Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31352e302f32342d3234203d3e20383334.roa
File: 3231372e32352e31352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: mWRPxVUkqekpfjDM++QyDd8qxoSq2MT3KscZbrzZvoM=
Subject key identifier: 8E:4A:D8:03:A1:09:09:22:12:8E:48:0B:8E:13:03:D0:03:A5:40:B8
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 498F9AC21FFBA4A875EECC70AF9CA84D28593B89
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31352e302f32342d3234203d3e20383334.roa
Signing time: Wed 23 Sep 2026 00:08:14 +0000
ROA not before: Wed 23 Sep 2026 00:03:14 +0000
ROA not after: Wed 22 Sep 2027 00:08:14 +0000
asID: 834
IP address blocks: 217.25.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 09:55:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:8f:9a:c2:1f:fb:a4:a8:75:ee:cc:70:af:9c:a8:4d:28:59:3b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Sep 23 00:03:14 2026 GMT
Not After : Sep 22 00:08:14 2027 GMT
Subject: CN=8E4AD803A1090922128E480B8E1303D003A540B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e0:e5:55:c9:cf:ac:47:ae:b2:94:f5:85:9e:
fc:3e:4a:4c:29:86:4a:a3:c4:22:ef:57:47:e0:c6:
52:4e:5f:7c:91:8d:db:ba:13:a1:1f:b0:f2:4f:aa:
5c:3e:6f:32:ef:c3:0b:da:f2:4a:17:22:5d:91:d6:
6e:ae:6d:fa:ba:22:cb:d1:43:af:29:c7:fe:2b:e4:
83:24:aa:f9:57:37:9e:42:5a:af:d2:f0:80:7b:43:
1e:f5:3e:fb:a9:5a:e2:50:52:68:84:7a:1c:4b:5b:
23:0a:ef:1f:95:03:9a:59:97:a7:e0:29:42:10:34:
ea:1b:3b:0c:4e:3c:be:42:3d:86:e3:76:5b:2e:9d:
c6:c3:26:5b:d8:fe:97:0d:90:25:fa:29:40:49:96:
73:d4:54:f5:fa:b5:a9:af:fa:e6:de:6f:14:b7:8b:
15:87:25:47:0a:10:b3:fd:35:53:62:08:9d:a8:87:
e6:d5:4e:9e:15:ca:df:76:47:87:37:79:28:8f:7e:
e8:b2:cf:5f:72:77:a3:0e:66:17:41:bc:78:15:fd:
28:f4:b7:61:8f:ff:96:88:1b:f5:f5:e1:0f:be:4f:
c0:dd:6e:b5:4e:b3:d0:4c:33:1a:00:c8:01:07:b6:
93:a7:44:aa:b9:62:85:b9:44:5a:c7:35:53:04:69:
49:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4A:D8:03:A1:09:09:22:12:8E:48:0B:8E:13:03:D0:03:A5:40:B8
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e31352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.15.0/24
Signature Algorithm: sha256WithRSAEncryption
71:bb:ec:6e:22:45:35:e4:bf:af:d9:16:06:c6:8b:e3:4d:70:
e5:db:dc:fa:e2:40:f5:08:3c:af:a7:93:35:d3:bf:f4:47:4f:
5b:4d:4d:77:48:f3:de:2a:ad:74:51:0a:38:45:53:0a:4a:5a:
2c:3b:0c:29:3a:63:4a:06:ea:18:4a:35:6f:46:73:b5:70:45:
76:d1:bd:f9:19:83:50:8b:b6:c9:92:a0:cd:15:ef:bd:d0:d8:
d9:ae:a5:1b:ac:92:62:dc:1e:11:18:62:7a:fe:a4:72:55:24:
ed:ba:69:28:59:21:d5:8b:34:0e:3b:1c:2f:28:a9:e9:a0:89:
38:04:61:48:eb:e2:7d:1d:a4:03:ec:a6:1d:c8:18:90:62:57:
e2:9e:4c:05:1b:e9:d9:89:25:47:4d:ca:07:c0:01:f8:4b:a7:
69:56:17:87:67:7b:11:47:f1:6f:8b:24:2b:c5:f3:57:48:bb:
68:26:43:a7:d3:a7:3e:f1:ed:4a:27:c5:ec:9a:49:91:01:2e:
09:72:c2:99:c4:9b:42:e5:57:52:34:32:04:db:37:db:5e:94:
a6:f2:67:5f:c2:27:65:f1:72:ba:57:08:fc:ad:56:ff:0e:14:
b8:54:77:16:7c:52:7e:f7:5d:e4:1c:96:ab:7d:40:5f:4e:70:
d5:b2:1b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:52:47 2026 by rpki-client