Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232392e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3232392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Ea+ndvpOFpn4kv4/vIQpuAjJ6yglhEPr7Z5Ux0KmLs4=
Subject key identifier: 6C:3B:7D:D1:0B:3C:6D:96:32:D2:40:29:CA:12:DC:05:57:38:CC:CD
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 6869E5D4DF874D553629CB0DD28676DB4CE6A76C
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232392e302f32342d3234203d3e20383334.roa
Signing time: Thu 17 Sep 2026 13:40:51 +0000
ROA not before: Thu 17 Sep 2026 13:35:51 +0000
ROA not after: Thu 16 Sep 2027 13:40:51 +0000
asID: 834
IP address blocks: 147.125.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:69:e5:d4:df:87:4d:55:36:29:cb:0d:d2:86:76:db:4c:e6:a7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 17 13:35:51 2026 GMT
Not After : Sep 16 13:40:51 2027 GMT
Subject: CN=6C3B7DD10B3C6D9632D24029CA12DC055738CCCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ad:24:84:f2:50:74:7a:c1:c5:65:48:42:d3:
bd:0e:77:c0:47:8c:55:b4:24:9c:f4:0b:03:7d:54:
2b:91:1d:61:3c:76:af:8d:64:13:53:df:b1:f3:31:
53:be:eb:08:dc:55:99:b1:68:7f:a3:e6:69:43:83:
84:b9:e1:35:75:5a:21:18:ab:4f:70:45:00:20:a4:
04:77:16:31:f9:e1:c9:85:24:99:9a:29:cf:9c:e8:
a0:16:88:5a:9f:81:bd:c9:ac:04:60:2d:e1:49:ef:
cc:d7:df:7a:a7:d9:9d:38:68:19:7d:f4:a9:0c:e9:
10:a6:8b:b0:05:c8:24:4e:bc:a0:c2:f3:38:dc:c4:
2e:36:98:ae:7d:f5:28:91:1f:39:67:e3:04:fa:97:
1e:20:9d:b7:7c:f5:46:5d:61:91:c7:d8:05:88:58:
25:35:cd:ad:bc:f4:9a:6c:24:18:fc:58:80:af:17:
53:f4:aa:37:df:84:6d:be:cd:5c:ac:3a:3a:45:71:
97:e6:c9:bf:4e:ba:67:f1:86:33:2f:3e:ef:92:5b:
f6:e1:45:55:53:aa:80:92:e4:e0:1d:b4:6c:7d:1a:
24:7a:f7:7e:d3:aa:be:aa:9c:c7:69:13:73:03:50:
42:78:5e:01:f5:63:be:37:52:d9:b5:c8:2f:58:48:
a3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3B:7D:D1:0B:3C:6D:96:32:D2:40:29:CA:12:DC:05:57:38:CC:CD
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.229.0/24
Signature Algorithm: sha256WithRSAEncryption
29:3c:9e:01:82:45:65:6b:6e:77:d4:0a:2b:98:35:29:c4:3b:
75:17:d0:44:09:95:38:6e:9f:22:9b:f9:83:7b:23:8a:72:a6:
d3:df:3e:d0:58:80:91:3f:72:7b:a7:5b:e1:cf:62:5c:45:e8:
7e:81:f9:ff:87:96:c5:16:30:06:56:56:07:46:13:5f:c1:8b:
1a:2e:d4:c1:bb:79:36:98:ad:93:40:6e:f2:5a:17:48:7a:f6:
46:7d:56:f7:71:5b:e7:37:9c:d7:c7:e0:8d:ec:b5:de:a6:7f:
73:6b:fe:49:ae:16:23:9d:69:4f:f8:88:dc:86:49:0a:fb:a3:
b0:87:69:6f:4c:80:87:27:5c:12:d8:5c:12:f1:83:5d:c5:ad:
fe:bc:14:c2:34:ca:ab:5a:54:d0:37:84:2d:7b:c9:c2:48:47:
1a:85:0d:fa:a7:8a:9b:07:c3:98:f1:e0:7a:59:42:6f:72:f9:
1b:77:29:dc:e0:19:97:26:7f:94:1d:e5:8e:5a:82:65:af:05:
26:4e:e6:ea:19:ac:a1:b5:8f:db:56:28:16:ff:19:c8:03:e4:
6e:12:77:ae:0c:ca:07:e1:0d:6a:dc:f4:4d:80:20:02:a1:d8:
0f:df:c8:ea:85:b3:e9:35:d4:7d:ed:e8:f0:c5:e3:3e:08:4a:
39:0e:2a:96
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUaGnl1N+HTVU2KcsN0oZ220zmp2wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNjA5MTcxMzM1NTFaFw0yNzA5MTYxMzQwNTFaMDMxMTAvBgNV
BAMTKDZDM0I3REQxMEIzQzZEOTYzMkQyNDAyOUNBMTJEQzA1NTczOENDQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPrSSE8lB0esHFZUhC070Od8BH
jFW0JJz0CwN9VCuRHWE8dq+NZBNT37HzMVO+6wjcVZmxaH+j5mlDg4S54TV1WiEY
q09wRQAgpAR3FjH54cmFJJmaKc+c6KAWiFqfgb3JrARgLeFJ78zX33qn2Z04aBl9
9KkM6RCmi7AFyCROvKDC8zjcxC42mK599SiRHzln4wT6lx4gnbd89UZdYZHH2AWI
WCU1za289JpsJBj8WICvF1P0qjffhG2+zVysOjpFcZfmyb9OumfxhjMvPu+SW/bh
RVVTqoCS5OAdtGx9GiR6937Tqr6qnMdpE3MDUEJ4XgH1Y743Utm1yC9YSKM3AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUbDt90Qs8bZYy0kApyhLcBVc4zM0wHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy
MzIzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9
5TANBgkqhkiG9w0BAQsFAAOCAQEAKTyeAYJFZWtud9QKK5g1KcQ7dRfQRAmVOG6f
Ipv5g3sjinKm098+0FiAkT9ye6db4c9iXEXofoH5/4eWxRYwBlZWB0YTX8GLGi7U
wbt5Npitk0Bu8loXSHr2Rn1W93Fb5zec18fgjey13qZ/c2v+Sa4WI51pT/iI3IZJ
CvujsIdpb0yAhydcEthcEvGDXcWt/rwUwjTKq1pU0DeELXvJwkhHGoUN+qeKmwfD
mPHgellCb3L5G3cp3OAZlyZ/lB3ljlqCZa8FJk7m6hmsobWP21YoFv8ZyAPkbhJ3
rgzKB+ENatz0TYAgAqHYD9/I6oWz6TXUfe3o8MXjPghKOQ4qlg==
-----END CERTIFICATE-----
Generated at Sun Sep 20 22:22:43 2026 by rpki-client