Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3231372e36352e37302e302f32342d3234203d3e203537303433.roa
File: 3231372e36352e37302e302f32342d3234203d3e203537303433.roa (raw, json)
Hash identifier: R1NfMNeGaKcL4t9lyFeclZl3LBtcgI+uRlA7bXc9RS8=
Subject key identifier: 22:18:6B:B6:B7:F1:22:10:EB:AA:22:FA:2A:41:30:6A:CD:C8:13:7F
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 2576D420C944BE06D9B1475C921C017E7262E633
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3231372e36352e37302e302f32342d3234203d3e203537303433.roa
Signing time: Sun 10 Aug 2025 06:27:03 +0000
ROA not before: Sun 10 Aug 2025 06:22:03 +0000
ROA not after: Sun 09 Aug 2026 06:27:03 +0000
asID: 57043
IP address blocks: 217.65.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:23:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:76:d4:20:c9:44:be:06:d9:b1:47:5c:92:1c:01:7e:72:62:e6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Aug 10 06:22:03 2025 GMT
Not After : Aug 9 06:27:03 2026 GMT
Subject: CN=22186BB6B7F12210EBAA22FA2A41306ACDC8137F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:14:ac:e7:f0:ce:93:cd:b8:e3:99:85:9e:
fa:b1:33:5f:fd:3c:bf:2b:88:54:8b:d6:f6:e9:f1:
f4:76:b2:16:d5:34:45:76:54:74:1e:fd:71:fd:ff:
05:aa:d5:22:f6:9f:e1:1e:82:3d:e8:bd:2b:04:6d:
e1:18:fe:7e:e4:dc:ad:d8:75:48:6c:5e:f5:db:54:
79:df:0c:63:37:a7:b7:9e:81:48:78:2d:10:34:68:
71:6f:2d:76:a5:c2:27:fe:44:be:59:77:eb:52:e9:
64:c2:14:96:c5:0d:8f:53:1b:00:ac:e5:c6:96:27:
42:b4:d8:f7:6b:5d:96:47:de:8a:4c:66:a5:ef:68:
80:bf:f4:40:5b:2a:6c:fb:b9:af:de:0b:50:fa:60:
74:1e:ae:ed:75:7b:79:de:59:10:b6:0b:a5:c9:4b:
80:5b:13:35:61:74:68:39:eb:cb:ee:8a:66:9b:94:
9a:89:50:03:94:c2:37:5f:8e:30:99:76:7b:68:0d:
36:88:46:92:cd:1a:e5:36:10:36:34:2b:d6:6f:20:
92:35:9a:cb:ac:f4:38:b1:5e:62:24:ae:23:67:f7:
a7:2b:0d:69:90:bc:b2:ab:ee:50:bd:63:6d:ca:7c:
2b:b7:1b:e8:db:bf:5f:78:e7:14:d2:47:27:a2:da:
d9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:18:6B:B6:B7:F1:22:10:EB:AA:22:FA:2A:41:30:6A:CD:C8:13:7F
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3231372e36352e37302e302f32342d3234203d3e203537303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.65.70.0/24
Signature Algorithm: sha256WithRSAEncryption
61:a8:b3:32:79:c1:85:76:ab:90:5e:e6:16:72:39:b5:2e:56:
0e:23:74:85:da:5a:64:f9:1e:e0:30:15:55:4a:f7:17:7f:12:
0d:44:87:20:de:6d:b7:c3:e6:6b:35:72:e2:37:11:d7:86:b1:
8c:2c:aa:03:54:1e:03:41:b8:14:21:26:00:cb:07:48:a4:e5:
44:31:1e:e5:7b:c3:9a:f4:15:57:91:3e:8a:9a:d6:c7:b3:eb:
0b:78:d4:b5:f1:ba:9a:20:58:07:df:5b:af:76:b4:0a:71:20:
f1:9f:23:3d:d5:89:bf:0e:53:ad:22:7b:04:17:82:e2:97:01:
90:47:e6:27:c1:9a:fe:96:72:ca:e6:1e:f2:9f:15:59:49:b3:
6d:46:b6:c5:0c:cf:a9:4a:43:2b:e4:d7:b1:28:ef:b9:fa:42:
a1:9b:41:04:e8:6c:e4:c6:ff:35:54:6a:79:a8:01:22:c2:7c:
7a:32:a7:a2:89:03:82:c2:d8:50:b7:b6:5b:d6:09:66:be:d9:
dd:79:a8:d8:cb:ec:31:8b:cf:4e:09:65:44:19:ed:3f:04:12:
63:7d:18:f2:85:12:04:b7:61:8f:8a:9b:fe:6e:cd:88:e2:a6:
33:4e:14:24:30:8d:48:92:a1:39:d1:53:9b:6c:8e:16:04:88:
3b:19:cd:fd
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUJXbUIMlEvgbZsUdckhwBfnJi5jMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNTA4MTAwNjIyMDNaFw0yNjA4MDkwNjI3MDNaMDMxMTAvBgNV
BAMTKDIyMTg2QkI2QjdGMTIyMTBFQkFBMjJGQTJBNDEzMDZBQ0RDODEzN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxlBSs5/DOk82445mFnvqxM1/9
PL8riFSL1vbp8fR2shbVNEV2VHQe/XH9/wWq1SL2n+Eegj3ovSsEbeEY/n7k3K3Y
dUhsXvXbVHnfDGM3p7eegUh4LRA0aHFvLXalwif+RL5Zd+tS6WTCFJbFDY9TGwCs
5caWJ0K02PdrXZZH3opMZqXvaIC/9EBbKmz7ua/eC1D6YHQeru11e3neWRC2C6XJ
S4BbEzVhdGg568vuimablJqJUAOUwjdfjjCZdntoDTaIRpLNGuU2EDY0K9ZvIJI1
msus9DixXmIkriNn96crDWmQvLKr7lC9Y23KfCu3G+jbv1945xTSRyei2tm7AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUIhhrtrfxIhDrqiL6KkEwas3IE38wHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzIzMTM3MmUzNjM1MmUzNzMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNzMwMzQzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANlB
RjANBgkqhkiG9w0BAQsFAAOCAQEAYaizMnnBhXarkF7mFnI5tS5WDiN0hdpaZPke
4DAVVUr3F38SDUSHIN5tt8PmazVy4jcR14axjCyqA1QeA0G4FCEmAMsHSKTlRDEe
5XvDmvQVV5E+iprWx7PrC3jUtfG6miBYB99br3a0CnEg8Z8jPdWJvw5TrSJ7BBeC
4pcBkEfmJ8Ga/pZyyuYe8p8VWUmzbUa2xQzPqUpDK+TXsSjvufpCoZtBBOhs5Mb/
NVRqeagBIsJ8ejKnookDgsLYULe2W9YJZr7Z3Xmo2MvsMYvPTgllRBntPwQSY30Y
8oUSBLdhj4qb/m7NiOKmM04UJDCNSJKhOdFTm2yOFgSIOxnN/Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:12:41 2025 by rpki-client