:80:
11:04:c5:84:8a:a0:e3:e8:a3:76:d0:6d:cc:4b:57:1f:7e:0e:
c3:a0:ef:a1:81:5d:2d:41:6b:21:80:9e:22:2d:e1:b0:9c:59:
51:35:a3:2e:59:82:7b:2b:48:d6:12:a3:e7:d0:0b:78:6f:bf:
9d:0d:37:ec:48:5f:33:d4:73:d4:c7:7c:0f:4f:05:47:03:c9:
b2:a0:1c:08:33:dd:b8:05:80:24:d9:32:e9:bf:8c:f5:c6:c9:
62:1e:05:b6:8e:7f:e6:8c:8d:a2:10:2e:e5:62:be:4e:15:17:
d7:54:09:f9:bb:5e:1d:03:16:d1:57:f0:d9:bb:84:d6:db:76:
c8:ea:dd:a9:da:8c:4c:69:4e:37:82:c0:4c:be:1f:68:58:1b:
97:48:ba:3e:b6:39:e5:73:7d:73:7a:87:3d:1d:f3:cc:d6:ff:
40:69:50:7a:7b:d4:80:65:34:90:88:26:bf:47:76:06:81:35:
44:83:fa:b1:3e:53:8f:08:d0:8c:6e:2c:8b:fa:b3:19:f1:e5:
6e:db:f3:5d:8d:00:8a:9e:ca:e6:be:a4:21:25:62:26:65:2b:
ea:06:6a:bf:c5:ed:41:6a:6b:ee:c9:6d:d9:63:dc:b8:98:11:
5d:b8:94:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:41:03 2026 by rpki-client