Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133362e302f32332d3234203d3e20383334.roa
File: 3134372e3132352e3133362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: rSD/WgukJ7TYMXcubk3N5aZeivcShakNbitdWOEcO+w=
Subject key identifier: AB:06:75:D9:8E:AF:D0:3D:C0:20:59:8D:A2:0C:46:49:59:F3:23:C2
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 40E75D63416089ED851B47FFDEC391C06A942D9C
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133362e302f32332d3234203d3e20383334.roa
Signing time: Mon 07 Sep 2026 05:59:52 +0000
ROA not before: Mon 07 Sep 2026 05:54:52 +0000
ROA not after: Mon 06 Sep 2027 05:59:52 +0000
asID: 834
IP address blocks: 147.125.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 02:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:e7:5d:63:41:60:89:ed:85:1b:47:ff:de:c3:91:c0:6a:94:2d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 7 05:54:52 2026 GMT
Not After : Sep 6 05:59:52 2027 GMT
Subject: CN=AB0675D98EAFD03DC020598DA20C464959F323C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f7:73:c2:67:a5:2f:ed:90:9d:1a:da:a4:02:
13:e1:1a:ae:55:d4:24:68:56:6f:f4:b4:5b:81:8d:
67:2b:45:8f:95:fd:d3:71:58:64:58:6a:44:b0:6e:
6f:5f:b4:ae:04:0a:75:9e:17:ee:aa:04:31:14:27:
8f:06:23:10:b2:27:1e:56:32:b6:d8:dc:cb:f6:d8:
65:97:2b:3d:55:33:6d:1c:91:11:a3:a8:e6:23:3b:
69:39:dd:4c:f2:c4:65:b4:dd:76:36:62:dd:d0:df:
5e:ce:88:84:96:94:33:94:92:87:83:34:22:97:9d:
e4:40:26:95:55:8a:d9:67:84:28:09:ff:0f:2f:5b:
08:66:d4:2a:ea:57:c4:ad:e5:ed:13:91:47:c9:12:
d9:a8:2a:5e:61:34:73:55:8d:a3:4a:04:4c:cc:95:
f9:95:82:a3:ce:a5:f6:67:03:8a:9a:2e:37:95:e2:
bc:48:ac:e9:77:24:fa:09:4a:c6:fc:84:fd:34:05:
d9:63:10:06:44:0d:5e:57:b8:98:15:e0:ab:00:3d:
a3:05:9d:fb:bd:93:85:af:7c:1a:8a:dc:51:a2:65:
31:de:61:6a:eb:fb:68:18:03:7c:d0:ae:bb:26:ff:
74:dd:d1:71:97:be:4a:53:c2:f4:e2:55:1c:5d:da:
2f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:06:75:D9:8E:AF:D0:3D:C0:20:59:8D:A2:0C:46:49:59:F3:23:C2
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.136.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:d8:28:a5:26:cb:62:19:7b:a2:7a:91:c1:e4:72:50:b7:1e:
71:b7:8f:9f:1d:cc:b3:b0:da:76:3b:31:82:87:d0:ca:67:3a:
ae:d5:a0:1f:40:14:a4:80:c7:81:f6:9a:3e:63:c8:79:76:8d:
6e:0a:49:eb:fb:8b:07:3e:ca:d8:87:c9:a1:13:25:4c:6c:15:
1c:3c:89:06:76:4d:11:f0:b2:72:c8:52:71:25:02:33:de:c1:
e9:0c:24:a0:fe:7b:5d:7e:a3:ce:75:b7:50:06:35:26:99:b1:
28:5d:f2:9b:75:5f:5d:1d:c3:5d:07:46:61:f8:a9:59:1e:41:
55:20:e2:75:d0:72:33:84:e8:7f:94:8b:4a:97:b9:af:8f:21:
31:55:01:eb:42:5d:2d:9e:e7:1d:35:a9:8c:ec:46:9c:bd:aa:
ce:c4:d2:17:46:93:00:a6:26:b8:b0:ca:4f:54:75:4f:09:e8:
39:81:ae:2d:ac:85:79:80:ed:34:2f:45:20:ff:84:f4:bb:20:
01:e4:40:12:98:8a:5d:3a:55:d2:2d:f3:42:6a:b4:4b:c3:62:
4e:ed:a0:9d:d7:32:3b:f4:b5:85:9a:5b:60:37:ea:61:bb:18:
44:67:bd:6b:2f:07:cc:24:2c:d9:b9:61:10:bb:71:60:51:87:
c9:4b:42:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:16:20 2026 by rpki-client