Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138372e302f32342d3234203d3e20313436383133.roa
File: 3134372e3132352e3138372e302f32342d3234203d3e20313436383133.roa (raw, json)
Hash identifier: N2Ck8jqC2HAuk5Vdw6rS92Xb4fJC3g+wi4E/qZhJS3I=
Subject key identifier: C9:CD:88:69:F4:8E:93:CE:A8:F5:F7:5F:97:43:8C:61:98:4A:82:27
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 2FD81029F002677F1D5CBB0BAFCDB23B8159ED02
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138372e302f32342d3234203d3e20313436383133.roa
Signing time: Thu 24 Sep 2026 16:43:34 +0000
ROA not before: Thu 24 Sep 2026 16:38:34 +0000
ROA not after: Thu 23 Sep 2027 16:43:34 +0000
asID: 146813
IP address blocks: 147.125.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:13:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:d8:10:29:f0:02:67:7f:1d:5c:bb:0b:af:cd:b2:3b:81:59:ed:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 24 16:38:34 2026 GMT
Not After : Sep 23 16:43:34 2027 GMT
Subject: CN=C9CD8869F48E93CEA8F5F75F97438C61984A8227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9d:f3:61:85:5f:31:f5:86:75:e3:34:15:98:
6f:7b:15:4c:61:94:48:9b:2c:cd:96:06:cf:db:e2:
04:fb:d7:e5:8b:9a:05:0f:28:ad:4a:2c:83:3a:e4:
8b:9e:66:36:51:43:38:47:93:66:46:7d:ee:d5:e4:
2e:99:f6:9d:a8:5f:fc:45:d3:06:e1:c8:99:bb:c5:
9f:0e:93:00:e8:d0:8b:4a:0a:ed:0a:0d:40:69:f3:
fb:35:3b:b8:63:2b:70:fe:90:fe:42:e7:05:a9:83:
4f:51:d4:4e:a6:2a:5f:79:99:a3:53:08:1b:4f:e0:
4a:f2:83:78:53:35:77:b4:f9:9a:b6:e5:a2:f0:63:
b9:ed:52:cf:b2:4a:20:c7:c1:84:65:ee:7d:32:24:
e0:9c:0d:ed:0d:d5:18:13:2c:e6:f0:31:46:7a:7e:
20:81:ab:a8:80:37:34:12:cb:83:15:9c:c1:50:0f:
47:82:cf:8c:6a:0d:5a:d8:73:e1:0c:0d:5c:18:e6:
7c:ab:c7:8f:88:80:94:42:a9:dc:fe:f0:e5:d6:34:
90:fe:08:41:40:b1:c5:97:e7:d9:9b:23:f2:cc:e0:
30:79:47:d2:bf:a9:52:40:63:86:38:64:15:fa:d3:
51:5c:16:56:bd:ff:68:59:ff:51:c5:c8:fc:a0:88:
e1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CD:88:69:F4:8E:93:CE:A8:F5:F7:5F:97:43:8C:61:98:4A:82:27
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138372e302f32342d3234203d3e20313436383133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.187.0/24
Signature Algorithm: sha256WithRSAEncryption
77:f8:b0:18:f6:f4:93:de:04:d3:f0:26:5a:f2:93:67:37:d2:
b3:3c:4e:9e:0d:93:de:52:86:4a:44:50:e7:ac:98:78:c2:e0:
fc:90:06:57:a3:b0:f8:54:08:f3:07:e0:3b:06:45:82:65:c6:
86:9f:02:cb:69:90:40:d9:5f:ec:59:a0:66:6b:5c:d6:9d:cf:
a2:51:e6:9a:6f:a1:da:ff:5c:32:66:08:44:b1:b1:7d:55:62:
85:e7:52:80:12:f3:c3:69:52:51:15:5c:70:f5:f5:ce:c9:57:
40:19:fa:3a:0d:d4:7a:e1:ef:9e:18:a7:ac:b9:2a:ee:a8:01:
e5:88:62:05:9a:a4:ae:0d:e6:3c:c3:36:19:a1:09:f6:be:49:
4e:65:63:08:25:eb:5f:01:e0:b7:dc:e7:83:0b:cb:59:2b:a7:
13:63:89:e7:31:a5:0b:73:c8:82:7c:94:9a:da:31:f0:f3:98:
67:93:16:6c:d5:37:76:fd:2f:db:7a:00:cd:7c:c5:3f:bd:c8:
f1:78:9c:bb:9f:69:0e:b5:bd:64:54:69:53:56:5d:99:9a:b3:
c5:49:7b:9b:7d:79:cd:5f:18:9b:4f:46:e2:b2:4f:35:19:8d:
20:2a:58:ee:7b:cc:92:32:fb:0e:4b:96:79:a4:8c:77:11:b5:
ab:aa:99:50
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUL9gQKfACZ38dXLsLr82yO4FZ7QIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNjA5MjQxNjM4MzRaFw0yNzA5MjMxNjQzMzRaMDMxMTAvBgNV
BAMTKEM5Q0Q4ODY5RjQ4RTkzQ0VBOEY1Rjc1Rjk3NDM4QzYxOTg0QTgyMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3nfNhhV8x9YZ14zQVmG97FUxh
lEibLM2WBs/b4gT71+WLmgUPKK1KLIM65IueZjZRQzhHk2ZGfe7V5C6Z9p2oX/xF
0wbhyJm7xZ8OkwDo0ItKCu0KDUBp8/s1O7hjK3D+kP5C5wWpg09R1E6mKl95maNT
CBtP4Eryg3hTNXe0+Zq25aLwY7ntUs+ySiDHwYRl7n0yJOCcDe0N1RgTLObwMUZ6
fiCBq6iANzQSy4MVnMFQD0eCz4xqDVrYc+EMDVwY5nyrx4+IgJRCqdz+8OXWNJD+
CEFAscWX59mbI/LM4DB5R9K/qVJAY4Y4ZBX601FcFla9/2hZ/1HFyPygiOGtAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUyc2IafSOk86o9fdfl0OMYZhKgicwHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx
MzgzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM4MzEzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAJN9uzANBgkqhkiG9w0BAQsFAAOCAQEAd/iwGPb0k94E0/AmWvKTZzfSszxO
ng2T3lKGSkRQ56yYeMLg/JAGV6Ow+FQI8wfgOwZFgmXGhp8Cy2mQQNlf7FmgZmtc
1p3PolHmmm+h2v9cMmYIRLGxfVVihedSgBLzw2lSURVccPX1zslXQBn6Og3UeuHv
nhinrLkq7qgB5YhiBZqkrg3mPMM2GaEJ9r5JTmVjCCXrXwHgt9zngwvLWSunE2OJ
5zGlC3PIgnyUmtox8POYZ5MWbNU3dv0v23oAzXzFP73I8Xicu59pDrW9ZFRpU1Zd
mZqzxUl7m315zV8Ym09G4rJPNRmNICpY7nvMkjL7DkuWeaSMdxG1q6qZUA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 04:02:28 2026 by rpki-client