Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134312e302f32342d3234203d3e20343032323635.roa
File: 3134372e3132352e3134312e302f32342d3234203d3e20343032323635.roa (raw, json)
Hash identifier: mwzkEhoC5+8t7aWtfrk4TBoTHjiUCilpSjUMUu9ovco=
Subject key identifier: 25:3D:97:3A:14:35:0C:44:56:83:D5:42:B9:1F:5B:8A:BF:35:5B:88
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 30E9AD41E9A88052121A94380CA5C2A0336DB9A0
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134312e302f32342d3234203d3e20343032323635.roa
Signing time: Tue 22 Sep 2026 11:15:10 +0000
ROA not before: Tue 22 Sep 2026 11:10:10 +0000
ROA not after: Tue 21 Sep 2027 11:15:10 +0000
asID: 402265
IP address blocks: 147.125.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:10:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:e9:ad:41:e9:a8:80:52:12:1a:94:38:0c:a5:c2:a0:33:6d:b9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 22 11:10:10 2026 GMT
Not After : Sep 21 11:15:10 2027 GMT
Subject: CN=253D973A14350C445683D542B91F5B8ABF355B88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:47:c8:a4:08:35:d8:d8:77:30:3d:74:12:ef:
5b:77:11:0f:66:00:22:a7:53:06:07:4d:b4:a3:8a:
aa:06:dd:15:22:46:3b:92:94:71:8b:4f:89:ed:8e:
4b:b2:ba:1d:cf:15:7f:ae:09:f5:27:8d:80:52:0e:
4b:fd:f4:b9:8d:d8:d7:cd:77:0b:d4:69:c4:a5:9d:
77:a9:e3:27:d6:16:bd:2e:2e:92:aa:e0:c6:b2:cf:
d8:44:39:4e:cf:b2:d4:71:9c:1a:f3:b4:b1:8e:9d:
48:de:04:b6:7b:63:95:59:84:87:b8:ef:1a:f2:3b:
96:4c:ee:f4:71:c6:16:c5:7a:a8:c1:e6:35:d1:07:
17:17:70:a6:b0:43:52:99:b1:e7:48:69:59:c0:83:
bc:70:b9:a0:0d:29:78:d9:5f:ce:9d:58:39:08:62:
37:de:ab:6e:d7:68:69:55:37:c7:d4:39:00:05:1e:
f8:a7:a9:4c:39:f7:fc:26:73:af:8d:af:20:83:1a:
1b:c1:8f:3c:d1:2a:f9:e2:85:ef:05:44:22:a7:23:
e8:ee:95:09:ca:7a:39:13:55:98:36:21:96:05:29:
bf:8e:a5:08:0b:c7:9f:bd:d7:2b:a1:a5:bd:24:23:
d6:c2:76:1b:f9:ac:71:3d:a2:bf:4e:32:0b:27:45:
7d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3D:97:3A:14:35:0C:44:56:83:D5:42:B9:1F:5B:8A:BF:35:5B:88
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134312e302f32342d3234203d3e20343032323635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.141.0/24
Signature Algorithm: sha256WithRSAEncryption
03:43:20:35:a1:3b:2a:31:f0:c9:50:e6:8d:e3:03:6e:66:43:
74:3a:ff:58:af:18:35:48:1d:14:51:a0:6c:97:03:51:79:ce:
94:f7:02:fc:4a:57:41:af:20:ec:66:6f:6d:4a:6c:05:9c:05:
3a:bc:38:21:32:c2:5d:7b:e3:94:33:f1:75:1a:51:e8:a3:02:
0f:cf:16:8d:d3:44:68:cc:c8:8b:83:76:02:0c:94:e1:ab:24:
d7:16:7a:8a:71:bc:26:60:72:20:5d:11:c6:01:f8:8b:75:8e:
c2:33:ef:d8:ab:e0:92:6a:0e:56:ee:f8:25:18:a0:38:dc:57:
a5:1b:26:ca:8f:71:06:a6:18:dd:fd:0c:88:07:00:bd:d3:66:
f9:f9:d7:88:a4:e2:dc:c6:62:50:81:5a:d0:40:82:42:24:f4:
75:1a:23:72:87:f8:ca:22:31:5b:e8:9c:ee:34:2b:c0:b3:14:
81:49:61:5c:01:d0:41:d8:0a:3b:5f:b8:66:00:43:f6:a4:0f:
d9:6c:ea:63:7e:c5:81:e3:65:c8:94:75:e2:c2:65:e8:25:6b:
87:5b:3a:00:09:c9:73:b6:3d:0b:b7:7e:7b:70:a3:7c:66:0d:
17:18:13:97:b2:e4:82:21:53:32:60:5a:17:34:d4:f1:4b:50:
02:17:11:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:30:54 2026 by rpki-client