Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139312e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3139312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 3hn2dVWhmfkujJnuZ4+HQxjFwIlxGp19tjJTTxwyOLQ=
Subject key identifier: A9:3C:35:59:3D:2B:63:06:22:38:E7:0A:A0:CC:D0:7F:74:6E:1E:21
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 0DE1A847ABEFD14DB35D59BC54553FE317633E84
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139312e302f32342d3234203d3e20383334.roa
Signing time: Thu 17 Sep 2026 17:35:24 +0000
ROA not before: Thu 17 Sep 2026 17:30:24 +0000
ROA not after: Thu 16 Sep 2027 17:35:24 +0000
asID: 834
IP address blocks: 147.125.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 02:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:e1:a8:47:ab:ef:d1:4d:b3:5d:59:bc:54:55:3f:e3:17:63:3e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 17 17:30:24 2026 GMT
Not After : Sep 16 17:35:24 2027 GMT
Subject: CN=A93C35593D2B63062238E70AA0CCD07F746E1E21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0f:07:5b:84:b5:24:a9:d1:9b:5f:b2:50:50:
cf:a2:45:f2:35:15:a5:7f:43:cc:94:97:d5:aa:fa:
9d:50:7e:60:62:eb:60:ec:d4:c3:96:0e:d3:a9:ef:
92:b7:19:78:bb:27:d7:5d:9e:6a:1e:74:9e:ed:35:
5d:39:ed:5d:4a:20:ff:f4:dd:43:61:25:1c:d5:a6:
80:51:da:07:bf:ba:47:28:d8:ea:36:de:5c:fb:5c:
e1:71:c3:ff:42:44:a3:dd:cf:78:36:ef:22:41:b8:
db:31:93:dd:f8:74:7b:cd:77:2a:fd:13:33:37:b6:
11:fd:f7:35:e6:f1:07:22:c4:5a:b6:d4:98:89:16:
69:2c:de:9e:eb:70:43:a2:26:79:b4:50:18:1b:1c:
6a:96:a8:61:cd:6f:4d:cb:dd:fc:a1:04:90:36:92:
28:fa:a6:f9:d4:a5:e1:68:89:88:f5:15:22:43:34:
98:ff:01:35:89:1c:d6:f9:38:d4:ba:fc:09:8f:97:
06:1a:09:74:13:e6:43:95:42:a1:2f:42:ac:46:3c:
67:05:bf:9c:55:60:2a:61:a9:f4:2e:c0:e8:29:7f:
05:c8:62:8f:6e:4a:63:33:04:fc:28:39:4e:1d:2d:
59:4d:24:cd:4f:c1:d0:1d:af:ba:bd:bf:c8:4d:dd:
03:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3C:35:59:3D:2B:63:06:22:38:E7:0A:A0:CC:D0:7F:74:6E:1E:21
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.191.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ed:97:7b:bc:a3:62:10:b4:54:9b:db:a4:7e:b5:da:b0:a1:
90:db:c9:af:1c:87:08:eb:ef:c1:86:8d:9b:ad:8c:0a:c3:7b:
66:fe:fb:20:d0:ec:57:59:95:bd:5b:c3:14:33:27:b6:b6:87:
94:cc:a9:51:f5:7b:d0:b6:9b:f5:40:2d:e9:31:4e:a1:dc:eb:
ae:b6:29:60:6b:e8:b8:6e:81:bf:0c:1e:1f:e4:44:3a:33:e7:
86:ce:15:10:b5:48:4e:f6:02:10:a0:fa:45:98:92:ef:98:ee:
8e:62:a8:29:6f:2c:32:55:ab:e2:a6:ac:94:b5:48:de:55:f6:
e6:d0:22:f7:d1:3c:0f:bc:a1:f2:96:20:71:ea:7d:6f:80:91:
1d:29:5b:eb:4e:95:11:74:41:52:73:29:99:35:0b:8b:76:24:
b7:e5:68:c3:13:97:8a:e4:d1:50:64:54:a9:0e:f6:ff:de:6f:
9d:75:04:03:19:49:96:f9:d4:24:4d:01:b3:bf:7b:84:5e:69:
62:81:53:96:20:44:2b:d0:ea:42:c0:45:68:fe:94:09:6a:d7:
1e:e9:c8:75:a1:44:2b:88:60:52:69:14:90:66:ef:1c:b8:93:
b9:c2:92:b4:83:1d:66:00:a6:0a:d0:eb:7f:c6:93:f4:42:4d:
f5:9f:2e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:36:47 2026 by rpki-client