Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231362e302f32312d3231203d3e2035363530.roa
File: 3134372e3132352e3231362e302f32312d3231203d3e2035363530.roa (raw, json)
Hash identifier: KoWlqofMmHzetUuDtxv1ta4dcfpoeuY9W9XE31paFbQ=
Subject key identifier: 39:A5:23:64:0B:9E:F6:EF:30:84:2F:C0:DE:7C:CA:F6:4F:6E:9F:41
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 1A1452B39251E7F31A1B8548C1720C24920E687E
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231362e302f32312d3231203d3e2035363530.roa
Signing time: Tue 21 Apr 2026 09:09:12 +0000
ROA not before: Tue 21 Apr 2026 09:04:12 +0000
ROA not after: Tue 20 Apr 2027 09:09:12 +0000
asID: 5650
IP address blocks: 147.125.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:14:52:b3:92:51:e7:f3:1a:1b:85:48:c1:72:0c:24:92:0e:68:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Apr 21 09:04:12 2026 GMT
Not After : Apr 20 09:09:12 2027 GMT
Subject: CN=39A523640B9EF6EF30842FC0DE7CCAF64F6E9F41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:06:97:01:b6:0b:70:72:1e:c9:3c:9e:fb:cb:
4d:01:b1:c9:a8:7f:9d:19:06:d6:a1:3b:18:03:ad:
cf:8e:f3:67:80:1b:cd:cc:b1:62:9a:82:fd:d9:77:
8b:12:ec:53:4b:fe:f4:4b:57:87:6b:80:90:68:07:
d0:44:12:c9:02:e7:a8:29:f2:6d:c9:4d:1a:ab:88:
f7:a9:b0:95:a5:81:70:44:f1:cb:c8:79:71:c6:8a:
0b:b4:96:e0:cf:a7:08:95:e6:4f:98:53:83:e0:1c:
dc:21:f0:be:55:8a:50:32:f2:6f:f8:66:53:c5:51:
3a:d8:c4:6c:d4:0f:51:94:85:95:b8:0d:92:b2:94:
fa:9c:16:db:63:0b:4c:1b:5a:23:92:38:ea:e4:a1:
b7:f7:84:de:34:b5:8e:3b:c0:b5:02:cb:ec:6b:12:
5a:ba:d1:7d:cf:ff:cc:a0:56:2e:72:43:7f:97:73:
91:07:bc:ab:9f:d2:8f:73:22:32:b8:9b:b2:1d:0c:
a8:ec:be:dd:4c:d3:d8:78:5d:42:5a:15:90:23:c8:
a3:87:26:fe:5b:0e:ef:5d:9d:1c:98:9d:75:b9:7a:
b9:65:0c:4e:c2:de:53:0b:8d:ce:5f:40:cd:99:2b:
e8:67:cf:f8:f1:13:20:e9:fb:de:b1:57:18:c2:b5:
f3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A5:23:64:0B:9E:F6:EF:30:84:2F:C0:DE:7C:CA:F6:4F:6E:9F:41
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231362e302f32312d3231203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.216.0/21
Signature Algorithm: sha256WithRSAEncryption
a8:b6:a9:ff:d4:3e:59:ed:47:c6:26:af:3e:b9:df:0d:12:a8:
3e:6a:b7:2e:74:d8:e0:ab:e1:bf:8f:ce:d1:8d:93:4c:fb:d4:
d0:e6:26:b8:03:3c:4e:60:f5:83:3c:c8:87:31:18:e0:e2:a6:
08:4a:87:aa:52:f8:75:2f:9f:49:b8:7f:f4:e9:90:52:ed:28:
a4:55:9c:30:9f:fc:ce:51:86:d2:15:44:57:9c:19:b2:4e:e1:
61:58:4a:77:45:75:90:1a:93:61:6d:91:ad:fd:c1:56:a6:9e:
de:e9:23:09:59:6e:60:67:81:8e:97:49:56:52:3c:4c:15:fb:
f6:8e:6f:f8:a9:59:76:ce:7b:81:5e:fd:5a:58:f0:c6:b1:aa:
38:e8:5a:a7:58:ac:a0:de:3e:c5:6a:72:2c:e3:5d:7f:36:4f:
dd:4a:a4:af:0f:05:76:06:5c:d0:9a:c8:e3:f2:d3:af:25:24:
da:f8:8c:c4:5d:f0:95:4e:2c:cd:b3:03:bb:ea:97:0d:69:25:
54:c3:ae:43:a1:f3:6f:4a:4d:79:9e:c7:b5:49:a0:d2:10:14:
c7:ba:cc:cd:60:e7:bf:ab:be:78:31:d2:ea:23:ba:86:35:f8:
88:9e:db:f7:c0:3b:e4:29:20:c2:35:87:fe:b3:41:53:e0:f5:
0a:c9:f3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:37:35 2026 by rpki-client