Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235322e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3235322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Lpp3gg2qT+rJXOhyjH8csKn9O1MNNd3HzGfDUtjCepc=
Subject key identifier: C1:73:06:77:BF:68:7C:A2:3F:1A:A7:FC:C7:82:86:CE:1F:67:EB:30
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 27ED6FFD0ACD596C64F21B688A729FA087A5F7D3
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235322e302f32342d3234203d3e20383334.roa
Signing time: Sun 20 Sep 2026 00:01:52 +0000
ROA not before: Sat 19 Sep 2026 23:56:52 +0000
ROA not after: Sun 19 Sep 2027 00:01:52 +0000
asID: 834
IP address blocks: 147.125.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 02:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ed:6f:fd:0a:cd:59:6c:64:f2:1b:68:8a:72:9f:a0:87:a5:f7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 19 23:56:52 2026 GMT
Not After : Sep 19 00:01:52 2027 GMT
Subject: CN=C1730677BF687CA23F1AA7FCC78286CE1F67EB30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:f7:ec:e0:a9:a3:fe:67:03:30:71:f8:d8:
2c:69:1d:b5:68:fc:b7:3b:98:0b:fa:9b:38:c6:d3:
e5:a3:a8:51:31:47:a0:81:f4:78:03:52:06:20:18:
a3:32:1e:03:61:2a:b4:a2:22:1c:f9:71:ab:41:3e:
2c:eb:a6:c7:0c:b6:06:e4:1d:60:b2:33:86:4d:1b:
60:f6:46:8f:9e:1d:96:40:4d:0f:98:c7:01:c1:0e:
20:f3:58:d1:48:44:71:ea:97:e1:4b:1a:02:51:fd:
c0:d2:8d:32:e8:ed:14:d3:17:ba:4e:df:ae:05:db:
3b:d1:4a:da:b7:86:57:a7:1c:e6:2d:dc:1a:3f:79:
6f:4b:66:0e:15:12:66:80:b3:e8:5d:6d:9e:c2:91:
b4:db:e5:68:29:2b:6d:ae:79:a3:9e:a0:37:6d:ef:
dc:8e:95:23:5d:e1:cb:d0:63:25:12:27:36:81:17:
1e:59:7d:e1:18:11:12:08:83:32:e0:d7:64:ab:98:
f2:16:89:23:75:3a:68:fa:ac:30:b7:10:5f:b5:6b:
9d:aa:a1:87:b3:5d:22:46:a4:89:e0:a0:c6:a7:4b:
3b:15:2b:f8:26:2d:7c:a5:a9:2f:e7:a6:4e:74:55:
20:8e:7f:83:c1:a9:c4:21:9a:2e:31:f6:73:b3:da:
33:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:73:06:77:BF:68:7C:A2:3F:1A:A7:FC:C7:82:86:CE:1F:67:EB:30
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.252.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:96:0a:1c:09:3b:81:9e:aa:b6:09:29:06:1f:74:c6:1d:36:
bc:0a:25:41:f5:20:89:39:fb:32:df:a8:c7:80:b9:db:72:e7:
a0:b5:f9:9e:d1:7a:b6:7d:34:d6:c1:01:af:4f:ac:f6:05:07:
80:e1:c6:f3:d2:2e:ec:60:13:25:43:38:13:42:4f:60:6a:a1:
cd:0f:6e:dd:a3:5d:a3:2e:b0:52:45:92:a7:84:a1:65:5d:29:
c4:d0:6c:e2:5e:e4:6a:05:18:66:b7:c3:99:8d:43:04:cf:dd:
e2:27:25:3b:76:66:45:d8:8f:b2:4e:29:ba:34:38:94:d1:8d:
58:f4:c7:e7:58:f7:3d:9d:6d:87:15:49:e1:29:77:cc:50:0d:
1a:6d:74:4a:ec:d5:ac:cd:b6:5e:48:73:b9:07:5a:37:7e:50:
d8:84:44:35:fe:00:b5:38:62:96:e4:36:fe:b9:6a:c2:01:97:
ec:d4:82:3e:99:7e:d4:9e:5e:d0:64:ec:99:e7:1d:24:ed:7e:
f2:be:07:ae:7b:5a:c4:d6:48:ea:59:4d:82:9d:7c:50:f1:74:
68:b7:74:d6:c4:3e:da:87:8f:3f:e2:0b:14:40:37:bb:b0:97:
e6:22:4e:da:4d:7a:fe:03:66:0c:f7:11:fa:28:09:33:c6:b8:
2a:b1:ea:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:47:32 2026 by rpki-client