Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230372e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3230372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: nzt7oP8G3FdvAxp6+4+dhO6FQM0wZoyu4Zsm4VzyWpk=
Subject key identifier: 6A:05:B6:52:F6:8B:AE:8D:78:D8:70:34:52:F7:DF:7E:B5:80:66:AB
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 45F1317A18BFCD6417783D6C5148DD1D52CBD38D
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230372e302f32342d3234203d3e20383334.roa
Signing time: Thu 03 Sep 2026 16:59:59 +0000
ROA not before: Thu 03 Sep 2026 16:54:59 +0000
ROA not after: Thu 02 Sep 2027 16:59:59 +0000
asID: 834
IP address blocks: 147.125.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 01:34:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:f1:31:7a:18:bf:cd:64:17:78:3d:6c:51:48:dd:1d:52:cb:d3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 3 16:54:59 2026 GMT
Not After : Sep 2 16:59:59 2027 GMT
Subject: CN=6A05B652F68BAE8D78D8703452F7DF7EB58066AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9c:f1:b3:76:da:35:80:ef:df:4f:5c:3b:d0:
50:2f:cf:8c:7b:f0:c0:73:d5:a4:25:7b:35:ba:0c:
c2:04:44:24:ad:3b:31:65:68:7f:b2:82:ab:e3:c2:
45:56:09:1c:e2:ba:b3:a4:31:e8:09:86:79:3e:59:
48:6b:8e:4a:6b:35:7a:f2:20:3c:fa:7b:17:78:59:
97:f9:ed:e9:d5:51:c3:f6:70:48:53:dc:41:cf:64:
15:b2:7f:48:c3:1c:5a:94:e9:95:c8:04:0e:9a:97:
4e:00:fa:4a:9d:f2:3d:3f:c1:69:db:d0:1e:59:ab:
85:a1:71:58:a8:26:8a:aa:9f:43:90:cc:95:ea:7b:
4b:67:2d:86:d2:00:de:a4:24:ff:80:6f:d0:7f:cc:
7e:c8:06:9f:87:d2:83:6d:ad:cc:21:38:28:83:0a:
da:a1:44:3a:c3:3e:f5:26:d5:db:fe:28:ab:69:ed:
09:0c:b1:0f:d0:39:b2:12:6a:cd:b2:da:d5:28:97:
09:50:2f:eb:bf:79:cb:2c:06:d9:69:42:db:07:8f:
b7:03:16:2f:3c:97:a5:52:3f:b2:92:40:e8:a7:5d:
83:d1:3b:f0:33:b2:61:36:ef:ec:77:f0:ab:82:4d:
c9:6a:e9:88:9e:f1:58:ac:5f:ba:3b:9f:5d:cb:f8:
56:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:05:B6:52:F6:8B:AE:8D:78:D8:70:34:52:F7:DF:7E:B5:80:66:AB
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.207.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:60:35:98:13:63:98:67:3b:f0:bd:86:46:18:ee:7d:88:8d:
18:9c:90:8b:c5:4f:7f:a0:4c:8f:02:57:a8:42:6a:44:e5:15:
fb:aa:4b:ef:1a:7a:c2:f4:ba:a4:93:f1:00:56:b5:d6:e2:0a:
c0:2a:8f:6f:3c:8c:97:33:51:1d:99:ed:d4:c4:b4:61:b7:25:
ca:bf:00:fc:e9:e7:82:25:48:f5:c6:32:2b:a8:68:13:0c:20:
e4:e7:90:50:fd:12:8e:d6:bb:53:b7:4a:df:71:f4:ba:74:4d:
c2:40:99:29:11:2c:1e:de:7a:de:2b:a2:58:53:20:58:77:9b:
cf:24:12:ae:63:9e:57:16:ae:90:29:52:50:cd:91:f5:55:19:
37:0f:de:0e:38:20:78:44:18:29:e9:82:d3:cc:86:b8:b4:83:
5e:f7:7e:f8:b1:24:a0:96:09:81:14:2a:ba:8f:78:b7:5d:18:
4c:76:37:0a:89:80:5b:29:77:3d:50:ec:d5:df:c9:77:f7:dd:
0b:76:70:a2:9e:b2:09:ec:0c:fe:81:af:41:6c:7b:69:c9:1e:
1f:63:df:17:c1:49:db:9f:c8:49:63:18:c0:69:d3:01:f9:7c:
8a:7e:4d:9c:39:7e:62:79:84:81:59:06:6b:33:69:01:e9:6c:
08:42:28:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:53:36 2026 by rpki-client