Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230392e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3230392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: tnLFjH21nW4ifUUxmVWQuMXnD2TjJCiEFnHZnyhP3Po=
Subject key identifier: 3D:2A:22:D7:8F:A5:2D:FA:A9:3A:17:1F:2B:87:0A:88:2D:05:DF:4A
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 1F43974BD819025481B4222A2397F8DFA7E356FE
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230392e302f32342d3234203d3e20383334.roa
Signing time: Wed 23 Sep 2026 00:39:10 +0000
ROA not before: Wed 23 Sep 2026 00:34:10 +0000
ROA not after: Wed 22 Sep 2027 00:39:10 +0000
asID: 834
IP address blocks: 147.125.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:43:97:4b:d8:19:02:54:81:b4:22:2a:23:97:f8:df:a7:e3:56:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 23 00:34:10 2026 GMT
Not After : Sep 22 00:39:10 2027 GMT
Subject: CN=3D2A22D78FA52DFAA93A171F2B870A882D05DF4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f5:fe:4d:9f:82:c8:97:1c:a8:a7:50:05:c6:
88:10:72:d3:23:a9:3d:71:b0:5f:df:99:62:14:51:
ee:ac:f6:66:60:89:74:36:61:2c:71:f1:49:40:40:
0a:c8:6c:4b:4d:75:21:e7:e4:9c:62:5a:78:bb:80:
ac:4b:5c:65:06:f1:ab:9a:4b:ef:6c:13:c4:01:e1:
1c:7a:26:f3:9c:2f:74:bd:39:84:6d:78:54:eb:17:
74:68:74:74:13:6f:17:65:65:45:91:99:d1:a5:33:
7a:a6:15:38:a5:40:ff:ba:42:c5:8b:43:b1:12:95:
f7:f3:5d:e5:72:34:f5:41:d8:10:96:c1:79:cb:21:
2b:ef:52:9b:1b:aa:4d:f7:db:ab:e2:db:40:92:b5:
81:e1:ea:b2:46:01:df:f2:21:37:1c:5c:b0:34:7e:
23:58:f7:b0:1c:9f:e5:1a:17:5e:6f:c6:41:56:47:
7d:06:1b:63:a9:ee:e8:f4:be:b2:bd:2b:05:53:06:
c6:aa:b0:58:0a:75:00:a7:74:cf:c6:59:af:64:75:
d4:7c:96:39:b0:72:57:50:aa:37:0c:c2:60:8b:82:
20:53:d9:5f:2d:ae:20:32:47:b8:51:26:f2:05:1b:
86:ed:06:c8:f3:0b:54:d3:17:f9:1a:71:f1:6a:fb:
35:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2A:22:D7:8F:A5:2D:FA:A9:3A:17:1F:2B:87:0A:88:2D:05:DF:4A
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.209.0/24
Signature Algorithm: sha256WithRSAEncryption
91:78:15:11:0c:22:41:7c:cb:d5:32:f5:3c:d5:43:4c:e4:e7:
c1:8a:e6:7e:2f:c1:7c:10:0a:54:c4:ba:31:7d:8b:94:f9:19:
19:f8:9b:61:5b:af:c7:2a:d2:af:3b:06:b5:39:30:0e:dd:fd:
3c:9d:f6:cb:b7:55:d8:ac:a1:1a:a4:5a:26:e9:66:43:2c:e7:
d9:ca:67:20:89:ca:07:f5:c0:84:5f:9b:f5:c5:97:15:24:d1:
d1:f6:b7:5c:7d:6c:a4:6e:28:ac:34:fe:c6:86:b0:b0:4b:e5:
e1:b2:14:37:06:3b:fe:0d:f7:cc:0a:1b:91:ab:3a:db:a5:58:
2c:ac:d6:a7:94:e8:2f:6a:21:af:63:20:29:ce:f6:69:b9:20:
91:eb:34:8b:5a:40:87:aa:71:01:38:ef:e1:bd:19:f7:f7:8a:
be:98:62:c8:19:50:b7:ec:eb:60:7b:a6:7e:cf:27:de:0c:06:
e5:4d:60:6e:f3:57:1f:e5:81:b4:dc:3e:01:2f:32:fb:ab:0d:
c7:ad:81:76:e3:c4:43:a3:80:3a:c9:bc:c0:37:e2:e5:98:2e:
aa:82:2a:f9:ae:1e:19:a5:69:02:fb:ee:9d:fc:cd:19:4d:3d:
08:45:45:ae:58:4d:e8:8f:73:e0:ea:44:10:b4:14:bd:69:2e:
0d:a1:85:f0
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUH0OXS9gZAlSBtCIqI5f436fjVv4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNjA5MjMwMDM0MTBaFw0yNzA5MjIwMDM5MTBaMDMxMTAvBgNV
BAMTKDNEMkEyMkQ3OEZBNTJERkFBOTNBMTcxRjJCODcwQTg4MkQwNURGNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx9f5Nn4LIlxyop1AFxogQctMj
qT1xsF/fmWIUUe6s9mZgiXQ2YSxx8UlAQArIbEtNdSHn5JxiWni7gKxLXGUG8aua
S+9sE8QB4Rx6JvOcL3S9OYRteFTrF3RodHQTbxdlZUWRmdGlM3qmFTilQP+6QsWL
Q7ESlffzXeVyNPVB2BCWwXnLISvvUpsbqk3326vi20CStYHh6rJGAd/yITccXLA0
fiNY97Acn+UaF15vxkFWR30GG2Op7uj0vrK9KwVTBsaqsFgKdQCndM/GWa9kddR8
ljmwcldQqjcMwmCLgiBT2V8triAyR7hRJvIFG4btBsjzC1TTF/kacfFq+zURAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUPSoi14+lLfqpOhcfK4cKiC0F30owHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy
MzAzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9
0TANBgkqhkiG9w0BAQsFAAOCAQEAkXgVEQwiQXzL1TL1PNVDTOTnwYrmfi/BfBAK
VMS6MX2LlPkZGfibYVuvxyrSrzsGtTkwDt39PJ32y7dV2KyhGqRaJulmQyzn2cpn
IInKB/XAhF+b9cWXFSTR0fa3XH1spG4orDT+xoawsEvl4bIUNwY7/g33zAobkas6
26VYLKzWp5ToL2ohr2MgKc72abkgkes0i1pAh6pxATjv4b0Z9/eKvphiyBlQt+zr
YHumfs8n3gwG5U1gbvNXH+WBtNw+AS8y+6sNx62BduPEQ6OAOsm8wDfi5ZguqoIq
+a4eGaVpAvvunfzNGU09CEVFrlhN6I9z4OpEELQUvWkuDaGF8A==
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:28:42 2026 by rpki-client