Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31302e302f32342d3234203d3e20343032383537.roa
File: 3231372e32352e31302e302f32342d3234203d3e20343032383537.roa (raw, json)
Hash identifier: niaZez5rWCfPwIynJuAiVBnG0HUl9oIbnXZCHjb7z20=
Subject key identifier: 68:17:31:37:0F:80:5D:4B:05:2E:F1:DA:51:1D:3A:E4:94:2D:4E:4F
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 6EA9B4F9A572CAA0B7849B333785515CDF4B66A1
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31302e302f32342d3234203d3e20343032383537.roa
Signing time: Fri 11 Sep 2026 13:25:28 +0000
ROA not before: Fri 11 Sep 2026 13:20:28 +0000
ROA not after: Fri 10 Sep 2027 13:25:28 +0000
asID: 402857
IP address blocks: 217.25.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:a9:b4:f9:a5:72:ca:a0:b7:84:9b:33:37:85:51:5c:df:4b:66:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Sep 11 13:20:28 2026 GMT
Not After : Sep 10 13:25:28 2027 GMT
Subject: CN=681731370F805D4B052EF1DA511D3AE4942D4E4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6b:de:b4:fc:92:da:f5:68:cf:d8:45:2c:42:
a9:b0:da:24:6e:af:a7:6a:68:2d:71:51:34:36:6c:
c6:6c:90:df:ad:2e:73:fe:8a:5f:27:34:32:e6:6c:
25:ab:92:b3:a7:51:ce:5f:bf:e2:c5:0c:d3:10:f5:
84:f1:91:36:91:83:c0:4d:9a:14:4f:25:e0:84:e0:
ad:eb:b8:34:6b:8e:f9:e3:33:e3:34:71:08:4c:e4:
e2:5f:74:bc:5d:1d:cb:4c:d7:c3:6e:30:b5:9a:5d:
8b:c0:35:de:96:35:98:ef:a3:19:bc:bb:68:81:fa:
86:8b:df:93:a1:42:58:6f:c0:26:e8:4e:30:6b:a6:
87:d5:76:72:e8:b1:a1:c1:69:61:08:a7:16:83:8f:
f9:a1:cb:fd:76:61:7d:be:2a:b7:bc:bb:d4:e8:19:
35:8a:64:83:69:50:d7:94:1d:49:be:7c:74:cd:93:
a3:1c:38:91:1e:25:14:05:fb:47:57:29:27:a0:ce:
5d:f7:32:02:79:92:3f:bc:11:62:ed:40:aa:fb:33:
69:55:32:5e:33:2b:9b:d8:aa:58:9b:21:5e:24:2f:
58:63:d4:07:5f:88:ad:63:77:9b:bb:49:df:2f:2e:
1e:fd:1a:61:bf:06:e2:64:a0:57:c0:e5:28:c8:a1:
e9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:17:31:37:0F:80:5D:4B:05:2E:F1:DA:51:1D:3A:E4:94:2D:4E:4F
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31302e302f32342d3234203d3e20343032383537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.10.0/24
Signature Algorithm: sha256WithRSAEncryption
36:40:d4:3d:15:05:45:ce:03:b5:ff:70:bd:6a:07:cc:81:50:
7e:af:54:3f:73:66:e5:ba:8c:7c:80:69:90:b7:ff:0d:25:87:
19:49:60:00:8f:8a:62:32:0d:6a:c1:e6:03:81:77:29:3d:97:
76:1f:ca:29:3d:c7:85:7a:c3:c1:02:e9:df:01:71:c6:ae:f6:
62:97:83:1a:30:59:5f:fe:1a:bc:34:1b:f1:fc:f1:5c:df:f5:
89:fc:b2:88:c7:13:83:da:40:5b:06:3b:e2:03:89:de:9c:fd:
02:09:8a:8d:fc:62:b1:a6:59:64:b0:f3:aa:83:26:75:fd:c5:
09:fa:f6:a3:3c:76:16:f4:8a:a5:9d:f6:86:de:7f:a8:22:ae:
95:b2:6a:55:4d:31:47:77:2a:fa:d3:03:d3:f4:89:f4:c8:30:
53:bd:a8:d1:35:b5:4d:2f:44:05:df:af:12:67:d3:33:13:0c:
f0:6c:bb:d7:7b:c0:37:ae:6f:e1:f7:a6:63:71:7c:1b:95:b9:
17:a5:31:11:7d:63:5d:9e:04:a9:3b:36:9a:5f:61:c5:c9:93:
7e:28:b0:6d:3f:6e:6a:e8:e1:06:bc:33:37:19:ba:c5:ac:5a:
f5:8a:ff:9c:97:07:34:20:98:5d:a1:d3:6b:5d:55:20:9f:c5:
3a:dd:6e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:51:35 2026 by rpki-client