Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230322e302f32342d3234203d3e203339383535.roa
File: 3134372e3132352e3230322e302f32342d3234203d3e203339383535.roa (raw, json)
Hash identifier: kEjAixmjN3EQ1OAXO+uuLIjnlgZPqoMNloxap5EWm/k=
Subject key identifier: 49:7B:0C:50:F5:F6:99:C0:F9:42:32:78:8F:D3:00:10:6F:9B:D6:18
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 239C9686342A7F6798264E5B17821CB2CBFC88AD
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230322e302f32342d3234203d3e203339383535.roa
Signing time: Tue 21 Apr 2026 09:09:10 +0000
ROA not before: Tue 21 Apr 2026 09:04:10 +0000
ROA not after: Tue 20 Apr 2027 09:09:10 +0000
asID: 39855
IP address blocks: 147.125.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:9c:96:86:34:2a:7f:67:98:26:4e:5b:17:82:1c:b2:cb:fc:88:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Apr 21 09:04:10 2026 GMT
Not After : Apr 20 09:09:10 2027 GMT
Subject: CN=497B0C50F5F699C0F94232788FD300106F9BD618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b9:09:a2:bd:87:42:f5:45:1a:86:6e:f2:29:
3a:43:1b:e7:06:44:13:31:41:5e:a7:f4:4a:fd:6a:
6f:00:2d:78:35:45:a0:b0:98:94:d3:2a:79:06:0d:
dc:f7:f1:84:cb:c3:ce:14:8e:c7:6b:57:e8:41:9c:
f5:23:aa:a1:76:25:34:e1:79:be:68:1e:2c:7f:8f:
db:5a:ba:b6:b0:1a:40:af:20:cc:ce:9a:27:d5:91:
29:9a:2d:c0:7a:95:8e:93:cc:88:4b:f8:0b:fb:0a:
f6:b6:10:75:5f:64:90:78:a2:77:f3:15:30:f1:6d:
fb:30:91:86:d5:f0:10:f4:5b:8a:74:8f:7b:76:e4:
47:a7:c3:32:3a:3f:38:8a:b5:1c:4b:1c:c4:f8:07:
79:64:27:7e:7f:35:4d:08:5a:63:dc:51:e2:a0:df:
a7:af:93:91:10:dd:78:af:37:8e:c4:e8:42:70:c5:
1c:a5:b4:50:63:85:1d:65:b3:5d:b4:e5:cf:ef:db:
69:5f:2b:1c:ae:07:cd:26:4b:c1:b2:41:3b:65:45:
90:18:ba:8a:6a:f5:10:a8:09:e6:5a:d9:d9:06:57:
b2:58:8e:eb:10:54:5b:17:ec:91:cc:74:64:6f:dd:
43:fc:1e:7e:de:31:26:09:3b:8a:6a:86:0c:81:ab:
45:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7B:0C:50:F5:F6:99:C0:F9:42:32:78:8F:D3:00:10:6F:9B:D6:18
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230322e302f32342d3234203d3e203339383535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.202.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:34:99:28:49:b4:2d:9d:ad:9a:17:1f:a0:f3:bc:1a:5c:48:
9f:32:04:fb:be:0f:b0:28:9c:52:65:95:3e:da:65:ec:d4:70:
d9:80:95:82:0c:f7:8a:1f:a8:46:46:1e:48:dd:0e:cf:67:6d:
79:78:52:53:15:f4:20:c4:6b:cd:b6:d8:54:5a:e8:6c:cb:70:
07:8c:7b:b2:01:03:df:4f:cd:b1:6d:2c:73:30:fb:4c:8a:5f:
f7:2e:b8:7c:68:12:29:2a:b5:19:ea:61:71:bd:cd:da:27:3e:
83:eb:0f:4b:69:b7:40:4e:bf:d6:00:74:09:73:48:c7:e7:6e:
aa:ab:14:93:b8:a1:26:00:53:3e:87:c3:0d:ea:4a:08:7c:82:
0f:be:85:10:38:06:6d:be:70:fa:c1:f6:ef:f7:7e:04:95:8f:
ff:f6:f8:40:99:6d:23:c9:92:0c:70:d3:4a:ad:d9:5a:6f:60:
85:ab:75:4e:7f:c6:33:b1:a0:43:ac:c8:57:37:c3:63:00:8b:
93:3a:85:33:5d:0a:84:eb:65:4a:fa:7a:61:12:d0:4f:2b:99:
f8:f7:5e:3f:f6:ae:90:d2:d6:19:00:ab:eb:62:55:44:34:6b:
6a:d0:8b:98:8a:d2:57:e5:84:29:dd:7b:95:42:fd:ed:e7:11:
ff:10:9b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:42:09 2026 by rpki-client