Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133392e302f32342d3234203d3e20323138383239.roa
File: 3134372e3132352e3133392e302f32342d3234203d3e20323138383239.roa (raw, json)
Hash identifier: UUwApIDfDNCDLkOIOL2Mo6+UeQF90BYd9YC7D7JopQY=
Subject key identifier: 3E:92:ED:EB:4C:30:6D:23:4F:CF:8E:26:CD:B2:4A:83:11:70:F4:63
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 1555FA1CD19BF30065C7874B208A34C2CD60DA50
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133392e302f32342d3234203d3e20323138383239.roa
Signing time: Mon 07 Sep 2026 05:57:40 +0000
ROA not before: Mon 07 Sep 2026 05:52:40 +0000
ROA not after: Mon 06 Sep 2027 05:57:40 +0000
asID: 218829
IP address blocks: 147.125.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:55:fa:1c:d1:9b:f3:00:65:c7:87:4b:20:8a:34:c2:cd:60:da:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 7 05:52:40 2026 GMT
Not After : Sep 6 05:57:40 2027 GMT
Subject: CN=3E92EDEB4C306D234FCF8E26CDB24A831170F463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:75:18:00:9e:66:58:f3:71:cb:25:1a:4f:c9:
54:4d:77:65:b8:f9:76:17:5a:d7:9a:3e:0e:a5:43:
32:71:59:82:24:d2:4b:8c:71:29:80:65:d8:c8:3c:
85:02:0e:22:1f:f4:4e:45:ee:b8:0a:42:b0:d0:19:
d9:b5:df:5e:da:0e:03:ec:02:2e:8c:7f:e7:28:64:
bc:75:be:d5:71:71:75:c0:cc:8b:b6:7a:85:84:cb:
c8:0d:7d:85:64:59:ce:0a:0a:0b:b3:ce:8b:a7:e0:
86:5c:2a:13:7f:e7:ff:d0:7a:b8:92:3e:2b:4d:44:
1e:18:5d:8e:0f:41:e7:0c:ae:18:45:4b:f9:fb:e9:
bb:4b:3b:c3:b7:86:f2:9a:52:1d:4a:f0:fa:c4:67:
5a:67:4e:31:e9:be:b0:cf:3a:b3:6c:09:25:12:16:
d0:34:9b:4f:51:db:dd:f5:3c:d2:22:81:7f:54:99:
48:a1:75:af:aa:3b:87:66:5c:44:2a:54:c4:89:ad:
fe:93:29:a4:c2:07:f2:6e:f4:7d:52:98:57:9a:06:
8e:73:0b:25:35:20:61:c1:7a:f7:50:d6:64:af:34:
6b:ad:c3:4d:68:5e:be:d4:a2:7a:92:2d:1a:4f:eb:
a0:ee:a0:de:75:50:65:54:3c:91:1f:71:68:04:8a:
46:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:92:ED:EB:4C:30:6D:23:4F:CF:8E:26:CD:B2:4A:83:11:70:F4:63
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133392e302f32342d3234203d3e20323138383239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.139.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:30:9a:a8:86:be:48:3a:89:e2:52:cc:3d:b0:9d:b0:2d:05:
da:6e:63:3d:d0:7b:58:99:d2:6d:83:e8:9f:ad:6a:1d:d1:a6:
45:07:db:e7:b1:2a:be:a9:a6:60:f2:39:b5:66:91:85:22:27:
e8:1c:54:b1:97:3c:3d:85:76:e0:2f:26:58:be:de:93:aa:98:
11:ce:fb:8e:d9:ff:24:c5:73:fd:82:6c:94:c4:37:10:da:2d:
fa:6d:87:51:0e:33:59:e4:c5:00:7f:4c:17:fa:1f:12:a5:83:
56:34:ca:93:ac:e1:ae:95:9d:cd:a0:57:92:49:c7:8a:84:95:
ea:5e:d7:e7:03:b2:cf:80:31:5a:a0:a1:14:14:e6:21:b2:c1:
91:3d:4c:35:f1:0f:ce:57:b8:0b:ad:80:25:82:b3:f2:fc:51:
00:1c:e7:18:48:48:c1:e1:36:37:04:c1:6a:a3:4a:b8:55:4b:
83:c3:0c:05:23:be:31:3b:a8:82:75:6e:37:f0:b0:e8:73:23:
3b:09:fb:2e:9a:73:d0:ec:d8:f5:d0:a6:26:02:b6:73:d6:07:
7d:7c:58:83:58:be:c1:31:54:68:6d:0a:88:bf:f8:15:1b:d6:
86:2f:70:a3:7d:18:4d:41:08:e6:05:7a:c8:13:f8:19:0e:af:
84:ee:ce:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:54:01 2026 by rpki-client