Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3233302e302f32332d3234203d3e20383334.roa
File: 3134372e3132352e3233302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: 5QStecH5BviPG2rDiZTJAKANcM9ZAD3qxxNorgY9QxE=
Subject key identifier: B0:ED:8F:AB:32:87:BB:6C:F8:FF:7D:AB:03:54:1A:14:BA:74:9E:52
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 22FC081BD4717044F70C58F19810100802F7980E
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3233302e302f32332d3234203d3e20383334.roa
Signing time: Thu 17 Sep 2026 13:40:50 +0000
ROA not before: Thu 17 Sep 2026 13:35:50 +0000
ROA not after: Thu 16 Sep 2027 13:40:50 +0000
asID: 834
IP address blocks: 147.125.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:fc:08:1b:d4:71:70:44:f7:0c:58:f1:98:10:10:08:02:f7:98:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 17 13:35:50 2026 GMT
Not After : Sep 16 13:40:50 2027 GMT
Subject: CN=B0ED8FAB3287BB6CF8FF7DAB03541A14BA749E52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:74:87:cd:a0:cb:84:b2:42:b9:12:7c:8f:0b:
ca:2e:ed:42:80:c4:8d:4e:55:03:8e:1e:19:f9:f4:
f1:69:04:ed:23:2f:1d:ac:29:ba:dc:b0:f3:18:b4:
dc:20:60:aa:1c:ed:ca:16:ce:c6:f5:5f:b1:a8:5a:
b3:14:d1:ba:04:42:43:e7:d3:1e:f4:13:04:aa:14:
db:00:f5:00:a5:e9:88:90:2a:f9:ce:f7:c9:de:f1:
eb:bf:6b:a7:f8:9b:2c:d4:a4:a0:e6:03:77:ce:24:
6b:58:4f:a2:c4:40:e9:bc:f1:ff:8d:ed:22:40:ab:
e1:bb:72:80:84:97:b7:61:b4:54:d9:2e:f7:b1:51:
fb:49:4e:c2:d3:35:bc:41:33:18:59:24:9d:89:dd:
4c:30:c6:0e:a0:34:90:07:c1:8a:87:10:82:04:44:
c8:60:f3:79:42:dc:0f:f9:f2:35:df:d6:a5:e2:30:
51:8c:2c:73:4b:45:86:b7:de:51:1c:2f:91:ef:bb:
c1:b8:13:77:a1:91:8d:47:e1:3a:4e:27:e4:af:bc:
2e:fb:09:c5:7e:bc:aa:93:b1:81:f9:d0:44:b5:25:
60:40:bc:fc:46:33:f6:ea:07:06:70:4a:aa:69:d4:
ee:8f:d7:dc:b7:6b:90:3b:52:52:50:d9:37:4c:49:
8e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:ED:8F:AB:32:87:BB:6C:F8:FF:7D:AB:03:54:1A:14:BA:74:9E:52
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3233302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.230.0/23
Signature Algorithm: sha256WithRSAEncryption
32:10:48:15:e9:08:43:1f:ad:8b:af:02:f7:54:2d:0b:4a:fe:
78:ff:b3:4f:a8:7f:e9:17:a7:26:5a:3c:7d:30:f6:55:68:e5:
48:b4:93:77:d1:b8:57:b0:63:43:7f:d9:9f:c5:05:d8:3a:55:
80:22:77:f3:19:e8:54:f4:d9:f8:4a:b6:5f:a1:89:1e:22:9d:
6e:68:e5:7d:d5:a3:a4:c0:71:b5:91:35:8d:d9:6e:82:4c:ac:
fa:28:65:f3:3f:43:e2:5e:2a:ed:6c:6f:9e:43:a8:67:0e:c4:
0a:34:9c:f6:b3:ba:6e:a1:3f:ed:4d:8d:58:f2:db:69:1d:9b:
1a:76:3a:72:b6:5c:a4:1f:02:21:0f:a1:e0:ae:30:5c:a6:3a:
49:9a:35:1a:33:1a:c1:22:3a:2d:0c:34:7a:1b:50:a8:98:5a:
82:c6:5f:8e:09:ea:eb:4d:60:58:c0:3c:dc:30:28:a9:e7:74:
a1:07:75:75:b4:2f:d6:3f:e0:9c:d5:a1:23:91:ae:60:6a:74:
b3:02:e8:87:a1:05:f2:c7:28:db:b8:44:76:a0:06:00:24:99:
46:c5:8a:5a:12:91:f3:09:6c:24:d9:20:52:a1:ba:44:2e:1d:
e2:3b:8c:e9:ab:73:11:92:69:29:cb:e5:05:35:79:a1:30:a5:
fb:d7:18:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:10:41 2026 by rpki-client