Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232382e302f32342d3234203d3e20313532313739.roa
File: 3134372e3132352e3232382e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: srRsQPe+nM/OT7NeJf46Lgbdn+P51+P9yXabXPDVs5U=
Subject key identifier: 1B:4C:AD:AF:D1:BB:70:23:E2:2D:13:7F:FB:DD:B2:E8:24:D1:62:0E
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 3A330F520BA39E62EEC771772D747BA91A01FCA2
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232382e302f32342d3234203d3e20313532313739.roa
Signing time: Thu 17 Sep 2026 13:40:35 +0000
ROA not before: Thu 17 Sep 2026 13:35:35 +0000
ROA not after: Thu 16 Sep 2027 13:40:35 +0000
asID: 152179
IP address blocks: 147.125.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:59:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:33:0f:52:0b:a3:9e:62:ee:c7:71:77:2d:74:7b:a9:1a:01:fc:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 17 13:35:35 2026 GMT
Not After : Sep 16 13:40:35 2027 GMT
Subject: CN=1B4CADAFD1BB7023E22D137FFBDDB2E824D1620E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:fe:62:e9:67:92:6f:5c:f8:68:f8:cc:41:
8e:a7:fe:e8:72:5b:fa:28:5c:20:2a:51:6c:89:83:
30:0b:bb:8a:54:24:f8:f2:87:b7:88:77:89:00:bb:
8b:ec:24:07:76:70:16:22:93:9b:2f:ec:35:8c:3d:
db:e1:4c:8d:bf:c9:2d:df:2d:2c:ff:5b:b7:1f:96:
c9:cd:69:9d:64:37:e2:ba:ee:eb:da:67:f3:bc:29:
e2:f9:d0:43:56:99:c0:56:1c:ae:20:48:95:7b:fd:
ed:4b:ed:78:54:a5:82:b9:82:83:75:34:e1:dc:47:
26:ff:ac:78:e8:74:1b:2b:41:34:ca:15:55:3c:d5:
bc:e2:74:3a:10:7f:0a:88:3a:e8:5b:04:3f:a6:c4:
dd:6b:c6:ef:9a:5b:09:a5:0d:75:4a:0e:3c:01:70:
6c:23:47:ac:33:63:67:28:82:16:27:14:a9:7f:dd:
ac:4b:a8:a8:ce:47:99:0e:cd:3f:5d:04:cd:6a:40:
0b:32:ae:e2:96:42:62:b9:52:83:96:15:99:55:83:
39:84:8f:c4:db:00:c3:0f:63:d6:f0:2f:5e:b0:59:
67:ef:6e:46:37:b6:be:8b:ef:cc:90:9b:7f:f7:f2:
ec:d5:8a:ca:2f:95:e3:7d:7c:a5:cb:a7:91:95:11:
54:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4C:AD:AF:D1:BB:70:23:E2:2D:13:7F:FB:DD:B2:E8:24:D1:62:0E
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232382e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.228.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:c7:3c:d8:50:63:a1:fa:4e:a9:c4:c5:14:37:96:57:0b:e4:
99:de:93:55:1e:56:17:3b:9f:c7:07:6d:25:20:b3:f0:61:64:
de:c3:aa:4f:2c:0b:ac:f8:2f:b5:ef:bd:9f:0c:e6:cc:70:fd:
4a:d4:3c:09:57:cb:d5:73:00:f2:1b:ee:96:a7:67:a4:b4:c6:
ff:50:a6:6b:38:84:65:cc:b7:79:f8:71:3d:05:1f:65:c1:c6:
2b:7b:b8:00:24:a3:44:e5:9c:0e:ad:3e:8d:21:c8:0d:5d:cb:
95:a6:ac:c2:ce:f7:09:09:24:82:c6:4b:8e:6e:98:a2:c4:70:
12:e7:01:11:e8:00:25:05:89:ff:5b:a1:1f:7e:ad:7d:b1:21:
7b:95:ce:18:08:e6:c6:13:b5:65:e1:82:69:2a:55:26:2f:72:
08:f2:4e:e8:85:7d:a0:d0:59:5a:00:30:8d:39:26:ac:0c:7e:
e3:12:b4:f4:51:c9:ae:64:90:b6:a5:2a:ae:87:ec:7f:96:51:
ed:6d:77:77:1f:ef:1d:39:00:ed:21:f9:4c:18:ae:4e:7d:93:
6a:52:99:91:ae:c4:aa:54:1e:e9:46:2d:d9:9e:39:6d:e2:d8:
67:ac:79:50:4b:6d:b6:64:b6:a7:b7:43:30:84:4d:ed:30:3f:
3e:44:4d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:30:40 2026 by rpki-client