Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137312e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3137312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: o6/2iXPGyLRerQGB0V6PkQU+UDiXyviTyyXlLe1OG5o=
Subject key identifier: B6:FE:89:C4:5C:58:18:B7:5C:40:AA:24:DF:02:F4:63:8A:47:91:B7
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 74A0CB1A9DCC4CA24960AE2C0F6CE56FD14D47C9
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137312e302f32342d3234203d3e20383334.roa
Signing time: Tue 22 Sep 2026 12:04:24 +0000
ROA not before: Tue 22 Sep 2026 11:59:24 +0000
ROA not after: Tue 21 Sep 2027 12:04:24 +0000
asID: 834
IP address blocks: 147.125.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:a0:cb:1a:9d:cc:4c:a2:49:60:ae:2c:0f:6c:e5:6f:d1:4d:47:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 22 11:59:24 2026 GMT
Not After : Sep 21 12:04:24 2027 GMT
Subject: CN=B6FE89C45C5818B75C40AA24DF02F4638A4791B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7a:17:38:4e:05:cb:0b:f7:4e:fe:95:36:29:
61:99:0c:d4:f7:ab:8a:13:d8:a7:5c:0a:d5:99:43:
e2:55:fc:0e:43:17:ae:bb:66:ef:f7:8e:90:96:28:
db:00:24:d9:29:de:51:03:e2:42:a6:20:68:51:80:
3f:13:11:d0:dc:80:a8:8e:19:64:11:b8:fc:e6:0b:
a9:fa:04:4b:6d:e0:0f:73:0b:76:80:0b:a0:07:2b:
85:75:e8:4a:cf:8f:33:1b:51:61:ee:3f:ef:51:70:
0c:86:17:47:40:0a:2a:5e:dc:a1:f5:ee:26:ae:83:
f3:85:74:78:e7:14:94:bb:b4:02:94:09:71:4d:97:
97:82:95:6d:0f:78:c0:a0:31:c2:55:81:4b:42:a5:
c2:68:ec:fe:35:6e:32:4f:2c:7c:f3:63:71:9e:13:
af:b9:db:85:f6:db:de:87:e3:1c:06:4f:e3:cd:d4:
38:75:d1:97:cc:51:56:c1:5a:2d:5a:3e:15:ba:17:
66:6a:d0:30:6e:c0:a6:6f:5a:61:38:64:4f:a8:7a:
7e:98:92:6e:d2:94:22:26:e2:9d:16:3f:6f:5b:5b:
8a:b6:ad:24:bd:77:af:9e:0b:f1:eb:96:43:cf:a6:
11:2a:42:1d:62:51:c1:78:cf:00:fe:43:9d:1f:4b:
92:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FE:89:C4:5C:58:18:B7:5C:40:AA:24:DF:02:F4:63:8A:47:91:B7
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.171.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:2c:4e:76:ac:55:9c:7e:76:c3:c5:41:c6:f3:00:c9:47:8f:
75:48:4c:73:72:e0:87:af:a9:25:a2:d6:c3:e3:71:75:8f:a6:
29:4a:a2:3d:8b:c2:ed:73:93:4d:09:55:e6:72:28:81:21:49:
e1:cc:bf:36:bc:f7:4c:7c:d1:24:50:23:65:31:07:53:b8:22:
a9:6b:20:83:e3:39:ce:33:98:a4:7c:52:b7:b1:2b:47:24:09:
f9:8f:f4:02:0f:cc:48:01:99:50:45:04:69:7a:17:20:c1:1d:
36:c8:5d:19:0a:35:6a:88:fe:fe:47:d0:bf:c4:31:27:ad:71:
c9:7f:35:67:1e:62:ce:26:0a:bd:e1:44:bf:26:6a:61:3c:8c:
57:fa:2c:f4:bd:bc:60:96:84:11:e1:bb:b9:3e:f2:a2:26:e3:
f8:74:bc:fe:ee:ce:3f:e7:f8:2e:2f:46:09:82:34:73:ac:18:
c3:6b:de:d0:cc:e9:fc:82:d8:83:88:da:f5:5a:0c:ad:32:bc:
6a:57:a6:31:11:1d:b2:bb:21:69:89:64:d6:53:f4:e5:b7:06:
1f:56:9c:8e:21:55:4a:c8:6e:52:ad:b9:cd:17:a9:16:c0:bf:
e2:61:7f:4b:77:40:84:93:0d:57:2d:6c:2d:59:98:3a:3d:58:
57:84:75:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:46:29 2026 by rpki-client