Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139302e302f32342d3234203d3e20343032383636.roa
File: 3134372e3132352e3139302e302f32342d3234203d3e20343032383636.roa (raw, json)
Hash identifier: 8Ute/UkHXIsOiJy+39JWEKzsYJSqLQbPKYGkh08z0so=
Subject key identifier: 92:52:13:8F:23:87:53:F7:0C:13:7E:F7:12:4F:33:7F:A2:A0:84:51
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 6FFF6D09F0306F15EE7B95244A1AFF6FC499684F
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139302e302f32342d3234203d3e20343032383636.roa
Signing time: Thu 17 Sep 2026 17:35:22 +0000
ROA not before: Thu 17 Sep 2026 17:30:22 +0000
ROA not after: Thu 16 Sep 2027 17:35:22 +0000
asID: 402866
IP address blocks: 147.125.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:ff:6d:09:f0:30:6f:15:ee:7b:95:24:4a:1a:ff:6f:c4:99:68:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 17 17:30:22 2026 GMT
Not After : Sep 16 17:35:22 2027 GMT
Subject: CN=9252138F238753F70C137EF7124F337FA2A08451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:9d:ac:45:c2:12:7c:96:04:53:97:19:42:
46:ce:6c:b0:74:c7:07:bc:31:12:68:79:fd:ca:c0:
8b:c7:19:97:64:43:3a:23:93:3c:0b:a2:b2:4c:b3:
d8:31:6d:76:c0:ed:3c:b1:0f:1b:96:c3:5a:c8:9d:
52:65:17:73:58:32:db:02:fc:9a:1f:dd:a8:b0:a7:
d0:99:32:57:a5:66:fe:60:10:dd:c8:9c:83:46:de:
70:fc:0e:6c:70:ad:f1:22:46:9f:30:d2:61:cd:de:
e8:97:57:11:f2:b8:77:36:42:52:50:93:ca:5c:be:
e8:8d:a2:45:ff:31:53:19:48:22:f6:fd:49:70:fc:
f0:94:12:6e:2a:b8:02:ad:c0:89:a9:d2:b4:b0:ab:
e7:eb:9a:20:96:e9:3c:ce:dd:17:d2:34:5d:f6:3a:
a1:1f:ca:1a:f7:11:54:77:85:41:8c:8f:1c:b1:f8:
63:fb:d5:e2:f1:a9:a5:0d:3c:e6:66:85:ed:91:72:
8f:41:d8:81:d3:a1:cb:d2:88:61:2c:75:02:09:f8:
ce:4a:17:f5:00:e9:4a:f0:00:3d:76:07:a4:7e:8a:
a9:ec:12:28:ee:4d:28:14:fa:57:9e:4c:76:e2:d2:
01:7e:f6:e3:5d:65:68:ef:e0:5f:2c:05:c2:d7:77:
fd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:52:13:8F:23:87:53:F7:0C:13:7E:F7:12:4F:33:7F:A2:A0:84:51
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139302e302f32342d3234203d3e20343032383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.190.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:5b:7e:aa:18:3c:a5:31:01:b5:0a:eb:18:6f:0a:d3:cd:f6:
9d:f2:86:68:51:66:aa:c4:e7:ea:22:e9:ec:4b:b0:2c:b1:83:
ee:ab:c7:57:b5:0a:8f:8d:5e:1d:c6:d5:41:3e:89:8c:22:41:
9c:28:80:5b:07:9f:92:06:64:1b:b1:b9:f0:e2:46:92:a6:45:
ee:21:9e:66:b4:18:87:81:8d:c2:07:17:e0:61:c0:09:34:51:
6b:6d:50:fb:2b:45:5b:8f:c5:44:4c:93:b6:15:d2:ab:74:26:
74:90:ca:0e:ee:d9:f1:5b:54:dd:09:b1:69:2b:eb:0e:9e:e2:
48:bb:26:20:57:89:9f:d0:b1:f4:d6:be:35:60:88:fa:b7:6f:
fb:c5:a8:7d:5e:ab:fd:2c:ca:54:e1:2a:b9:94:dd:38:4b:72:
94:6c:0e:28:f8:4f:30:17:08:fe:9d:c8:d1:8d:e3:cb:31:dd:
d1:92:e7:b5:87:af:37:d9:00:6b:47:0a:84:cf:ac:5c:5c:38:
a6:7a:73:af:d3:60:54:b8:77:d0:47:4b:70:d2:44:3f:8b:2b:
4e:ee:f8:b2:7c:0a:fd:39:30:52:c1:b1:e0:8b:98:2e:14:2e:
b6:ab:1d:0a:d1:c0:22:5a:39:24:8f:16:d0:08:c6:17:b3:f6:
6c:2b:99:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:06:50 2026 by rpki-client