Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137302e302f32332d3234203d3e20383334.roa
File: 3134372e3132352e3137302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: FsXf/98FXmJrAUJrGIHgH7/L8XHJHFvGZ7GCpHljO70=
Subject key identifier: A9:E4:A6:44:6F:0F:74:7C:7B:9C:13:99:DA:80:16:0B:BB:70:0C:31
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 525EB8F88C30EFE89597FA613B1DC8FC71CC02FD
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137302e302f32332d3234203d3e20383334.roa
Signing time: Mon 17 Aug 2026 05:26:45 +0000
ROA not before: Mon 17 Aug 2026 05:21:45 +0000
ROA not after: Mon 16 Aug 2027 05:26:45 +0000
asID: 834
IP address blocks: 147.125.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:5e:b8:f8:8c:30:ef:e8:95:97:fa:61:3b:1d:c8:fc:71:cc:02:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Aug 17 05:21:45 2026 GMT
Not After : Aug 16 05:26:45 2027 GMT
Subject: CN=A9E4A6446F0F747C7B9C1399DA80160BBB700C31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:91:77:9f:76:05:ea:15:b3:73:c8:c0:85:40:
9f:5e:ed:6f:60:ed:41:a0:d1:de:6d:b5:eb:b6:c7:
a0:bf:09:21:6f:82:93:ca:09:33:f3:44:19:d8:32:
34:2a:09:9f:b6:7d:61:e0:66:e7:d0:f9:27:88:90:
e9:d0:3e:c3:a9:a3:07:a2:cb:24:c5:77:74:4f:15:
9d:89:68:28:e9:c9:55:bd:7b:c7:ed:88:1a:8d:be:
5c:73:06:00:e1:21:4a:96:22:02:e3:29:00:80:a9:
0c:59:61:20:97:a5:48:f5:21:4e:47:ae:0c:3e:e6:
ea:cf:2f:4a:6d:05:6b:04:86:32:02:b1:48:3b:a6:
0b:7b:0d:ab:cf:33:80:ed:1a:ee:a0:b4:6a:fc:f4:
3d:d4:a8:d5:eb:38:12:fd:90:3e:20:ec:31:34:ad:
55:3c:cd:df:11:bc:b3:94:73:41:2b:64:57:e0:36:
d9:61:b2:3f:ce:54:a3:c6:4b:a3:67:fc:90:58:c7:
63:af:71:02:22:f1:56:b3:74:f3:12:67:aa:86:64:
77:f8:bf:0b:74:74:c1:ad:6a:79:9b:da:c2:cb:2a:
b4:f7:b5:09:27:d4:8c:33:8e:a9:57:ab:79:93:a2:
2b:ab:88:f4:6a:a4:7e:c1:31:69:c4:2a:f5:f2:fc:
8f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E4:A6:44:6F:0F:74:7C:7B:9C:13:99:DA:80:16:0B:BB:70:0C:31
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.170.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:31:d1:37:8a:40:f9:a1:b0:76:d9:f4:8d:75:b8:51:02:a5:
4e:c5:39:1a:65:da:08:0b:0c:30:57:e8:41:30:4c:95:d7:11:
f5:ad:d5:45:af:b7:41:06:a0:8c:87:d9:08:24:84:fc:9d:20:
98:c5:a9:8e:84:4e:a0:c9:28:57:ba:f1:0a:87:e3:30:72:22:
90:30:db:a3:e9:50:82:24:2d:cd:71:08:75:f2:ec:a0:f0:80:
19:39:95:ef:02:31:0c:48:57:e1:74:c9:f6:19:3b:bb:8a:b4:
e1:47:45:13:9d:bb:3d:a2:1a:c5:7c:aa:f6:25:c5:34:cd:07:
0b:c0:5f:9b:e1:24:6d:17:e0:fb:95:ee:74:fa:3c:82:cc:cf:
8f:a6:6a:fd:84:9f:a4:3d:e6:4c:e0:dc:16:35:2d:35:24:9e:
3a:42:41:7f:70:a2:15:59:cf:ac:c8:e8:dc:8c:01:a4:15:e1:
db:11:07:40:d9:74:dc:3b:7b:67:61:4d:b9:6a:79:26:2c:a9:
a0:d4:ed:a2:49:77:55:73:7f:a0:75:28:5e:17:d5:a3:b3:44:
eb:3d:84:5b:88:c4:4a:b5:75:98:2a:0f:8f:8a:a1:bd:a5:02:
b0:60:14:47:20:cf:98:b7:c9:d1:d0:18:a7:f8:86:ab:ec:81:
33:79:b2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:15:24 2026 by rpki-client