Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133382e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3133382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Fczl2KkNUhIe9TF9i0y9RhlaAoxYeyx6gbbJ0ohX7cY=
Subject key identifier: 39:66:A1:96:45:C3:C2:15:21:50:6A:92:0D:F4:B8:FE:01:52:5E:27
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 767574E1142569CC089A12F7E0C03025C8B6C5B4
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133382e302f32342d3234203d3e20383334.roa
Signing time: Mon 07 Sep 2026 05:59:52 +0000
ROA not before: Mon 07 Sep 2026 05:54:52 +0000
ROA not after: Mon 06 Sep 2027 05:59:52 +0000
asID: 834
IP address blocks: 147.125.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:75:74:e1:14:25:69:cc:08:9a:12:f7:e0:c0:30:25:c8:b6:c5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 7 05:54:52 2026 GMT
Not After : Sep 6 05:59:52 2027 GMT
Subject: CN=3966A19645C3C21521506A920DF4B8FE01525E27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:90:b6:9d:69:64:f8:8b:8d:b8:88:01:17:cf:
0d:d5:51:09:0c:2d:69:ac:a1:c4:6c:dd:4c:d6:db:
b0:f6:95:8e:03:39:a5:7d:e1:b2:da:f2:66:97:f4:
7b:a4:f4:0d:e5:77:3b:5a:41:4b:38:5c:13:22:85:
e6:59:b1:04:16:4f:52:b7:0d:4c:c6:cb:93:13:e2:
21:e7:8d:13:1d:e0:9d:e9:e5:25:04:fd:f0:5a:d7:
4a:a3:83:d7:9f:1b:8b:fa:23:47:b8:9d:50:91:46:
f4:fe:75:57:8f:5a:0e:c0:4f:a8:87:26:a2:43:e2:
4d:03:12:5d:1e:c8:81:2e:7e:51:dd:93:60:90:72:
5a:eb:e7:ce:9c:ba:60:80:86:62:3c:df:34:de:76:
4c:81:89:c5:b6:9e:f5:be:2b:21:eb:79:f5:75:4f:
70:1a:57:b4:5b:c8:5a:7b:8c:1f:de:50:9e:24:a3:
f2:14:16:99:09:f0:9b:fc:5c:83:3e:6a:85:ca:36:
2b:e4:83:e7:d8:95:40:3a:b0:11:c6:c1:21:86:53:
16:63:5b:c2:d4:75:0b:6b:ff:17:57:20:71:93:05:
ec:1f:e8:c7:d2:64:ef:8c:c1:ee:c7:5b:d5:22:45:
2d:70:88:83:a4:66:5f:b7:15:bd:49:03:e3:d4:c8:
d1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:66:A1:96:45:C3:C2:15:21:50:6A:92:0D:F4:B8:FE:01:52:5E:27
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.138.0/24
Signature Algorithm: sha256WithRSAEncryption
01:37:fc:b8:3a:6a:85:de:4a:42:ce:cb:1d:d3:4e:cd:d1:4e:
1a:ce:c2:00:f7:96:39:ed:2e:11:db:58:e8:24:b2:a3:c2:3a:
b2:1a:72:8d:75:f3:94:a9:a2:fb:9e:d4:64:e3:13:0f:73:6c:
c6:f6:02:ef:a6:e0:99:f2:b6:02:ff:4e:95:ca:ae:c1:c7:f5:
1e:08:fa:f4:bc:fb:26:a7:f4:e2:10:eb:f3:d4:d5:3b:c8:11:
ba:9e:ad:a6:74:09:17:6f:58:b2:51:42:b3:c1:3e:c3:ec:e4:
67:60:7e:c6:7d:6e:f2:47:36:08:ba:eb:de:d7:5b:0b:ff:a1:
e7:bc:f5:b8:84:67:4c:fb:d7:e3:fa:45:6b:7d:9c:fc:7c:d9:
8f:a7:e4:b7:b9:0d:f7:43:e5:25:ca:ff:52:77:63:cb:5c:a7:
e5:33:fd:92:65:9b:ee:70:10:bb:14:96:8d:df:49:c0:ff:31:
32:11:42:27:fa:2a:1f:a2:5e:ef:88:6e:e6:28:72:06:72:ce:
33:55:86:c4:88:9c:45:bf:22:1c:60:83:6b:1b:31:0d:89:14:
51:11:52:88:36:89:a6:10:83:47:67:72:10:17:7f:32:c3:92:
cd:8d:4b:d3:f4:1c:2e:e6:cf:47:4c:bc:41:be:fe:27:ac:b0:
2c:7a:bd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:43:50 2026 by rpki-client