Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230342e302f32342d3234203d3e20343032383636.roa
File: 3134372e3132352e3230342e302f32342d3234203d3e20343032383636.roa (raw, json)
Hash identifier: ldaVZUTmVFjhDXAgNdHXh41dkDjNU9rggrnzKdIgwP0=
Subject key identifier: 66:99:0B:56:39:64:F2:D0:24:46:1F:E7:B1:1C:0C:17:D0:8F:74:5C
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 5DFB1652D93AE264FDE6205639817DBA87E3D955
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230342e302f32342d3234203d3e20343032383636.roa
Signing time: Wed 16 Sep 2026 16:49:31 +0000
ROA not before: Wed 16 Sep 2026 16:44:31 +0000
ROA not after: Wed 15 Sep 2027 16:49:31 +0000
asID: 402866
IP address blocks: 147.125.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:13:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:fb:16:52:d9:3a:e2:64:fd:e6:20:56:39:81:7d:ba:87:e3:d9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 16 16:44:31 2026 GMT
Not After : Sep 15 16:49:31 2027 GMT
Subject: CN=66990B563964F2D024461FE7B11C0C17D08F745C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:91:4c:8f:e1:97:85:f6:f6:16:f7:ad:21:9b:
fa:7e:71:40:1d:79:f6:c4:f9:07:28:55:5c:5e:ee:
de:ec:92:ff:82:c7:84:9b:c5:1c:b6:3c:b4:f8:30:
9d:95:19:3e:1d:ae:22:fb:d0:b1:fc:42:59:b3:8f:
7b:d1:6e:d5:48:bf:38:73:59:62:7d:a7:bb:75:43:
09:7d:a3:16:99:b7:c3:8f:a3:67:7a:bf:61:1b:6f:
6a:46:b0:90:7f:0b:64:9f:7e:47:61:4b:da:07:5f:
dc:18:77:3a:aa:55:57:01:ec:63:ae:a8:4a:fa:29:
3f:db:39:36:3d:44:6b:56:23:07:19:21:7a:50:64:
52:da:14:c9:0f:cf:4f:75:11:a7:fe:a8:91:a9:df:
b6:9b:24:44:15:1c:db:a6:0e:e5:3c:a8:3f:2a:0b:
58:68:ce:33:11:e0:6c:fd:ce:c7:28:2f:08:4e:e9:
9a:d9:3a:02:45:aa:23:de:bd:13:e0:20:44:c3:87:
1c:10:5d:f9:68:b8:50:ab:fc:f9:f1:f3:2b:d8:04:
e6:c0:bc:41:c9:af:59:8e:2b:d9:c2:85:91:19:fa:
0a:32:a8:fd:2c:d9:1e:b3:8d:8d:fa:f3:e7:fd:a3:
1a:0c:67:34:17:41:93:03:50:d4:98:e9:6d:c4:c7:
39:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:99:0B:56:39:64:F2:D0:24:46:1F:E7:B1:1C:0C:17:D0:8F:74:5C
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230342e302f32342d3234203d3e20343032383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.204.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:95:18:35:e3:6f:f9:12:1a:0f:30:9e:f6:54:3a:b9:6c:52:
71:db:c6:51:f1:9f:bc:61:cc:09:26:bc:7c:69:cd:28:f3:d1:
e7:a3:cb:cd:7e:d0:c9:da:02:a9:37:11:9a:c0:06:c6:0b:23:
d8:7e:3c:37:0f:7b:d5:f6:0b:c3:14:76:74:f7:ed:ff:76:3d:
48:e2:0c:fc:49:fb:4a:12:65:b8:41:ec:03:bd:0e:49:1d:dc:
37:c9:20:74:a0:25:16:3f:14:b3:cd:c0:0f:15:bb:a7:e4:78:
e1:13:49:67:ae:f4:91:5a:4c:de:88:22:f5:79:df:e3:15:78:
6b:29:a9:66:ec:ad:5b:2c:2a:09:22:75:88:31:11:4d:46:12:
0e:28:19:ef:14:81:51:4d:f7:1e:24:2a:cf:44:1c:f1:22:b0:
e7:7e:f6:e1:01:62:4a:d9:5a:c6:cc:a9:db:a6:86:22:7c:60:
27:ba:77:a2:ec:cc:7d:59:e9:d4:85:a7:b4:1d:3b:13:50:26:
8a:d6:a3:eb:18:dd:3c:81:50:f9:25:83:0e:1c:ba:a4:54:bd:
1e:6e:27:dc:af:23:ad:e6:61:38:04:74:26:fb:98:ad:c1:6c:
80:c4:b2:b8:0b:5f:48:9f:01:49:cb:b3:f0:fc:04:fa:85:e3:
3b:91:1f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:11:27 2026 by rpki-client