Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234362e302f32332d3234203d3e20383334.roa
File: 3134372e3132352e3234362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: 6Mlip6cRYI9PUmw6nC+v2XWsFXhr9pAO7GP3aBVPKLE=
Subject key identifier: 69:6F:2A:9A:13:C5:AC:D4:9C:25:00:A2:98:6C:3F:85:13:94:08:DA
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 2F40AE56857C65109A25E3D92E7C35525F7E4326
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234362e302f32332d3234203d3e20383334.roa
Signing time: Wed 16 Sep 2026 20:24:44 +0000
ROA not before: Wed 16 Sep 2026 20:19:44 +0000
ROA not after: Wed 15 Sep 2027 20:24:44 +0000
asID: 834
IP address blocks: 147.125.246.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:40:ae:56:85:7c:65:10:9a:25:e3:d9:2e:7c:35:52:5f:7e:43:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 16 20:19:44 2026 GMT
Not After : Sep 15 20:24:44 2027 GMT
Subject: CN=696F2A9A13C5ACD49C2500A2986C3F85139408DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5d:7a:70:f3:a6:04:49:9c:b7:51:bb:b0:90:
67:cc:60:50:e3:88:a9:ad:e7:e7:df:57:60:4f:0f:
80:4a:45:43:df:80:1b:00:80:5c:8c:f9:78:6c:0d:
21:7c:27:33:e5:37:df:b6:b6:b9:8a:1e:46:fe:30:
8b:c7:a6:e9:cc:90:8e:10:29:72:83:3d:71:a5:7b:
fc:78:25:a9:3b:b9:9c:f2:2f:58:51:d5:6c:81:e7:
27:79:3a:74:83:27:ef:e7:bc:ff:b1:20:27:35:71:
cd:df:36:16:18:c9:b3:36:68:84:a8:1e:7d:e4:b2:
b1:dc:be:27:37:0c:43:f2:de:8c:b2:ab:6d:74:9a:
d2:08:3c:c0:61:20:3f:f8:8d:01:03:64:a5:37:05:
44:66:8e:f4:8c:7a:f4:39:57:31:89:74:50:8e:9b:
1e:2e:6d:9b:21:09:6d:69:e1:a4:99:2a:ea:54:60:
c1:95:55:86:9e:e2:50:91:0b:87:df:c1:aa:a8:c7:
ac:fc:f2:a5:5a:f9:16:15:31:2e:df:0f:0c:56:2a:
9e:10:9c:31:54:5f:e9:69:52:90:e8:a2:f8:c1:58:
a8:24:34:10:33:84:18:55:7d:46:76:3d:08:53:d5:
65:cb:cd:51:2c:ae:f3:27:5a:65:b1:10:6e:6c:c5:
87:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6F:2A:9A:13:C5:AC:D4:9C:25:00:A2:98:6C:3F:85:13:94:08:DA
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.246.0/23
Signature Algorithm: sha256WithRSAEncryption
31:bd:a6:6b:12:c9:15:7d:60:aa:15:64:52:5f:2d:61:ba:35:
c6:38:7a:5d:d8:1b:45:41:d5:b9:bb:12:d5:57:32:91:de:67:
14:f6:8c:41:23:c3:7f:d5:fb:ca:5b:52:85:5e:3b:f0:24:9c:
cd:88:8e:e8:61:a3:f5:7f:d1:b8:ea:c9:b6:ff:9b:4b:07:2b:
9d:1c:46:ce:b1:b1:d9:ba:85:57:45:e5:d8:fc:70:6f:3c:52:
30:ce:b9:fa:13:86:9e:3a:91:cb:d9:3e:27:16:65:03:1c:4d:
3b:8d:4c:27:00:6a:9e:27:b7:a5:44:06:12:80:09:d2:ba:40:
c0:ed:6d:c7:0c:6c:3e:10:89:7b:7a:dc:00:e9:02:aa:9b:14:
86:9b:a6:71:eb:0a:e2:5c:9e:d7:ba:71:53:e5:4b:38:9a:2e:
2a:df:a7:32:db:56:97:41:82:84:97:df:31:5a:2a:27:c3:94:
11:4e:d4:75:f2:7e:2e:02:01:01:fa:61:a1:78:02:32:58:c0:
41:81:04:5d:ab:04:39:e2:12:43:0f:37:ea:51:6e:4c:9b:7a:
f6:58:87:26:cd:65:13:0a:8c:5f:4d:f0:8b:6e:88:f9:97:71:
2e:25:ac:f8:c6:74:de:91:47:b0:4d:a4:9c:8b:3b:c4:48:4f:
ea:f2:61:5f
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUL0CuVoV8ZRCaJePZLnw1Ul9+QyYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNjA5MTYyMDE5NDRaFw0yNzA5MTUyMDI0NDRaMDMxMTAvBgNV
BAMTKDY5NkYyQTlBMTNDNUFDRDQ5QzI1MDBBMjk4NkMzRjg1MTM5NDA4REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGXXpw86YESZy3UbuwkGfMYFDj
iKmt5+ffV2BPD4BKRUPfgBsAgFyM+XhsDSF8JzPlN9+2trmKHkb+MIvHpunMkI4Q
KXKDPXGle/x4Jak7uZzyL1hR1WyB5yd5OnSDJ+/nvP+xICc1cc3fNhYYybM2aISo
Hn3ksrHcvic3DEPy3oyyq210mtIIPMBhID/4jQEDZKU3BURmjvSMevQ5VzGJdFCO
mx4ubZshCW1p4aSZKupUYMGVVYae4lCRC4ffwaqox6z88qVa+RYVMS7fDwxWKp4Q
nDFUX+lpUpDoovjBWKgkNBAzhBhVfUZ2PQhT1WXLzVEsrvMnWmWxEG5sxYcNAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUaW8qmhPFrNScJQCimGw/hROUCNowHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy
MzQzNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZN9
9jANBgkqhkiG9w0BAQsFAAOCAQEAMb2maxLJFX1gqhVkUl8tYbo1xjh6XdgbRUHV
ubsS1Vcykd5nFPaMQSPDf9X7yltShV478CSczYiO6GGj9X/RuOrJtv+bSwcrnRxG
zrGx2bqFV0Xl2PxwbzxSMM65+hOGnjqRy9k+JxZlAxxNO41MJwBqnie3pUQGEoAJ
0rpAwO1txwxsPhCJe3rcAOkCqpsUhpumcesK4lye17pxU+VLOJouKt+nMttWl0GC
hJffMVoqJ8OUEU7UdfJ+LgIBAfphoXgCMljAQYEEXasEOeISQw836lFuTJt69liH
Js1lEwqMX03wi26I+ZdxLiWs+MZ03pFHsE2knIs7xEhP6vJhXw==
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:26:38 2026 by rpki-client