Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138382e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3138382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Uya6zgz/RgneJMx1+mD3zvW9dqv3YAChzYdzmy1QoFM=
Subject key identifier: 2D:B8:C7:F2:95:EA:03:78:FC:EA:87:4A:4A:65:AB:1E:DF:CF:58:40
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 4CC35C2A370846A468D57758D16704E458942753
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138382e302f32342d3234203d3e20383334.roa
Signing time: Fri 04 Sep 2026 12:18:42 +0000
ROA not before: Fri 04 Sep 2026 12:13:42 +0000
ROA not after: Fri 03 Sep 2027 12:18:42 +0000
asID: 834
IP address blocks: 147.125.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:53:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:c3:5c:2a:37:08:46:a4:68:d5:77:58:d1:67:04:e4:58:94:27:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 4 12:13:42 2026 GMT
Not After : Sep 3 12:18:42 2027 GMT
Subject: CN=2DB8C7F295EA0378FCEA874A4A65AB1EDFCF5840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:8b:d0:1b:d1:dd:c3:49:0a:29:aa:00:cf:
82:69:09:d7:23:38:49:74:81:ee:a8:18:21:96:19:
1f:dc:13:00:e3:f7:88:c0:26:8a:b6:04:51:98:ef:
6f:13:66:cd:f5:15:58:27:97:d6:bc:37:46:26:1b:
e5:9e:53:a5:a0:10:17:9d:00:d3:ed:fc:65:a5:d4:
91:77:a9:76:13:81:de:d4:69:62:d5:4e:f4:df:b8:
5e:1b:f3:db:4e:23:40:49:26:dc:e3:92:53:a9:98:
d1:66:d0:0a:cb:ba:0d:29:5f:10:0e:46:1a:26:53:
cc:e5:83:a5:1f:bc:9c:07:9c:9d:a0:0f:43:7e:56:
88:40:31:d8:ce:f1:e6:86:38:7f:56:67:38:f4:bb:
d5:53:7c:fb:b3:46:de:4f:84:1c:a4:43:d6:51:a2:
cd:c4:4f:31:c7:af:de:4c:9d:9f:42:99:55:fe:ab:
ce:f0:d5:2d:2a:bf:27:61:09:5b:c7:f2:46:fe:bd:
82:a6:6f:3e:c4:40:f3:08:3e:ca:93:b0:dd:a2:c3:
ca:12:ec:7f:4b:66:38:cb:15:2e:51:3a:cc:81:a4:
ee:3f:83:d7:66:ac:34:61:c3:56:c4:53:02:ee:70:
98:c3:a0:a8:4e:44:a8:d0:64:7c:91:99:96:16:6e:
11:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B8:C7:F2:95:EA:03:78:FC:EA:87:4A:4A:65:AB:1E:DF:CF:58:40
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.188.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:a9:e4:66:1d:39:00:9b:3b:7e:79:05:b9:a5:4a:4f:20:de:
ef:59:3f:6a:bb:ff:64:9a:31:05:9a:9e:6c:97:ff:97:c5:9f:
d6:60:9a:2e:a6:2e:ef:59:fe:f4:a7:55:89:9d:9a:2f:8f:05:
8d:af:89:50:34:b3:9c:31:18:d5:dd:ed:bc:f0:16:d9:1b:9e:
de:c6:3e:8e:76:3d:42:dd:a1:a4:cd:54:06:da:32:cb:19:7c:
30:38:50:a1:4e:e2:93:3d:b6:b2:12:1b:fb:3c:1b:f8:b2:9f:
32:97:93:30:a4:27:84:83:e6:7f:a5:4f:07:72:c9:0b:30:0d:
28:03:a0:87:32:1a:40:92:52:99:60:94:ba:0e:e2:af:aa:a2:
c8:09:9b:2f:e4:23:d2:8b:17:2c:62:18:22:7e:8d:7c:9a:16:
91:5a:a3:b0:9d:10:a0:a1:18:14:d1:90:26:d9:5d:ca:92:3b:
c5:60:3b:9a:9d:69:0e:0d:05:db:4e:0e:c9:fa:3f:59:d5:97:
19:55:9b:bb:0d:f5:d1:e8:84:d0:53:41:a0:b4:1c:3b:e7:20:
51:26:02:b7:af:b3:da:0d:47:bd:5e:d6:ad:d8:7e:89:da:6e:
4b:88:46:2b:0b:a5:91:50:ca:7e:40:a1:56:c6:4e:bd:d1:14:
fe:21:de:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:12:50 2026 by rpki-client