Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138312e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3138312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: GqOgXWluuzTpjyqR2/Goe4GGSfz7bbco3mH6YGbfjM8=
Subject key identifier: A2:91:71:59:C6:22:0C:AC:08:99:FB:2E:72:E2:6F:ED:73:8D:7C:B4
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 7AF6A2BA2486B743D6A0CB2473CC99224EE68532
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138312e302f32342d3234203d3e20383334.roa
Signing time: Wed 16 Sep 2026 21:32:39 +0000
ROA not before: Wed 16 Sep 2026 21:27:39 +0000
ROA not after: Wed 15 Sep 2027 21:32:39 +0000
asID: 834
IP address blocks: 147.125.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 13:47:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:f6:a2:ba:24:86:b7:43:d6:a0:cb:24:73:cc:99:22:4e:e6:85:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 16 21:27:39 2026 GMT
Not After : Sep 15 21:32:39 2027 GMT
Subject: CN=A2917159C6220CAC0899FB2E72E26FED738D7CB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d9:f9:6b:76:27:5a:9a:b0:68:6c:2f:94:6d:
43:d3:ff:29:35:cd:ce:67:07:5b:7a:61:5c:6d:8c:
44:e6:f7:01:e2:27:67:29:1e:af:6a:70:0c:70:1b:
7d:76:a6:ba:3f:61:5c:ca:24:a0:b8:a2:34:64:d7:
5a:dc:bd:81:f3:50:1c:62:96:a2:0c:b8:81:4c:51:
e4:ae:59:d0:a9:ca:28:4b:25:2f:9b:90:d0:cb:09:
e4:6c:10:3f:a0:0e:61:4d:c6:ee:e4:81:f9:08:fa:
7b:b2:f9:b3:1c:28:5b:a8:d0:30:e4:87:c9:f7:47:
4c:ee:ad:6e:c6:df:88:28:a7:bc:bd:dd:fc:d4:a6:
38:a4:61:56:94:7a:d3:1b:b6:65:a2:38:a6:9b:60:
ae:d1:bf:0a:e3:21:0d:19:57:f5:20:1b:ca:c5:1f:
bb:ea:76:50:af:73:83:f8:f2:d3:66:45:0c:c1:4c:
8e:0e:58:c8:45:a7:30:a8:26:e4:71:5f:d1:55:d2:
af:2e:8c:96:15:5f:93:5e:d1:db:da:25:e6:48:68:
f4:55:68:7a:ac:76:f1:1e:a8:b0:94:42:3e:64:44:
58:0d:91:e6:16:02:38:32:32:8e:53:4a:79:0f:95:
c1:4d:42:7d:4e:b0:50:32:7b:65:25:19:fa:f8:26:
0f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:91:71:59:C6:22:0C:AC:08:99:FB:2E:72:E2:6F:ED:73:8D:7C:B4
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.181.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:3a:ed:ff:2c:c5:5a:cf:15:61:93:4d:e3:ea:4d:c5:d5:56:
7a:d1:99:01:59:6d:86:27:2c:a6:22:8b:d9:4e:5e:7e:33:61:
75:f1:eb:f3:95:ac:80:51:20:24:9c:69:2c:1a:31:e4:24:51:
76:91:74:9d:54:c4:f4:9f:d9:87:4c:2c:1e:7f:1a:ca:3b:98:
aa:ed:ff:fc:e6:23:ea:de:08:0b:0d:45:c2:8f:e8:5a:77:63:
58:8f:69:9b:53:0d:71:d5:33:fb:b9:78:96:ab:fd:d3:14:c9:
27:85:86:c0:57:25:98:b5:1a:84:8e:b0:b3:93:b8:86:f1:58:
9d:a6:6a:a1:16:06:be:06:65:c5:db:fb:b7:5d:aa:03:dd:6c:
8c:c2:94:4a:bc:3e:88:3b:68:c9:e1:3c:60:ef:ed:95:ca:f0:
4a:1a:35:ff:28:d3:b0:63:7c:13:b7:52:0c:6a:29:52:a1:03:
67:f9:52:61:86:d0:a1:62:d3:db:31:5f:60:03:9b:74:59:81:
75:8b:74:2b:0c:76:f1:18:2c:66:7c:d4:7d:a6:ac:09:d1:a4:
b0:c9:e2:31:37:bc:6c:4e:1c:e3:d4:44:44:09:a4:0c:c9:f0:
4e:90:c1:ba:fe:85:34:72:76:9c:28:f8:fb:3d:e5:db:e9:07:
52:79:39:83
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUevaiuiSGt0PWoMskc8yZIk7mhTIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNjA5MTYyMTI3MzlaFw0yNzA5MTUyMTMyMzlaMDMxMTAvBgNV
BAMTKEEyOTE3MTU5QzYyMjBDQUMwODk5RkIyRTcyRTI2RkVENzM4RDdDQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR2flrdidamrBobC+UbUPT/yk1
zc5nB1t6YVxtjETm9wHiJ2cpHq9qcAxwG312pro/YVzKJKC4ojRk11rcvYHzUBxi
lqIMuIFMUeSuWdCpyihLJS+bkNDLCeRsED+gDmFNxu7kgfkI+nuy+bMcKFuo0DDk
h8n3R0zurW7G34gop7y93fzUpjikYVaUetMbtmWiOKabYK7RvwrjIQ0ZV/UgG8rF
H7vqdlCvc4P48tNmRQzBTI4OWMhFpzCoJuRxX9FV0q8ujJYVX5Ne0dvaJeZIaPRV
aHqsdvEeqLCUQj5kRFgNkeYWAjgyMo5TSnkPlcFNQn1OsFAye2UlGfr4Jg+PAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUopFxWcYiDKwImfsucuJv7XONfLQwHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx
MzgzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9
tTANBgkqhkiG9w0BAQsFAAOCAQEAPTrt/yzFWs8VYZNN4+pNxdVWetGZAVlthics
piKL2U5efjNhdfHr85WsgFEgJJxpLBox5CRRdpF0nVTE9J/Zh0wsHn8ayjuYqu3/
/OYj6t4ICw1Fwo/oWndjWI9pm1MNcdUz+7l4lqv90xTJJ4WGwFclmLUahI6ws5O4
hvFYnaZqoRYGvgZlxdv7t12qA91sjMKUSrw+iDtoyeE8YO/tlcrwSho1/yjTsGN8
E7dSDGopUqEDZ/lSYYbQoWLT2zFfYAObdFmBdYt0Kwx28RgsZnzUfaasCdGksMni
MTe8bE4c49RERAmkDMnwTpDBuv6FNHJ2nCj4+z3l2+kHUnk5gw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:06:41 2026 by rpki-client