Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235302e302f32342d3234203d3e2035363530.roa
File: 3134372e3132352e3235302e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: Dpz4ew/tvuF//+nttNWitJ1Jh215qXIt3hUy5PySGbs=
Subject key identifier: 38:AF:04:E1:73:95:51:D8:A2:5C:16:54:E0:32:72:C6:CD:7F:B6:E0
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 0A7538D0C6E0D7F8A77673641F8B1B3ACF4F3447
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235302e302f32342d3234203d3e2035363530.roa
Signing time: Mon 23 Feb 2026 08:28:43 +0000
ROA not before: Mon 23 Feb 2026 08:23:43 +0000
ROA not after: Mon 22 Feb 2027 08:28:43 +0000
asID: 5650
IP address blocks: 147.125.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:75:38:d0:c6:e0:d7:f8:a7:76:73:64:1f:8b:1b:3a:cf:4f:34:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Feb 23 08:23:43 2026 GMT
Not After : Feb 22 08:28:43 2027 GMT
Subject: CN=38AF04E1739551D8A25C1654E03272C6CD7FB6E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5a:54:c7:aa:21:b4:34:22:3d:2c:79:38:7b:
dd:51:f8:fc:85:9a:63:ef:8e:45:f9:7f:8a:29:98:
9e:ec:90:bb:08:a9:77:e2:fd:b2:98:c2:83:ce:78:
2b:91:13:c0:45:d9:3b:d2:f4:e4:2d:4f:a4:7f:f7:
43:81:4a:b1:80:9b:be:66:62:66:d3:3e:95:cc:ca:
ca:d0:7d:43:d7:52:a4:cb:bb:26:b2:d6:fb:58:69:
03:b2:17:62:70:6a:88:30:ff:96:08:9c:b4:38:85:
c7:b1:0f:cc:72:99:05:cc:3f:57:19:9b:aa:55:ab:
75:f7:db:19:c3:15:2d:74:d1:e9:a2:b8:f7:5a:35:
2b:1e:29:11:6e:fe:d4:23:0f:68:35:f6:13:8b:2f:
73:88:57:a0:10:7e:44:c9:4b:be:50:52:90:a0:44:
31:2d:5f:ea:ed:d3:a9:6d:a4:83:50:db:8f:de:ec:
50:29:0e:80:46:48:34:38:d3:9b:90:0f:d3:0f:52:
5b:f4:5b:55:dd:a4:a0:06:d9:57:92:e0:4b:dd:11:
d5:e3:9d:8d:6b:75:7f:92:d2:a9:f6:fd:50:12:11:
df:87:92:8c:47:b5:0d:97:c4:65:61:6b:23:6c:7c:
f0:1e:8e:58:07:4b:1c:51:36:4a:7b:cf:00:00:9b:
1e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AF:04:E1:73:95:51:D8:A2:5C:16:54:E0:32:72:C6:CD:7F:B6:E0
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235302e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.250.0/24
Signature Algorithm: sha256WithRSAEncryption
63:e1:ca:ba:1c:9c:2a:93:5d:7f:80:8b:5d:2c:71:a6:94:c2:
65:e9:00:3f:48:31:6f:25:30:4e:43:1f:b7:5f:53:38:2b:e0:
d1:1c:84:30:d5:80:a7:89:6b:5f:62:38:08:22:99:0d:cb:e4:
c0:e9:54:fc:5c:69:2b:ec:44:b8:d0:79:e2:87:b2:fd:fe:89:
b0:52:80:3c:da:ef:e3:1b:1b:d0:f5:45:80:3c:c7:9c:19:fc:
53:35:58:70:c7:c7:e1:fb:0b:aa:ec:0b:00:2a:77:31:56:2b:
db:82:e0:7d:05:da:fd:d8:53:b9:7d:d7:c6:b6:b7:bf:92:82:
1e:be:2c:68:63:07:97:3b:8c:eb:fb:06:35:58:30:f2:c1:aa:
9e:b0:e8:27:1b:81:66:a8:30:52:9b:e8:d4:3e:4f:a1:d4:e9:
3e:62:4a:73:d0:9a:e9:f2:f9:dd:8f:8d:69:0c:bc:50:7d:20:
bd:da:71:90:38:7a:84:09:b2:b1:f3:b4:55:fe:c2:89:78:21:
43:8e:92:d0:84:ce:e2:4f:42:d9:0d:02:7f:38:a9:82:7c:35:
4c:86:1c:64:67:24:aa:a2:b2:20:39:6f:7b:80:16:b9:2d:d4:
1e:b3:28:84:b7:ce:bc:b1:a7:f3:65:65:06:d6:14:c0:41:6b:
76:f1:cc:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:06:54 2026 by rpki-client