Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134322e302f32332d3234203d3e20383334.roa
File: 3134372e3132352e3134322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: JczZ4gNXX26Ce+mqYNoyfIlDZud2W/7DZcMIKDbfqmU=
Subject key identifier: E0:9A:B3:16:33:F5:F3:8D:07:24:C6:79:FB:E5:8B:9A:89:F2:BE:22
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 3B6FD5CC2986098FFA46E042D42CBD6E96EDBBE2
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134322e302f32332d3234203d3e20383334.roa
Signing time: Tue 22 Sep 2026 11:15:19 +0000
ROA not before: Tue 22 Sep 2026 11:10:19 +0000
ROA not after: Tue 21 Sep 2027 11:15:19 +0000
asID: 834
IP address blocks: 147.125.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:6f:d5:cc:29:86:09:8f:fa:46:e0:42:d4:2c:bd:6e:96:ed:bb:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 22 11:10:19 2026 GMT
Not After : Sep 21 11:15:19 2027 GMT
Subject: CN=E09AB31633F5F38D0724C679FBE58B9A89F2BE22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:c9:55:08:f2:c8:53:8e:2d:c2:8e:71:32:
1c:9d:d3:aa:30:9a:b6:0b:c2:f0:6e:dc:03:cd:3c:
43:d4:72:d3:c6:34:3b:2b:b6:b3:d2:4c:56:19:de:
43:e4:88:82:9a:f8:c7:0c:7b:5b:03:9e:07:9f:09:
5e:77:1f:e0:c7:34:9d:55:42:04:9d:31:9a:a4:89:
33:54:af:61:56:8f:ad:fe:f7:70:2e:2b:bb:34:58:
35:63:33:30:78:ed:57:e0:5c:bf:c5:45:a8:4f:b8:
00:98:91:1f:a9:55:b7:02:ee:2d:8b:e1:79:6b:ac:
25:b1:63:29:29:eb:ae:27:2d:79:ca:81:48:20:b0:
00:f7:86:00:dd:a6:82:6d:d8:f9:8b:36:68:17:b0:
5c:ff:01:26:a8:63:29:b7:ec:8c:d2:60:9f:75:b8:
2d:93:3c:ff:54:bf:40:8c:cc:ff:30:46:8a:dd:99:
09:fc:08:51:b9:94:1d:ab:6f:36:fe:3b:23:81:3e:
11:21:25:d8:3a:d0:37:91:ec:68:4a:c7:6e:75:4c:
1c:0e:20:b0:2c:ac:6a:e3:50:a0:9f:7a:25:c0:05:
f0:4b:85:57:b4:1a:e8:ae:4a:78:95:8a:db:f5:65:
07:67:c4:2b:59:01:4e:43:61:a2:7c:11:c5:c2:47:
5f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9A:B3:16:33:F5:F3:8D:07:24:C6:79:FB:E5:8B:9A:89:F2:BE:22
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.142.0/23
Signature Algorithm: sha256WithRSAEncryption
10:83:a7:f3:a8:07:02:c2:8c:d7:fd:a4:b7:b8:e5:74:cc:da:
93:fb:f0:3e:2b:35:42:1c:d6:10:83:5b:84:c6:f0:b0:ee:c8:
59:36:77:06:d2:d5:3b:dc:c9:1d:8b:b2:0f:69:43:31:d5:16:
0a:8b:ab:f8:06:54:cf:b0:4e:28:48:7b:75:0a:ae:50:8c:1a:
b4:c7:11:d4:f0:37:be:f8:e3:20:e0:31:7e:b0:56:e7:47:2a:
ca:cd:27:7f:85:c6:3a:34:af:b6:65:cf:2f:ac:ea:8b:1a:f4:
f5:45:1c:ea:b5:89:e1:1c:2d:4c:09:20:7e:2f:04:ce:c9:3d:
13:5a:d7:a7:61:34:d1:16:ad:d5:b6:dc:c3:32:2a:7c:f8:cb:
e7:a0:1a:42:16:a3:7f:17:d2:68:75:f4:bb:7d:c4:a4:aa:31:
77:75:89:5f:89:fd:1b:d2:77:66:9d:1f:85:82:d9:ab:43:5d:
ee:1f:94:47:35:b4:38:95:1f:95:4d:77:58:d8:90:58:0a:a0:
4c:4b:57:be:d6:09:34:76:61:a7:a1:28:d5:b5:ec:cd:b1:cd:
fc:69:71:ed:48:48:bf:83:9b:9e:65:c0:16:73:3a:6d:94:f2:
c9:2c:e4:3a:2e:ed:57:92:1d:9c:de:d0:91:c4:f7:e9:b7:a1:
79:91:6e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:03:02 2026 by rpki-client