Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134382e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3134382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: KqezqrH9wujXLiRGaQsm3o0CZ5sRR/3B5BIOsEnMNxA=
Subject key identifier: B5:63:AB:27:88:87:67:E5:08:1D:38:E1:27:9C:27:94:74:04:83:46
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 1E7ABD5ECCFC3A89EF6FC00A46CD2A5F83593C8C
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134382e302f32342d3234203d3e20383334.roa
Signing time: Tue 15 Sep 2026 04:39:19 +0000
ROA not before: Tue 15 Sep 2026 04:34:19 +0000
ROA not after: Tue 14 Sep 2027 04:39:19 +0000
asID: 834
IP address blocks: 147.125.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 13:47:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:7a:bd:5e:cc:fc:3a:89:ef:6f:c0:0a:46:cd:2a:5f:83:59:3c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 15 04:34:19 2026 GMT
Not After : Sep 14 04:39:19 2027 GMT
Subject: CN=B563AB27888767E5081D38E1279C279474048346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:56:81:bb:0e:36:62:5c:3b:c3:45:e0:65:
b2:bf:eb:9e:10:16:53:d6:35:5c:78:74:79:4c:42:
9a:de:ce:1e:dd:5f:49:d4:9e:80:7e:90:08:9a:96:
ac:33:02:98:5f:a6:88:f0:b9:08:ab:a4:d9:26:44:
1a:03:43:de:b3:8a:19:0e:c6:ad:f3:0e:4a:63:75:
f2:91:fc:f3:06:1f:55:09:ae:f6:63:9d:0a:94:14:
30:8f:68:9c:05:58:70:63:bf:e0:41:e8:d6:8f:14:
f6:14:3d:d6:48:e3:8c:e0:27:47:42:d8:34:ae:55:
fd:03:e1:f2:72:93:a9:a1:ae:0e:5e:9f:9e:db:f1:
ce:62:a2:79:ef:12:25:7a:c0:ca:5c:01:88:e8:32:
37:2e:06:92:26:cf:e1:1a:8c:63:a5:0f:0c:ee:5d:
13:1c:b0:54:54:13:c3:af:82:12:3b:0a:72:2e:23:
33:27:4b:bc:21:5d:73:b5:9f:c3:18:63:71:8f:03:
fb:48:d7:c5:44:4d:3d:e6:4e:52:c0:23:0c:66:d8:
ea:28:62:fb:c3:96:4a:ff:70:04:1e:22:3e:38:ee:
56:c1:3f:5c:02:b8:5c:ac:1b:62:c4:fd:2e:6d:cf:
37:99:3b:b1:da:90:23:79:e6:b4:da:79:0b:a1:92:
2a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:63:AB:27:88:87:67:E5:08:1D:38:E1:27:9C:27:94:74:04:83:46
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.148.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:2b:2a:f4:4a:18:39:5d:58:fb:59:32:1b:c4:6f:27:ba:dd:
e8:32:96:5b:70:58:78:30:48:79:ac:6f:cf:35:f2:4c:2e:4e:
94:b7:bf:13:e8:6c:f8:27:12:51:eb:7b:7d:07:cc:d9:08:17:
c8:bc:7e:5b:a8:54:6f:c3:c3:97:a6:24:9a:c1:10:93:5e:e7:
7c:6b:32:9e:61:ca:5a:df:d4:4a:6b:84:f6:0f:67:1a:98:ce:
24:1e:f5:5f:0d:7e:82:00:99:57:47:49:d9:08:56:68:87:3b:
f9:48:00:14:e7:c3:ae:83:10:eb:c6:11:f7:75:2a:31:f6:6d:
6e:97:03:0c:64:74:f3:ec:72:ef:8c:48:bf:2d:70:6e:47:18:
d6:ba:2f:c9:48:bc:a2:51:1a:e1:ed:33:7c:72:57:c2:00:83:
5e:19:cc:75:ed:66:c0:10:5a:f5:57:d6:e3:9d:8e:27:40:4d:
c1:33:88:ba:2f:fa:c7:d0:f0:83:8d:e2:f3:c3:c9:d0:43:6d:
50:57:13:fc:28:15:46:c9:bc:00:ad:81:a1:b8:41:93:f8:69:
cf:d6:8b:c3:93:c2:8d:b8:4d:3b:1c:cc:e1:ee:43:81:4d:74:
65:2e:01:60:08:6f:4d:22:50:9f:20:9e:20:fd:b4:1d:92:bf:
f4:a1:1d:72
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUHnq9Xsz8Oonvb8AKRs0qX4NZPIwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNjA5MTUwNDM0MTlaFw0yNzA5MTQwNDM5MTlaMDMxMTAvBgNV
BAMTKEI1NjNBQjI3ODg4NzY3RTUwODFEMzhFMTI3OUMyNzk0NzQwNDgzNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0FlaBuw42Ylw7w0XgZbK/654Q
FlPWNVx4dHlMQprezh7dX0nUnoB+kAialqwzAphfpojwuQirpNkmRBoDQ96zihkO
xq3zDkpjdfKR/PMGH1UJrvZjnQqUFDCPaJwFWHBjv+BB6NaPFPYUPdZI44zgJ0dC
2DSuVf0D4fJyk6mhrg5en57b8c5ionnvEiV6wMpcAYjoMjcuBpImz+EajGOlDwzu
XRMcsFRUE8OvghI7CnIuIzMnS7whXXO1n8MYY3GPA/tI18VETT3mTlLAIwxm2Ooo
YvvDlkr/cAQeIj447lbBP1wCuFysG2LE/S5tzzeZO7HakCN55rTaeQuhkiqjAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUtWOrJ4iHZ+UIHTjhJ5wnlHQEg0YwHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx
MzQzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9
lDANBgkqhkiG9w0BAQsFAAOCAQEAPSsq9EoYOV1Y+1kyG8RvJ7rd6DKWW3BYeDBI
eaxvzzXyTC5OlLe/E+hs+CcSUet7fQfM2QgXyLx+W6hUb8PDl6YkmsEQk17nfGsy
nmHKWt/USmuE9g9nGpjOJB71Xw1+ggCZV0dJ2QhWaIc7+UgAFOfDroMQ68YR93Uq
MfZtbpcDDGR08+xy74xIvy1wbkcY1rovyUi8olEa4e0zfHJXwgCDXhnMde1mwBBa
9VfW452OJ0BNwTOIui/6x9Dwg43i88PJ0ENtUFcT/CgVRsm8AK2BobhBk/hpz9aL
w5PCjbhNOxzM4e5DgU10ZS4BYAhvTSJQnyCeIP20HZK/9KEdcg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:19:07 2026 by rpki-client