Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133362e302f32322d3234203d3e20383334.roa
File: 3134372e3132352e3133362e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: KQKj1yu9bOgj6IgamT1iJuE0yqx3M2L9YOl2IygKvg4=
Subject key identifier: 42:41:BE:32:24:8F:DE:83:49:7B:CB:2E:F6:65:4A:03:AC:7F:7B:DC
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 56D8C627EFA5D9AED5F91116B9C241CB22547201
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133362e302f32322d3234203d3e20383334.roa
Signing time: Thu 19 Feb 2026 10:30:14 +0000
ROA not before: Thu 19 Feb 2026 10:25:14 +0000
ROA not after: Thu 18 Feb 2027 10:30:14 +0000
asID: 834
IP address blocks: 147.125.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:d8:c6:27:ef:a5:d9:ae:d5:f9:11:16:b9:c2:41:cb:22:54:72:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Feb 19 10:25:14 2026 GMT
Not After : Feb 18 10:30:14 2027 GMT
Subject: CN=4241BE32248FDE83497BCB2EF6654A03AC7F7BDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:1a:0a:e8:79:47:75:21:6d:8d:ee:4b:57:
6d:d3:12:05:7b:ce:60:92:96:bb:f8:02:29:f6:84:
ea:e4:47:06:f8:2c:c1:25:62:2a:fc:52:47:2c:ce:
3d:2d:49:10:92:9f:76:4c:6b:30:f4:02:06:cc:1e:
e3:88:f8:3b:47:10:a3:31:83:06:c0:de:a9:5d:33:
52:f2:02:02:e4:e3:e4:b8:46:ea:ab:62:44:a3:a9:
eb:c3:d8:0f:88:bc:63:12:2e:6b:65:cf:d7:4e:1d:
e4:98:8a:25:64:64:c4:e4:0a:ac:87:0b:6b:08:d8:
38:69:ef:30:a7:ed:8b:23:99:43:21:a5:5b:c8:fa:
aa:9b:97:64:e6:44:9f:74:d2:77:14:b7:d8:bc:9a:
b4:e6:30:29:cb:65:1d:ca:9f:1d:ed:b1:64:51:4a:
84:56:b3:28:e9:53:1e:93:3f:1b:83:1a:67:30:a9:
35:da:d4:3b:0b:9b:b5:18:da:7d:4c:b2:b1:7f:e1:
ca:1a:3a:f3:6f:d1:40:56:e2:9a:b2:69:32:d7:4d:
10:7d:fb:7e:9a:2f:64:65:b9:67:57:a5:4b:f7:9c:
75:4e:78:a7:00:b7:55:9a:2d:0b:37:32:40:b7:de:
56:1f:19:61:60:7f:96:99:a4:13:2c:4e:94:50:05:
26:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:41:BE:32:24:8F:DE:83:49:7B:CB:2E:F6:65:4A:03:AC:7F:7B:DC
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133362e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.136.0/22
Signature Algorithm: sha256WithRSAEncryption
11:00:55:35:eb:4c:80:7e:dd:33:4b:72:40:e9:1e:fb:9f:78:
99:e7:ec:64:57:35:fc:2c:a5:2e:8f:41:b6:65:58:5d:54:1d:
fb:5d:51:97:3b:b7:8a:7b:d5:91:aa:46:2c:e6:32:dd:99:b6:
a8:f2:29:46:2d:22:c7:76:bc:b4:e7:a6:bc:df:8c:2b:81:6a:
ba:a8:36:d4:36:07:72:80:e0:9a:81:1f:ff:9e:4a:6a:80:24:
02:4b:e3:13:07:00:ff:95:e0:26:1c:51:37:ac:33:d3:78:be:
3e:85:70:50:ed:3e:f1:f4:09:52:2f:1f:ea:32:1d:82:78:5c:
f4:76:8c:d0:15:1a:c5:b1:75:a7:d7:f5:3f:ef:37:97:c3:b6:
16:79:c9:24:98:fb:2b:02:50:5e:42:53:b4:a3:3c:66:16:15:
e3:a5:2f:70:19:69:a9:26:17:66:01:f8:eb:08:07:63:ec:6e:
e4:b2:13:bb:be:a3:10:fb:61:0e:f1:f0:b0:08:11:c5:ad:c4:
21:8c:68:d8:67:a8:1e:39:63:0a:2d:1d:5c:e7:fe:73:6d:23:
95:26:44:84:38:c9:67:78:e8:9a:82:c2:7e:33:48:19:50:37:
f9:02:9d:bb:b1:0f:ca:11:4d:45:6e:98:83:09:bb:c0:96:b4:
b8:92:ea:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:19:26 2026 by rpki-client