Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e322e302f32342d3234203d3e20323138383239.roa
File: 3231372e32352e322e302f32342d3234203d3e20323138383239.roa (raw, json)
Hash identifier: sTD/ELsmS5B/a3PpivXKnGnrDUxMqbqdUHt+yyguBew=
Subject key identifier: 29:FA:32:90:96:F1:4D:A5:26:4A:34:3C:FB:10:9C:94:9F:10:44:CC
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 6FEA0BBB6701BEE7593B0F50F68060252F3EF105
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e322e302f32342d3234203d3e20323138383239.roa
Signing time: Sat 05 Sep 2026 06:59:11 +0000
ROA not before: Sat 05 Sep 2026 06:54:11 +0000
ROA not after: Sat 04 Sep 2027 06:59:11 +0000
asID: 218829
IP address blocks: 217.25.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:ea:0b:bb:67:01:be:e7:59:3b:0f:50:f6:80:60:25:2f:3e:f1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Sep 5 06:54:11 2026 GMT
Not After : Sep 4 06:59:11 2027 GMT
Subject: CN=29FA329096F14DA5264A343CFB109C949F1044CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6a:3a:5f:98:d3:60:9b:65:51:0c:98:e4:6c:
46:52:1c:d0:e7:22:ec:bf:b4:c6:28:77:05:cd:f1:
67:d9:86:3d:f4:fc:7c:b6:7e:94:c6:1f:a5:8a:6c:
8d:9f:9d:98:55:8f:c4:f8:6d:3f:a5:04:66:aa:8a:
95:65:48:36:c8:66:e6:10:08:83:dc:03:95:59:e1:
0b:57:e9:38:b0:c3:1c:4e:c5:56:bd:43:2f:fb:23:
74:60:d7:77:5e:91:58:31:eb:95:90:27:69:30:f7:
da:33:37:07:8d:62:2e:37:1b:d3:af:c1:f9:15:4e:
5f:71:e0:1a:7c:0c:ff:2e:9c:d4:48:c3:49:16:a4:
88:df:31:4c:d6:11:f5:78:f1:ea:fd:8f:3d:9f:92:
a4:28:18:94:d7:8a:14:83:62:e6:f8:51:50:05:a8:
e9:ae:b3:dc:2c:fd:9b:19:af:8b:ab:7c:d0:43:5c:
77:04:9d:90:55:5c:65:05:60:0c:cd:6e:47:39:b0:
70:31:01:82:a2:32:d4:2e:fe:62:38:03:de:06:16:
8f:36:92:e0:c2:bf:08:91:3d:6e:24:17:2f:dc:25:
6f:27:42:2f:d6:99:87:a1:8d:c0:eb:c8:4d:5a:0e:
00:e8:e8:ab:10:59:3b:85:09:43:59:06:b0:da:a4:
1c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FA:32:90:96:F1:4D:A5:26:4A:34:3C:FB:10:9C:94:9F:10:44:CC
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3231372e32352e322e302f32342d3234203d3e20323138383239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.2.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:f7:76:6a:e7:f4:7e:0c:7d:97:3a:d7:f3:df:65:77:03:92:
47:12:a3:81:e1:e0:f5:fd:1c:a0:19:47:8f:d8:e0:d8:4f:76:
60:4a:2c:d4:5e:a4:e9:fc:9c:af:a3:ec:89:55:e1:49:6b:a4:
e8:4b:b6:48:92:92:85:cd:b7:0e:b1:ca:5c:2c:4e:cb:da:59:
30:2e:60:f0:e0:92:a6:2d:65:ee:af:c0:48:84:23:69:16:57:
28:6e:f4:db:79:f0:a4:f7:d5:24:61:6d:8d:a4:3b:ab:16:e7:
12:89:83:9e:b3:bd:03:01:1e:81:93:06:73:ec:2e:6f:d5:7b:
ed:b5:c2:47:77:bc:f8:dc:89:03:84:77:2a:18:1e:e1:97:ed:
66:65:3a:bd:fa:50:8b:7a:f8:f8:e5:7c:52:c4:7a:0a:3f:35:
21:1a:ce:9f:99:d5:fc:b2:f4:00:e9:9a:f5:41:85:55:93:c1:
a3:d7:1b:2c:c3:8b:b3:61:7b:fb:a4:2e:fa:6b:64:51:09:df:
4f:6d:de:80:6e:f2:4b:d3:e3:6d:ce:13:80:b8:d3:86:75:04:
06:ba:83:78:39:4a:f5:6c:b1:63:b2:0e:63:1e:21:7c:aa:7f:
a2:cd:ca:3b:ca:8c:f2:db:c0:54:02:3a:80:f3:46:40:ea:a5:
e6:65:66:76
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUb+oLu2cBvudZOw9Q9oBgJS8+8QUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJiZmQ0ZTAyMTU0N2QwMzBhYzEwYjAyMTM1MzVkNGM2
OTY4ZWVkZTAeFw0yNjA5MDUwNjU0MTFaFw0yNzA5MDQwNjU5MTFaMDMxMTAvBgNV
BAMTKDI5RkEzMjkwOTZGMTREQTUyNjRBMzQzQ0ZCMTA5Qzk0OUYxMDQ0Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcajpfmNNgm2VRDJjkbEZSHNDn
Iuy/tMYodwXN8WfZhj30/Hy2fpTGH6WKbI2fnZhVj8T4bT+lBGaqipVlSDbIZuYQ
CIPcA5VZ4QtX6TiwwxxOxVa9Qy/7I3Rg13dekVgx65WQJ2kw99ozNweNYi43G9Ov
wfkVTl9x4Bp8DP8unNRIw0kWpIjfMUzWEfV48er9jz2fkqQoGJTXihSDYub4UVAF
qOmus9ws/ZsZr4urfNBDXHcEnZBVXGUFYAzNbkc5sHAxAYKiMtQu/mI4A94GFo82
kuDCvwiRPW4kFy/cJW8nQi/WmYehjcDryE1aDgDo6KsQWTuFCUNZBrDapBybAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUKfoykJbxTaUmSjQ8+xCclJ8QRMwwHwYDVR0j
BBgwFoAUIr/U4CFUfQMKwQsCE1NdTGlo7t4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNhYWNkMTctYmY5ZC00N2RiLTg2NGQtZjljN2MyYmUx
ODNhLzAvMjJCRkQ0RTAyMTU0N0QwMzBBQzEwQjAyMTM1MzVENEM2OTY4RUVERS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lyX1U0Q0ZVZlFNS3dRc0NFMU5kVEds
bzd0NC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjNhYWNkMTct
YmY5ZC00N2RiLTg2NGQtZjljN2MyYmUxODNhLzAvMzIzMTM3MmUzMjM1MmUzMjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzODM4MzIzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANkZ
AjANBgkqhkiG9w0BAQsFAAOCAQEAOvd2auf0fgx9lzrX899ldwOSRxKjgeHg9f0c
oBlHj9jg2E92YEos1F6k6fycr6PsiVXhSWuk6Eu2SJKShc23DrHKXCxOy9pZMC5g
8OCSpi1l7q/ASIQjaRZXKG7023nwpPfVJGFtjaQ7qxbnEomDnrO9AwEegZMGc+wu
b9V77bXCR3e8+NyJA4R3Khge4ZftZmU6vfpQi3r4+OV8UsR6Cj81IRrOn5nV/LL0
AOma9UGFVZPBo9cbLMOLs2F7+6Qu+mtkUQnfT23egG7yS9Pjbc4TgLjThnUEBrqD
eDlK9WyxY7IOYx4hfKp/os3KO8qM8tvAVAI6gPNGQOql5mVmdg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 08:46:06 2026 by rpki-client