Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134302e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3134302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: mndQjOhZeWIokTtSDbYaMbKeA9CsMjQqeVMZTZS5+jw=
Subject key identifier: 10:1B:10:EF:13:BA:29:D9:49:BA:7B:3F:9E:38:8C:83:EA:05:AD:5C
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 68CAA49CDCA1C6264403A6E663A7205FFA80C9C2
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134302e302f32342d3234203d3e20383334.roa
Signing time: Tue 22 Sep 2026 11:15:19 +0000
ROA not before: Tue 22 Sep 2026 11:10:19 +0000
ROA not after: Tue 21 Sep 2027 11:15:19 +0000
asID: 834
IP address blocks: 147.125.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:ca:a4:9c:dc:a1:c6:26:44:03:a6:e6:63:a7:20:5f:fa:80:c9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 22 11:10:19 2026 GMT
Not After : Sep 21 11:15:19 2027 GMT
Subject: CN=101B10EF13BA29D949BA7B3F9E388C83EA05AD5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:03:4b:e4:4a:5d:61:46:50:3e:ab:96:68:
0f:07:c0:db:b9:6e:75:29:87:10:c4:aa:63:17:29:
6e:77:20:9c:8a:ed:dc:a5:45:fa:29:fd:cd:a1:bc:
3e:8b:81:70:f0:01:ce:f1:d0:7f:b7:a2:b9:af:8e:
af:fe:a7:84:33:17:11:f7:41:55:d4:89:06:51:86:
8e:5a:50:fc:e8:df:8c:12:fe:9b:d8:b8:6c:61:eb:
de:5c:e8:2d:fa:bc:f4:2b:1a:b2:7c:32:fa:0a:f6:
fc:89:96:77:f9:a2:0a:b1:8c:ff:55:12:cd:1e:e7:
b5:eb:55:eb:c1:24:ee:73:7e:68:b0:70:bf:18:4a:
e3:62:f2:61:4d:06:22:42:39:f6:51:2b:be:75:f0:
92:37:a7:d8:93:c7:3d:1d:11:46:91:c2:3c:89:5a:
dc:05:4e:27:15:b2:c9:e1:54:e8:8d:55:f1:15:20:
2e:cf:1f:3e:43:46:64:64:de:71:c4:c9:ba:7d:90:
e7:fb:bc:46:06:80:fb:86:8c:c0:6c:db:cc:2c:42:
0c:c5:eb:2f:77:db:7d:f0:65:1e:41:91:ba:29:62:
85:ce:18:b0:7b:0e:59:ff:fb:dc:2d:e0:73:c1:51:
a1:49:6f:98:6c:5c:b0:7d:4e:55:b2:73:bc:a0:30:
6c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1B:10:EF:13:BA:29:D9:49:BA:7B:3F:9E:38:8C:83:EA:05:AD:5C
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.140.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:1f:29:17:64:6a:4a:d9:c2:3a:e1:fd:f9:75:cb:0e:3d:ad:
ef:17:db:ff:ed:b0:e8:4e:59:aa:45:32:ef:a7:72:86:51:c0:
7c:c9:3f:1e:8c:cd:ae:74:a9:47:da:49:4b:8d:a2:c4:80:cd:
41:f7:2b:e6:0a:d7:fa:c0:c4:a1:26:71:03:34:23:55:59:fe:
5f:0f:9d:73:2a:3f:b3:87:b5:da:12:f3:f3:a0:04:fc:9a:c5:
28:7e:e2:c3:c2:99:25:4e:15:93:9d:53:43:de:aa:f3:ec:8c:
d0:d3:a1:b2:37:fc:30:8b:9a:4b:96:20:cc:7b:59:7b:f3:b8:
c8:5e:a5:a5:db:97:e8:f3:74:3a:44:31:a8:83:20:f3:4c:42:
ab:e4:9e:f3:e6:f8:49:f8:00:2d:90:12:6b:d9:40:6f:77:de:
4d:be:d1:ae:aa:93:a4:9a:03:52:b1:d8:9e:9a:3b:72:b3:e7:
76:fb:c6:f1:2e:34:43:32:55:5b:6d:3f:27:3b:fd:86:62:91:
69:6e:4c:14:a5:4e:e9:6c:04:63:d6:73:99:3e:a0:d3:69:ee:
a3:6d:96:e1:73:03:9f:33:e6:ce:ae:68:43:75:8d:fa:f6:b3:
ae:b2:ec:94:d1:e2:4b:ce:0c:86:ce:0a:8a:c6:2d:ed:59:1f:
3c:45:e0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:45:51 2026 by rpki-client