Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31342e302f32342d3234203d3e20383334.roa
File: 3231372e32352e31342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: AbYUCEf5U4rAAD0BE6DBPOzhd30BMkaJoc+S0OWOs7U=
Subject key identifier: 61:D3:65:F2:B8:E2:E6:44:1A:21:9F:B2:CD:46:76:D6:FD:B2:7F:14
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 5185B9C6992C015B3802EDCECAC94BD78FCC5FC9
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31342e302f32342d3234203d3e20383334.roa
Signing time: Mon 09 Nov 2026 08:39:04 +0000
ROA not before: Mon 09 Nov 2026 08:34:04 +0000
ROA not after: Mon 08 Nov 2027 08:39:04 +0000
asID: 834
IP address blocks: 217.25.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:85:b9:c6:99:2c:01:5b:38:02:ed:ce:ca:c9:4b:d7:8f:cc:5f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Nov 9 08:34:04 2026 GMT
Not After : Nov 8 08:39:04 2027 GMT
Subject: CN=61D365F2B8E2E6441A219FB2CD4676D6FDB27F14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:69:da:fa:ff:1a:0b:d9:4c:54:3b:43:3b:d1:
25:70:23:3d:a5:48:a8:b7:1a:90:9b:41:34:92:a6:
e3:32:6f:98:7a:90:e7:11:d6:eb:ff:20:ae:ae:55:
59:a9:30:57:9e:72:cc:ef:82:64:48:40:96:7c:80:
63:3d:16:d3:d2:26:89:77:dd:09:a3:58:f9:65:8c:
20:7d:19:17:3c:84:bd:f7:21:bb:0e:68:a1:7d:96:
8c:f6:bd:9e:7f:af:b6:d3:e6:d7:a7:54:f5:17:a4:
7f:57:76:53:9c:bf:a6:04:eb:e4:f7:4b:a7:9d:cc:
ec:99:13:c0:96:c2:6e:2c:d3:5a:96:6f:2d:67:0e:
98:52:5c:14:ad:5a:03:a1:0e:8f:79:8f:97:4c:ac:
7e:4b:da:6b:6d:e6:4d:d7:5d:f7:51:ea:42:e9:7c:
6b:66:66:01:31:33:18:02:b5:ca:ee:38:1a:8f:a7:
04:ed:11:ac:c3:a7:e4:e1:91:8c:f4:f5:cf:46:9f:
1d:f0:5b:e9:75:82:19:a8:f3:03:52:7a:e3:2d:b2:
82:b0:1d:e6:bf:28:af:a7:1d:36:92:8e:c6:fa:cb:
84:d2:a5:64:64:b2:a0:65:b8:33:94:34:1c:d6:f7:
4d:3c:33:34:ca:a9:b0:68:a2:8b:5f:e2:c3:ff:9d:
76:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D3:65:F2:B8:E2:E6:44:1A:21:9F:B2:CD:46:76:D6:FD:B2:7F:14
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.14.0/24
Signature Algorithm: sha256WithRSAEncryption
35:e0:49:05:3c:5f:bc:66:60:50:55:e4:31:3e:00:8c:44:15:
dc:47:6f:2d:19:bc:10:54:1c:9f:11:92:70:dc:3f:5e:dc:67:
52:83:cd:e7:a3:88:b7:8c:67:c6:c1:05:f2:1e:94:01:8c:d7:
5a:ca:9c:86:32:3e:19:4f:cf:6b:77:99:d5:58:ed:2a:b1:8c:
8a:9c:de:e2:c6:b6:54:dd:35:c9:52:31:54:ea:81:e9:3d:75:
7d:1a:3a:f5:f1:ea:d4:ca:81:ce:d7:47:66:bc:d4:e5:0b:59:
3c:3f:1e:15:4d:fc:c8:b1:3a:8b:80:eb:21:90:26:c0:9a:fb:
33:0f:bd:3e:d6:f2:ab:d6:c9:1d:f0:4c:fe:2d:5f:e3:b8:67:
5f:45:11:2a:96:81:77:63:e4:27:19:3a:7f:7b:16:8b:6d:98:
25:77:ad:c5:17:63:b2:12:f4:ac:e3:1b:68:91:fa:6f:a9:c3:
91:95:72:ca:9d:b4:d8:ea:d5:e2:ee:41:a2:b0:cd:60:06:9e:
5b:00:3a:af:ed:c9:83:70:66:36:45:8f:b7:b5:e9:03:dd:e4:
60:dc:ed:b5:72:57:e2:33:04:92:cb:9f:db:96:97:74:c7:ec:
62:4c:f6:31:c2:09:0b:74:b8:fe:4d:b2:c7:df:68:aa:b9:02:
55:64:fc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:48:56 2026 by rpki-client