Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232342e302f32322d3232203d3e2035363530.roa
File: 3134372e3132352e3232342e302f32322d3232203d3e2035363530.roa (raw, json)
Hash identifier: AJLMqqqXEh1X616zxcQ+ESRw0kVeGGJb6A70R7Ravbk=
Subject key identifier: E4:6D:3D:85:0A:F9:46:86:40:80:83:8E:58:88:54:9B:AA:43:F1:7C
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 17F2D24F39B08874043AA3DD679CA26975C34386
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232342e302f32322d3232203d3e2035363530.roa
Signing time: Tue 10 Feb 2026 19:42:00 +0000
ROA not before: Tue 10 Feb 2026 19:37:00 +0000
ROA not after: Tue 09 Feb 2027 19:42:00 +0000
asID: 5650
IP address blocks: 147.125.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:f2:d2:4f:39:b0:88:74:04:3a:a3:dd:67:9c:a2:69:75:c3:43:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Feb 10 19:37:00 2026 GMT
Not After : Feb 9 19:42:00 2027 GMT
Subject: CN=E46D3D850AF946864080838E5888549BAA43F17C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dd:11:2e:4f:db:32:56:70:a8:f7:44:00:16:
2f:41:c6:d0:57:35:88:14:f3:07:0a:43:49:a8:f2:
64:52:98:e6:2f:16:9f:cb:14:80:9d:2b:85:ce:12:
1a:67:54:d4:5f:52:8d:57:e5:07:52:e1:35:10:1d:
9b:cd:70:7b:39:1e:04:5b:16:d2:44:3e:1a:5e:43:
f9:4c:e3:7a:19:4a:a5:8a:1e:60:18:5f:5a:30:41:
8b:cd:ed:87:bc:86:09:6b:3a:75:b2:8a:35:bd:7e:
dd:05:70:42:68:1f:d9:86:76:f0:c0:a6:f7:e4:7e:
8b:80:6b:91:7f:55:2a:7a:22:8d:9a:d8:53:15:fb:
d1:bb:a2:e6:96:57:72:d5:d3:b9:3d:ae:ee:f4:ae:
2f:9c:b2:df:f6:5b:f1:8a:e5:5f:8a:42:b6:63:54:
90:ab:58:c5:8f:56:f6:3d:fe:3f:2d:6b:09:27:38:
62:50:13:84:ae:cf:2b:46:aa:a6:b7:e3:fa:44:fc:
ca:0b:55:31:eb:90:57:fb:18:fc:e5:3b:c3:1b:d2:
d8:33:d1:33:36:88:a1:30:a3:74:2a:00:8e:2b:8c:
ae:b3:46:18:c9:21:0f:93:b0:f9:e2:dc:82:a8:b2:
a7:21:e3:b0:19:ab:bf:1d:f8:6b:89:3d:f8:5d:be:
c7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6D:3D:85:0A:F9:46:86:40:80:83:8E:58:88:54:9B:AA:43:F1:7C
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232342e302f32322d3232203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.224.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:ea:0c:f4:6b:15:9f:53:83:bf:44:4c:1a:04:76:ee:69:6b:
a6:07:86:f3:9c:de:01:2e:30:82:69:aa:64:b6:94:c8:8c:5c:
af:6a:17:49:58:2c:4b:2a:24:ce:a9:c0:8c:c3:1d:9c:67:9d:
2d:d1:ec:b1:87:6d:60:44:af:d2:44:f1:e7:e4:c1:5a:be:8e:
40:db:2b:40:97:6f:fb:8f:61:34:ba:fe:26:d4:07:c9:17:ad:
55:85:ac:5e:ed:13:91:c6:5b:0e:0f:35:47:40:06:68:8f:42:
cb:2d:dd:6e:d1:91:95:55:23:ec:e6:f6:84:8c:42:25:2b:29:
9e:c6:b9:0a:8c:f7:db:47:90:77:e2:37:67:87:a7:ac:25:67:
11:cf:0d:1f:45:1b:d1:c4:2b:ef:c6:d7:33:4b:19:2f:de:64:
32:98:56:3a:e9:11:b6:d9:b1:9f:25:e8:11:13:90:65:69:fc:
64:1b:61:8e:cb:16:86:1c:9a:14:f0:3d:2c:cc:a3:c3:3f:0c:
79:74:e4:41:5a:64:4a:df:0c:a3:dd:75:fa:2f:72:b7:0a:0b:
50:91:8a:77:cc:2d:02:a2:4d:8c:4f:35:f8:44:16:69:10:8f:
a6:bf:27:db:43:f8:8b:bc:ca:4b:d0:c7:3d:ae:98:1b:f6:60:
54:58:52:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:32:46 2026 by rpki-client