Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137322e302f32322d3234203d3e20383334.roa
File: 3134372e3132352e3137322e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: Thrg52S6LvSRHJiFSE4a/VlspINEh+yJmda10C3O+xM=
Subject key identifier: BE:B8:2B:3D:1A:50:35:4D:3B:30:15:8C:D3:08:D2:FC:B7:EB:1A:5A
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 224668EEA5330CB56FD06A073A1F25DE4C013D5D
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137322e302f32322d3234203d3e20383334.roa
Signing time: Thu 03 Sep 2026 08:55:12 +0000
ROA not before: Thu 03 Sep 2026 08:50:12 +0000
ROA not after: Thu 02 Sep 2027 08:55:12 +0000
asID: 834
IP address blocks: 147.125.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:46:68:ee:a5:33:0c:b5:6f:d0:6a:07:3a:1f:25:de:4c:01:3d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 3 08:50:12 2026 GMT
Not After : Sep 2 08:55:12 2027 GMT
Subject: CN=BEB82B3D1A50354D3B30158CD308D2FCB7EB1A5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9c:51:12:8b:92:25:de:36:93:16:9c:35:a3:
dd:0f:4e:42:7e:f5:70:46:ca:11:fd:f7:f6:9e:15:
de:9b:aa:6f:5e:5b:14:52:8b:8f:68:43:b0:82:cc:
bc:31:da:94:89:bc:0d:41:42:fa:46:91:29:6e:dc:
2a:21:5d:b6:20:56:36:74:fc:f9:7a:c9:22:c9:bf:
2f:b9:32:52:fb:d3:5d:6b:f2:11:c6:06:dc:0e:eb:
57:f9:77:98:2f:27:52:a3:43:c0:cc:a9:ee:34:1e:
e7:ba:76:9c:01:6a:12:85:28:df:e8:8e:8e:e9:41:
8f:a1:30:6f:3b:24:d2:2b:c2:19:75:77:0e:65:8f:
28:58:7f:3f:01:1e:42:19:f5:ad:dc:3a:9e:d4:f3:
1a:50:ad:90:44:37:3c:dd:a1:11:af:d6:5e:f6:e9:
00:36:a0:85:af:b7:8f:4c:4f:bf:9e:c6:1f:c0:20:
c3:0a:3c:ce:8e:9a:fd:d0:87:dd:4f:af:5b:0e:0a:
72:6a:03:55:1b:28:9f:bf:94:69:4e:11:0d:2d:cd:
35:69:36:b7:48:51:a8:af:04:c7:44:c0:e2:7a:cf:
3d:75:0f:10:ac:45:f6:02:9e:b9:c2:d7:7d:00:c3:
9f:ad:b5:49:ad:8e:a8:97:6d:13:3b:e8:34:42:0c:
41:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B8:2B:3D:1A:50:35:4D:3B:30:15:8C:D3:08:D2:FC:B7:EB:1A:5A
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137322e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.172.0/22
Signature Algorithm: sha256WithRSAEncryption
39:72:ff:80:95:cf:57:db:83:68:00:f8:87:f3:17:a0:c3:2f:
12:4b:29:1d:da:ec:5b:4d:a3:4b:2e:3f:a8:97:0d:90:e6:06:
27:95:f9:9d:b7:47:05:32:f6:7c:fa:65:02:7e:0d:0f:93:6f:
5b:25:a8:3f:fb:c5:6f:c2:f3:38:a3:42:27:f5:0c:3c:f7:68:
08:27:8f:10:b3:b0:2d:00:ca:65:1d:f2:86:80:5b:eb:d8:07:
74:f8:61:4d:ab:19:a0:73:36:03:f9:70:1d:9e:97:c0:bc:07:
f2:1e:88:be:23:40:31:ea:c7:f3:10:77:d5:ec:67:d2:81:3d:
d1:e3:78:5d:0b:e5:68:3d:00:d8:0e:6c:4b:34:03:57:dd:6a:
f2:46:d2:bd:43:82:9a:ff:04:ad:b5:67:e4:6d:b7:8f:c8:93:
4f:b4:b9:bf:f8:b7:b6:ff:ac:fe:f4:10:cf:1d:9d:02:f6:e5:
52:b4:69:9f:8a:56:f8:f4:a7:97:3c:68:a8:a1:16:94:c2:c3:
42:88:e5:4c:6c:f2:c6:61:02:e1:7a:19:87:fa:f5:e3:f0:7a:
d6:fb:58:fa:ff:e7:b8:92:24:1a:92:51:37:08:5e:69:96:00:
93:44:d9:68:99:bd:2f:d7:a3:43:6a:8a:fe:11:d6:9b:db:f0:
a0:1d:7b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:42:45 2026 by rpki-client