Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139392e302f32342d3234203d3e20313333313533.roa
File: 3134372e3132352e3139392e302f32342d3234203d3e20313333313533.roa (raw, json)
Hash identifier: 60Dyzu/hkbaJXQC89qfgR4fgzWsXYK1KtkbQr4WE3HA=
Subject key identifier: 71:13:28:4E:00:3D:BE:37:B6:99:10:21:53:4D:95:77:FB:32:F4:7A
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 732585B0FEBF735B6802A1EAE0AE3B163E0763BA
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139392e302f32342d3234203d3e20313333313533.roa
Signing time: Tue 21 Apr 2026 09:09:10 +0000
ROA not before: Tue 21 Apr 2026 09:04:10 +0000
ROA not after: Tue 20 Apr 2027 09:09:10 +0000
asID: 133153
IP address blocks: 147.125.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:25:85:b0:fe:bf:73:5b:68:02:a1:ea:e0:ae:3b:16:3e:07:63:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Apr 21 09:04:10 2026 GMT
Not After : Apr 20 09:09:10 2027 GMT
Subject: CN=7113284E003DBE37B6991021534D9577FB32F47A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bb:d2:08:c8:73:77:8c:c0:24:a6:08:a0:bc:
ff:f6:a7:27:35:c6:3a:9c:01:7d:96:cd:3c:7d:45:
34:4d:22:68:e4:7a:ee:0b:16:ca:cb:24:22:17:5b:
40:6c:7d:1b:92:68:fe:3c:77:b4:37:8c:ff:88:ef:
85:06:88:ae:b8:c4:b9:bd:a1:7d:13:dc:42:42:83:
ad:1e:c3:7e:85:79:15:13:a8:26:d6:f9:95:73:5a:
29:37:a7:33:18:8e:94:c4:08:38:f6:18:a0:06:89:
85:92:3d:8c:bf:d5:b1:18:85:97:09:da:d5:23:90:
ee:25:00:32:58:bf:c0:5c:7a:5b:5d:8a:b2:c3:c7:
d6:91:4a:8a:64:b2:68:2c:13:7e:48:53:63:25:ba:
47:f6:51:a3:72:55:e2:d8:fa:e0:9e:97:9e:78:16:
5d:98:2c:b3:0a:d6:7b:9c:a1:ab:f5:0b:7d:14:a0:
91:92:d7:e6:eb:f9:b7:50:73:20:e0:70:d0:12:a8:
25:fb:84:d9:15:5a:d0:56:1c:ef:49:82:d0:4d:65:
82:40:2c:2d:67:8b:0c:8b:68:16:31:1a:c0:28:46:
5a:31:cc:9b:17:ec:17:a5:08:2d:c7:1f:89:d2:53:
f9:2f:2f:15:2a:62:4c:a0:14:cb:69:f3:94:56:2d:
a3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:13:28:4E:00:3D:BE:37:B6:99:10:21:53:4D:95:77:FB:32:F4:7A
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139392e302f32342d3234203d3e20313333313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.199.0/24
Signature Algorithm: sha256WithRSAEncryption
31:10:cc:6c:c1:a0:0b:6e:30:89:cb:56:04:87:71:5e:d5:59:
f8:55:95:c4:ce:ea:19:83:6a:c0:c9:ce:f9:d5:1d:10:45:6c:
15:fd:ad:cd:30:f6:c1:22:fc:ff:1a:c9:f2:8d:98:bb:cd:cc:
cf:ef:9b:35:11:4a:05:0e:20:70:34:d9:60:7b:c0:05:2d:a7:
04:b2:58:ca:77:9c:16:e8:27:d3:90:90:32:2b:ec:90:95:63:
a7:a7:2f:94:d0:f8:62:33:0a:3c:88:2b:4d:db:ee:4e:9b:2a:
09:7e:2e:89:8d:d2:98:4c:e9:20:46:1d:d9:de:27:9e:13:b1:
60:aa:ac:67:f0:90:7f:14:13:5b:32:22:ad:ac:b3:6c:5a:4e:
a5:7c:27:22:38:26:92:f3:b6:a1:26:d8:56:f3:dd:68:d8:17:
46:0b:66:c0:bb:11:a3:f8:30:ce:d2:02:4e:1a:33:56:3e:c4:
5d:a1:9e:74:e6:c1:4c:da:9a:83:00:4a:a9:a6:d9:ea:7e:17:
3e:62:27:a8:d0:b6:59:73:f4:8f:10:ee:47:47:73:71:e3:b5:
8b:6c:2a:8e:48:a2:a0:b9:e2:07:d3:a8:af:e2:e4:9c:3d:1f:
7b:db:55:fa:da:19:e4:53:fe:d2:07:c2:51:70:28:a2:f4:38:
f7:a8:a3:c7
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUcyWFsP6/c1toAqHq4K47Fj4HY7owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNjA0MjEwOTA0MTBaFw0yNzA0MjAwOTA5MTBaMDMxMTAvBgNV
BAMTKDcxMTMyODRFMDAzREJFMzdCNjk5MTAyMTUzNEQ5NTc3RkIzMkY0N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2u9IIyHN3jMAkpgigvP/2pyc1
xjqcAX2WzTx9RTRNImjkeu4LFsrLJCIXW0BsfRuSaP48d7Q3jP+I74UGiK64xLm9
oX0T3EJCg60ew36FeRUTqCbW+ZVzWik3pzMYjpTECDj2GKAGiYWSPYy/1bEYhZcJ
2tUjkO4lADJYv8BceltdirLDx9aRSopksmgsE35IU2Mlukf2UaNyVeLY+uCel554
Fl2YLLMK1nucoav1C30UoJGS1+br+bdQcyDgcNASqCX7hNkVWtBWHO9JgtBNZYJA
LC1niwyLaBYxGsAoRloxzJsX7BelCC3HH4nSU/kvLxUqYkygFMtp85RWLaM9AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUcRMoTgA9vje2mRAhU02Vd/sy9HowHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx
MzkzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMzMxMzUzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAJN9xzANBgkqhkiG9w0BAQsFAAOCAQEAMRDMbMGgC24wictWBIdxXtVZ+FWV
xM7qGYNqwMnO+dUdEEVsFf2tzTD2wSL8/xrJ8o2Yu83Mz++bNRFKBQ4gcDTZYHvA
BS2nBLJYynecFugn05CQMivskJVjp6cvlND4YjMKPIgrTdvuTpsqCX4uiY3SmEzp
IEYd2d4nnhOxYKqsZ/CQfxQTWzIirayzbFpOpXwnIjgmkvO2oSbYVvPdaNgXRgtm
wLsRo/gwztICThozVj7EXaGedObBTNqagwBKqabZ6n4XPmInqNC2WXP0jxDuR0dz
ceO1i2wqjkiioLniB9Oor+LknD0fe9tV+toZ5FP+0gfCUXAoovQ496ijxw==
-----END CERTIFICATE-----
Generated at Wed May 13 15:16:07 2026 by rpki-client