Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e362e302f32332d3234203d3e20383334.roa
File: 3231372e32352e362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: kuLwFCmf8Whna0mXwpfLAstA+xJncXgqXwYveSIDWeI=
Subject key identifier: 17:4C:1F:CE:07:DE:63:F7:6B:D7:A5:A8:98:CB:4F:62:58:FF:7D:DC
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 4778681293A15A0814A420FEAEDFA2CD5B60EC20
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e362e302f32332d3234203d3e20383334.roa
Signing time: Fri 18 Sep 2026 00:01:36 +0000
ROA not before: Thu 17 Sep 2026 23:56:36 +0000
ROA not after: Fri 17 Sep 2027 00:01:36 +0000
asID: 834
IP address blocks: 217.25.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:21:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:78:68:12:93:a1:5a:08:14:a4:20:fe:ae:df:a2:cd:5b:60:ec:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Sep 17 23:56:36 2026 GMT
Not After : Sep 17 00:01:36 2027 GMT
Subject: CN=174C1FCE07DE63F76BD7A5A898CB4F6258FF7DDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:02:9b:53:11:9b:71:13:bf:72:56:a8:03:2e:
2f:ce:b4:1a:a5:8e:3a:8d:7b:2a:f2:ef:d0:c9:22:
01:cf:e1:62:c7:33:4d:b0:29:4a:61:f5:12:20:49:
7c:76:f9:5e:4c:3f:12:9d:1b:7d:91:67:b6:d7:fa:
10:bb:4c:64:87:e3:08:cf:b5:f9:28:59:de:16:86:
a2:bc:47:08:33:b6:5e:e9:88:9a:27:5b:55:93:75:
c5:39:29:48:40:ac:04:ba:be:d5:68:9a:2f:a5:f6:
cb:de:eb:33:49:cc:67:5d:a7:dd:99:17:a7:de:d1:
4b:af:fd:0d:7e:52:9b:ff:7c:f8:2a:fc:59:b1:bd:
87:45:aa:60:92:5c:09:ca:e9:25:3a:f8:35:b5:3b:
78:aa:94:1b:59:e0:f9:4f:ab:b7:74:a7:01:95:25:
5f:cd:23:df:b0:dc:57:bf:ce:c4:14:18:8f:00:cd:
23:26:3f:31:dd:81:b5:98:41:19:52:e5:e8:24:30:
8c:92:e5:94:50:bc:c5:e8:bd:fb:70:b0:9f:67:3e:
eb:86:0a:14:a8:45:e8:d4:b2:97:f9:57:88:5d:2f:
ca:25:ec:68:ba:91:a2:32:58:86:df:60:16:6f:5d:
69:a0:9e:5f:ab:c5:4a:99:28:bf:90:fc:ff:34:72:
9f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4C:1F:CE:07:DE:63:F7:6B:D7:A5:A8:98:CB:4F:62:58:FF:7D:DC
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.6.0/23
Signature Algorithm: sha256WithRSAEncryption
59:35:93:ef:e8:07:da:98:39:39:17:95:fe:6f:17:bd:67:2a:
c8:27:1c:cf:68:98:bb:95:34:22:fa:3f:5a:5c:73:91:aa:ca:
cd:05:a1:af:0c:df:41:cb:25:c8:f8:d0:0b:97:25:36:69:9b:
a8:da:ec:7f:65:01:b6:ea:51:27:ca:0a:e5:58:a1:57:64:42:
ec:ec:a3:06:21:91:1c:f0:d2:bb:5b:b0:a8:d9:51:24:ca:61:
01:69:57:da:51:4b:a0:32:37:89:51:0f:a0:cf:0b:0c:f6:54:
01:e3:12:c4:b7:1a:31:a7:bd:de:31:5a:b0:fb:15:e5:ff:5c:
5b:76:67:ca:81:9b:c9:a0:c7:cf:48:d1:0e:91:c0:d2:9f:b7:
f2:e2:ed:00:12:9b:3e:d0:f3:f4:72:05:88:94:ee:6e:bc:95:
e1:33:2c:8b:76:c1:dd:eb:fa:67:84:6e:8b:54:6f:8c:5a:66:
43:cb:01:9e:13:05:91:f9:8f:2d:4f:e3:71:84:47:e7:3a:27:
50:b0:ca:87:2f:5f:87:46:61:d1:6a:d7:42:93:a5:08:88:02:
13:5a:80:1e:5f:c2:70:7d:f2:83:82:a1:51:35:c7:4d:68:cc:
45:87:d7:27:16:26:b7:f2:bb:3c:99:11:24:57:29:67:0a:44:
25:af:d6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:25:05 2026 by rpki-client