Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231302e302f32342d3234203d3e20343032383636.roa
File: 3134372e3132352e3231302e302f32342d3234203d3e20343032383636.roa (raw, json)
Hash identifier: VSOMpC7w6hGqhsHYsIwIBXKIdnQbGiSc22/4rZQul/g=
Subject key identifier: DF:F3:22:2C:A5:B9:CD:AF:1C:3F:3A:D7:D8:CE:98:B1:65:98:EC:F3
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 244058602556A75479AF82B3FA24D6904D0164E4
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231302e302f32342d3234203d3e20343032383636.roa
Signing time: Fri 18 Sep 2026 01:31:15 +0000
ROA not before: Fri 18 Sep 2026 01:26:15 +0000
ROA not after: Fri 17 Sep 2027 01:31:15 +0000
asID: 402866
IP address blocks: 147.125.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:13:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:40:58:60:25:56:a7:54:79:af:82:b3:fa:24:d6:90:4d:01:64:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 18 01:26:15 2026 GMT
Not After : Sep 17 01:31:15 2027 GMT
Subject: CN=DFF3222CA5B9CDAF1C3F3AD7D8CE98B16598ECF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0d:df:a3:68:3a:6b:f7:71:ca:c5:ae:6d:58:
16:f8:dd:c3:8d:56:f1:7d:88:b0:03:3a:3d:5c:64:
86:67:d3:f0:c6:74:34:72:20:8b:86:24:c1:1b:46:
0c:d4:0f:09:74:c7:85:6d:35:40:b3:db:c2:3c:bc:
37:4b:34:ce:17:87:69:80:86:e2:02:15:ae:38:91:
c2:af:7e:c6:4b:85:ad:22:c2:18:6d:99:53:3f:86:
84:47:67:aa:d9:92:dd:19:1d:5a:3b:01:74:31:5f:
52:aa:1b:6a:2b:73:65:dd:34:21:42:c8:79:25:16:
8a:b9:f5:94:3c:55:47:8c:e1:83:54:ad:8d:a2:fb:
69:47:1f:58:e2:3b:87:5e:f6:82:d5:01:12:db:00:
1b:1c:45:2d:fd:53:e1:32:0b:21:99:f6:78:01:a8:
7d:39:46:29:83:a0:e1:37:0b:51:11:08:68:c4:b7:
3a:ac:4a:c9:61:2a:de:67:fe:fe:35:f6:4f:52:d2:
9a:d1:cd:ee:ad:cf:7e:9d:25:f9:07:8d:aa:2b:b6:
2a:8c:3e:72:34:5f:1c:4b:22:0c:40:ac:ea:24:cb:
5a:90:01:e9:11:82:c5:94:f3:51:c2:6b:9c:bb:f1:
4a:96:3c:82:e2:9e:c3:3e:f7:8c:d5:42:1f:b5:5a:
65:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F3:22:2C:A5:B9:CD:AF:1C:3F:3A:D7:D8:CE:98:B1:65:98:EC:F3
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231302e302f32342d3234203d3e20343032383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.210.0/24
Signature Algorithm: sha256WithRSAEncryption
17:e7:a6:ca:62:ca:f4:9e:5d:38:0d:17:7c:ad:fb:5f:f6:e5:
ef:dd:9e:2b:a4:23:2a:06:3e:df:41:0f:a6:e8:9b:67:a4:e2:
c7:f6:14:3b:b5:fe:09:a3:17:ac:6e:15:df:f4:dc:e9:d8:00:
9a:22:d9:1a:eb:7d:33:56:a1:49:32:0d:34:51:ce:50:c2:22:
4c:ee:23:fa:ae:e8:8c:b6:d1:e8:40:6e:a7:d8:8c:34:21:79:
93:05:c3:15:7e:00:e6:aa:c5:ad:9d:89:68:bb:33:84:5a:81:
57:05:bf:e2:d2:51:59:d6:11:79:41:d6:c8:65:28:ad:88:c7:
66:2e:78:ff:5d:69:2e:f3:14:bb:61:aa:db:93:8b:43:d4:e1:
d7:a3:bd:34:32:ba:14:e7:8b:66:2c:4c:9b:16:7b:c7:df:07:
53:d1:58:f0:06:b8:7c:14:2b:5e:60:0f:fa:9f:7f:d0:24:f9:
6e:23:d2:32:81:5c:35:ec:cb:f6:d7:fb:a3:dc:56:bb:e0:9c:
f7:e7:95:1a:6d:58:4a:fd:79:50:3c:72:75:d3:80:62:73:fb:
40:54:2b:43:64:f6:86:a5:ca:74:d4:3d:25:65:f3:2f:ae:35:
b2:fd:78:36:aa:09:ac:be:2f:f3:d1:dd:a0:a4:f4:56:10:37:
2b:4e:ba:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:25:57 2026 by rpki-client