Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136362e302f32332d3234203d3e20383334.roa
File: 3134372e3132352e3136362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: yVWwlgGptqBds/Ren9IlUfvfsbfKWhhlnvQrnhotwbA=
Subject key identifier: EC:3E:EE:3E:E0:3A:6D:97:4E:D0:58:13:24:0C:FE:04:50:CF:F9:E2
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 026043DDC0677B176B7E97C07C757443EC2776AA
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136362e302f32332d3234203d3e20383334.roa
Signing time: Sun 23 Aug 2026 07:16:23 +0000
ROA not before: Sun 23 Aug 2026 07:11:23 +0000
ROA not after: Sun 22 Aug 2027 07:16:23 +0000
asID: 834
IP address blocks: 147.125.166.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:60:43:dd:c0:67:7b:17:6b:7e:97:c0:7c:75:74:43:ec:27:76:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Aug 23 07:11:23 2026 GMT
Not After : Aug 22 07:16:23 2027 GMT
Subject: CN=EC3EEE3EE03A6D974ED05813240CFE0450CFF9E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3d:53:78:53:19:d2:68:3a:6a:23:e7:34:c7:
5e:0c:fc:82:ad:f2:27:1f:9a:fe:6f:dc:db:18:ea:
b4:b5:4d:ce:63:e9:bc:b0:bf:cf:35:c9:5f:f3:4a:
fb:00:48:ba:bf:62:b0:83:5b:20:80:7f:b3:e8:fb:
c1:3a:9a:67:01:fe:2e:0c:88:a1:b1:59:e4:6a:ac:
98:45:7c:e4:f7:e5:f5:be:ac:3b:90:22:4d:fe:3b:
9c:f6:20:ce:01:cd:84:4b:45:0f:84:19:98:ed:a9:
e0:9e:66:b3:06:a9:00:83:3b:a2:a4:bc:38:28:94:
bc:23:5e:56:81:bb:2e:20:3a:de:48:a0:f3:3a:31:
00:92:00:92:b3:e9:7c:2a:3a:cb:b6:3e:13:a5:54:
c9:7f:b8:cd:11:00:b5:a8:60:0c:0f:5d:ac:ca:63:
13:e5:f4:42:70:64:10:97:0d:b9:5a:0d:a8:c2:b8:
4f:10:b8:2b:d5:9f:3b:d0:98:19:ab:21:05:98:aa:
ba:9d:47:51:02:2f:70:96:8a:94:32:f8:54:40:6d:
23:a8:02:65:bf:84:f0:a7:8c:f0:72:07:7f:00:e6:
d8:72:c6:31:ed:3b:6c:66:0f:1c:c9:19:ee:75:89:
0d:cf:51:c2:49:a7:2b:dd:61:cc:9c:24:d5:14:7a:
f6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3E:EE:3E:E0:3A:6D:97:4E:D0:58:13:24:0C:FE:04:50:CF:F9:E2
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.166.0/23
Signature Algorithm: sha256WithRSAEncryption
24:1a:e3:37:c2:1c:d6:ab:f4:36:62:71:0c:d6:53:ac:9d:6b:
78:dc:80:c2:73:c7:bb:60:64:d6:14:4f:e5:e7:85:a0:66:db:
64:17:0f:05:22:1b:40:15:9e:b5:e7:5c:10:bf:0a:cf:d6:e3:
1e:0a:60:3e:fd:2e:c3:a1:a2:e7:dc:05:bf:e6:40:2b:d8:af:
8a:24:88:cd:21:9b:71:2d:c3:f8:4e:71:88:76:6c:0b:c6:94:
fc:1c:a0:3b:f9:37:1c:86:8c:5f:7b:95:eb:e0:31:30:5a:b1:
a5:94:4b:4b:17:2f:8c:5d:e8:8a:61:bb:b2:81:21:1c:39:84:
f1:6e:c3:ec:d3:b9:81:0e:02:a4:5f:4a:b4:bb:07:39:7e:31:
ea:be:8c:d8:45:38:59:3a:60:f3:1f:30:94:85:3a:67:c9:05:
5a:66:f0:cf:f6:ec:e3:94:16:59:15:b1:cb:d9:7a:81:db:69:
da:5b:08:f2:54:75:b5:59:41:23:ab:9f:ce:68:0d:2b:f2:79:
d6:40:c5:62:17:1b:98:28:2a:bb:3c:25:40:20:d6:a5:be:1e:
48:f1:27:c8:9f:8a:a0:f4:75:9a:8a:29:8d:39:5c:d9:f3:34:
c3:61:35:c0:27:53:44:bb:97:0e:83:2a:21:e5:a8:d1:55:c6:
98:c3:97:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:21:49 2026 by rpki-client