Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136342e302f32322d3234203d3e20383334.roa
File: 3134372e3132352e3136342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: 3sYu+mfD60zC+1QLfB22oFXpYSzmbPzeHca5PMFO7bo=
Subject key identifier: 11:C1:F1:4F:6D:6B:8E:89:18:60:09:32:B5:6D:8A:E1:1D:1E:0B:58
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 192AD0582C3E96E8F449C441ACBD01BA0C50651C
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136342e302f32322d3234203d3e20383334.roa
Signing time: Wed 23 Sep 2026 07:10:45 +0000
ROA not before: Wed 23 Sep 2026 07:05:45 +0000
ROA not after: Wed 22 Sep 2027 07:10:45 +0000
asID: 834
IP address blocks: 147.125.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:2a:d0:58:2c:3e:96:e8:f4:49:c4:41:ac:bd:01:ba:0c:50:65:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 23 07:05:45 2026 GMT
Not After : Sep 22 07:10:45 2027 GMT
Subject: CN=11C1F14F6D6B8E8918600932B56D8AE11D1E0B58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:85:17:71:99:86:02:c6:0a:a1:e9:fc:0e:f7:
76:ea:cf:dd:d3:29:a6:f0:03:27:2c:db:b0:25:18:
7b:ad:9b:7a:7f:d9:9c:ee:a8:10:f1:cf:11:35:95:
f6:5d:58:c5:27:37:0f:bc:14:a5:48:2e:0e:79:88:
e9:fc:74:5d:b0:be:bd:63:90:35:74:cb:a7:a9:7c:
8a:82:d4:eb:a2:dd:2a:69:e3:12:b1:50:63:29:5f:
d2:77:be:53:2c:14:75:55:93:e9:97:09:e0:2a:41:
c6:92:4f:c2:94:f7:fd:92:a8:de:49:f6:0a:b1:d8:
2c:9f:4f:f0:9f:39:b0:d9:8d:58:fc:0a:42:5f:38:
86:14:c7:99:92:06:b5:3a:84:6b:7a:36:72:a9:ea:
78:8c:ab:d7:15:2a:e4:ad:91:b3:37:52:d0:b8:83:
e7:1c:6f:8b:b4:a4:7f:21:42:89:e3:9e:2f:d5:7e:
f0:92:a9:aa:3d:01:ae:0d:eb:a4:c2:ec:c4:8c:51:
0a:76:17:56:e7:72:a8:b3:5f:b5:4a:70:1d:f6:cb:
ae:e2:02:40:e8:2c:1e:59:6c:67:93:fe:4f:96:94:
8e:66:f3:00:2a:dc:68:89:3d:ee:d7:aa:ec:85:0b:
c0:12:dd:30:26:c5:54:fc:c1:e3:1e:8a:6e:58:92:
ea:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C1:F1:4F:6D:6B:8E:89:18:60:09:32:B5:6D:8A:E1:1D:1E:0B:58
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136342e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.164.0/22
Signature Algorithm: sha256WithRSAEncryption
97:e6:22:10:c7:13:a0:d1:31:1c:80:79:f4:8e:01:9c:24:50:
4c:54:72:74:5b:39:40:04:eb:56:03:2b:b1:b2:c1:db:3d:51:
e5:40:ca:83:3e:60:2a:46:22:d9:57:b7:56:7b:18:8d:63:b3:
aa:8f:0d:ec:7c:3d:e7:06:a9:17:7f:b6:69:d2:b7:58:33:b4:
ba:8d:64:9d:ed:50:4c:75:16:6b:44:71:1c:32:6b:68:c7:dc:
f8:0c:b2:fe:f3:be:bd:4b:f4:d1:0f:32:fb:49:89:8e:3c:5f:
0b:f2:1b:03:15:7f:c0:df:93:f5:c2:b2:0e:be:4d:0e:fa:3b:
e8:1a:49:a4:72:a3:87:0e:29:93:58:ae:4d:f4:1c:36:18:22:
1e:88:e0:60:f0:47:5b:4d:f2:7c:db:e5:bf:32:99:9b:59:66:
3f:7c:eb:da:27:aa:0e:f3:72:52:d7:fd:f6:ef:20:21:09:8f:
28:1d:c0:7f:af:c7:48:e4:c7:bd:6c:78:84:bc:57:f0:54:67:
bc:07:bd:8a:8a:f1:35:64:6d:df:0d:4b:c8:57:98:32:82:23:
3b:72:5a:90:6d:5a:dc:8b:db:2b:4c:8a:81:03:b0:1e:d1:3e:
30:97:42:0e:00:81:cc:0a:d2:69:ed:60:3f:15:ba:b2:0a:e3:
e0:5b:6f:54
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUGSrQWCw+luj0ScRBrL0BugxQZRwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNjA5MjMwNzA1NDVaFw0yNzA5MjIwNzEwNDVaMDMxMTAvBgNV
BAMTKDExQzFGMTRGNkQ2QjhFODkxODYwMDkzMkI1NkQ4QUUxMUQxRTBCNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCthRdxmYYCxgqh6fwO93bqz93T
KabwAycs27AlGHutm3p/2ZzuqBDxzxE1lfZdWMUnNw+8FKVILg55iOn8dF2wvr1j
kDV0y6epfIqC1Oui3Spp4xKxUGMpX9J3vlMsFHVVk+mXCeAqQcaST8KU9/2SqN5J
9gqx2CyfT/CfObDZjVj8CkJfOIYUx5mSBrU6hGt6NnKp6niMq9cVKuStkbM3UtC4
g+ccb4u0pH8hQonjni/VfvCSqao9Aa4N66TC7MSMUQp2F1bncqizX7VKcB32y67i
AkDoLB5ZbGeT/k+WlI5m8wAq3GiJPe7XquyFC8AS3TAmxVT8weMeim5YkuohAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUEcHxT21rjokYYAkytW2K4R0eC1gwHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx
MzYzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEApN9
pDANBgkqhkiG9w0BAQsFAAOCAQEAl+YiEMcToNExHIB59I4BnCRQTFRydFs5QATr
VgMrsbLB2z1R5UDKgz5gKkYi2Ve3VnsYjWOzqo8N7Hw95wapF3+2adK3WDO0uo1k
ne1QTHUWa0RxHDJraMfc+Ayy/vO+vUv00Q8y+0mJjjxfC/IbAxV/wN+T9cKyDr5N
Dvo76BpJpHKjhw4pk1iuTfQcNhgiHojgYPBHW03yfNvlvzKZm1lmP3zr2ieqDvNy
Utf99u8gIQmPKB3Af6/HSOTHvWx4hLxX8FRnvAe9iorxNWRt3w1LyFeYMoIjO3Ja
kG1a3IvbK0yKgQOwHtE+MJdCDgCBzArSae1gPxW6sgrj4FtvVA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 03:29:03 2026 by rpki-client