Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135302e302f32342d3234203d3e20323134373230.roa
File: 3134372e3132352e3135302e302f32342d3234203d3e20323134373230.roa (raw, json)
Hash identifier: /1YC7mzhRfid9h6FMvZAIezN2vxKFHhkXqVmfLonAqg=
Subject key identifier: 5C:09:5B:71:36:6D:E8:25:0D:F4:01:36:C1:28:A7:C0:5B:99:CC:67
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 390DD810D8D50A377ECBD8212330486BB14F8C86
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135302e302f32342d3234203d3e20323134373230.roa
Signing time: Thu 07 May 2026 13:27:55 +0000
ROA not before: Thu 07 May 2026 13:22:55 +0000
ROA not after: Thu 06 May 2027 13:27:55 +0000
asID: 214720
IP address blocks: 147.125.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:0d:d8:10:d8:d5:0a:37:7e:cb:d8:21:23:30:48:6b:b1:4f:8c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: May 7 13:22:55 2026 GMT
Not After : May 6 13:27:55 2027 GMT
Subject: CN=5C095B71366DE8250DF40136C128A7C05B99CC67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e1:04:28:b8:7d:fe:93:eb:25:28:8c:fb:54:
65:24:c0:6d:03:31:a7:07:36:cd:c9:38:b0:47:be:
e9:4b:33:0d:20:a5:12:aa:68:b4:df:13:4d:15:2f:
59:dd:2b:16:e4:82:27:4f:79:93:9c:4c:0d:6c:a0:
f6:23:fc:5f:3e:9e:45:e4:bb:f4:d7:98:d3:69:ad:
b9:76:51:ea:97:13:a6:28:85:17:a7:c1:ce:a4:fa:
5e:fd:f5:29:78:58:24:78:3a:f7:bb:fb:22:00:85:
c6:1b:42:47:4b:6a:88:70:95:1b:dd:84:4c:2f:22:
bc:61:6d:ff:c2:d9:a6:41:39:4e:58:87:44:36:be:
b7:fa:40:b4:68:61:17:42:bb:8c:a6:50:42:fc:71:
9e:80:c9:e3:5b:47:81:64:b3:c9:87:3f:f1:e4:3c:
9e:c3:41:df:2e:1b:f9:b7:5e:ae:1e:75:0d:61:a9:
3b:61:d3:f1:72:8b:71:ab:b4:21:a5:4d:a0:6d:53:
fa:c1:cd:5c:f4:c2:a2:c3:a4:94:55:ca:5c:5b:6b:
00:75:13:35:86:3e:66:00:ba:18:59:1b:40:34:49:
35:d1:6b:2a:a3:89:ec:1c:0f:09:b0:94:ec:c0:3d:
e1:87:02:82:3f:b6:12:50:68:33:ed:04:6a:4f:b9:
ae:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:09:5B:71:36:6D:E8:25:0D:F4:01:36:C1:28:A7:C0:5B:99:CC:67
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135302e302f32342d3234203d3e20323134373230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.150.0/24
Signature Algorithm: sha256WithRSAEncryption
85:23:5e:7d:86:91:75:2d:7a:89:06:ab:6b:40:a6:ea:90:0e:
0f:7f:3e:50:50:9a:9d:1d:77:7e:5b:53:2a:2b:bf:7d:5e:37:
b1:3f:3b:b2:63:4e:b3:ae:1f:82:3c:b1:e7:e8:6a:37:61:5a:
ef:c9:fa:5e:33:da:02:63:9d:4d:ad:ea:dd:4b:20:9d:b7:4b:
46:ec:10:30:d8:20:f2:71:1d:31:b7:e2:b7:0d:d6:1e:bf:70:
65:06:64:a8:f8:1f:f8:18:9f:aa:63:c3:f9:ff:7c:e3:39:51:
c2:5e:42:b0:d5:42:61:de:79:4f:ba:65:3f:48:a6:ae:66:d7:
de:79:84:b9:56:3f:cf:80:4c:71:ab:2b:75:d7:39:7b:ce:3d:
76:e9:27:dd:2c:e9:6c:9f:18:4d:8d:27:e4:a0:e6:d8:c4:8d:
3a:71:50:b3:54:ce:af:b0:8e:57:0b:6f:b2:ff:2f:8c:a8:81:
0d:23:3d:f9:82:c7:5d:7d:55:5d:9a:75:58:cd:b6:76:d2:ce:
ea:21:aa:19:62:b4:ca:d2:55:11:7f:92:ed:31:3c:33:12:f2:
50:4f:68:6b:5b:25:a2:bd:2d:9a:57:2d:d5:12:a9:79:5c:5c:
1f:f6:ef:32:a3:a6:79:9d:53:9e:2c:ff:ff:bb:80:59:76:31:
87:09:51:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:32:13 2026 by rpki-client