Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234352e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3234352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: RaLQBUFomANLlJK4AeK4t7uDFstaVw7Ay4Sa32oO9QM=
Subject key identifier: B0:B8:0F:9F:82:FD:F6:EA:7B:0B:35:56:2B:EC:46:56:B4:A2:10:73
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 5474DC290F2B12C5069917F9C01DFE75F7C8E0CC
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234352e302f32342d3234203d3e20383334.roa
Signing time: Wed 16 Sep 2026 20:24:44 +0000
ROA not before: Wed 16 Sep 2026 20:19:44 +0000
ROA not after: Wed 15 Sep 2027 20:24:44 +0000
asID: 834
IP address blocks: 147.125.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:74:dc:29:0f:2b:12:c5:06:99:17:f9:c0:1d:fe:75:f7:c8:e0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 16 20:19:44 2026 GMT
Not After : Sep 15 20:24:44 2027 GMT
Subject: CN=B0B80F9F82FDF6EA7B0B35562BEC4656B4A21073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:03:14:78:ce:58:7c:3f:8c:bc:d1:0d:08:86:
c3:22:df:da:3a:49:e2:89:a9:00:81:e0:e8:91:04:
de:22:58:45:bb:af:4f:5c:5f:29:29:6b:66:19:91:
fd:80:33:3b:3c:92:6e:45:67:c1:76:0c:2a:3b:42:
4c:12:b2:0b:c1:b2:5b:99:9e:94:de:41:45:7c:ce:
a3:22:a1:9f:47:30:28:09:27:31:e0:93:7c:3c:ac:
cb:9f:05:78:8d:e4:a1:b3:c3:91:62:fc:08:84:11:
25:33:5e:61:67:03:f7:3a:9d:ed:b7:12:55:1b:d5:
3a:4a:d1:c2:ca:10:52:a5:7b:94:09:fa:e2:c7:7f:
23:16:7f:d0:f4:d9:f6:99:01:f3:a4:e1:a6:51:42:
c0:09:db:cc:7c:07:90:64:09:3f:66:ff:65:d2:3e:
ae:36:85:11:ac:1b:91:0e:76:20:57:89:29:94:59:
89:3d:7c:69:6b:a9:3c:d5:2e:3f:04:4d:a1:59:23:
72:04:95:f9:b5:11:bb:6b:15:3e:ee:9d:5a:37:6a:
99:04:5c:ea:57:ad:d5:40:49:72:8d:19:08:07:44:
2a:7b:d1:57:87:c4:f3:08:db:12:50:1d:9a:6a:ab:
1d:47:82:0d:d3:bc:00:f8:6c:ae:e4:18:66:2c:2a:
ae:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B8:0F:9F:82:FD:F6:EA:7B:0B:35:56:2B:EC:46:56:B4:A2:10:73
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.245.0/24
Signature Algorithm: sha256WithRSAEncryption
80:c2:12:83:f1:96:aa:83:12:f1:05:be:dd:a4:32:ea:25:22:
f4:47:55:3d:7b:1f:73:aa:b2:45:a8:5f:9c:c7:e1:32:45:6c:
ac:18:12:4a:00:b0:9d:c1:4c:ee:cd:36:f6:22:86:d6:ad:46:
93:b0:f6:80:54:1c:64:c6:7a:ff:b6:e7:37:fa:01:eb:85:27:
36:67:7a:10:f0:ff:61:8c:c8:0a:fb:1a:4b:c8:85:4d:07:9b:
f4:05:51:0c:42:d2:38:3d:84:54:0b:3f:b8:bb:54:52:16:23:
5f:3b:16:c9:6f:ad:b8:d6:0d:06:74:dd:26:23:a0:da:fb:c7:
78:f9:14:40:b7:16:38:f3:a1:a7:0f:a2:96:96:2f:58:72:5e:
5b:10:30:ec:ae:b9:2e:dd:7a:f3:3c:46:57:f5:22:4e:d9:d3:
50:0d:18:1f:a8:62:db:94:89:28:c9:34:3d:6f:df:da:ec:45:
98:6a:20:ee:09:21:24:88:90:fd:84:d9:e3:e8:6a:71:38:c0:
d6:0e:36:60:cd:95:d6:11:62:f5:0d:41:c0:11:d8:2b:88:7d:
24:94:2a:31:c6:0f:63:08:31:35:06:3e:a2:0e:7c:89:45:e1:
0c:85:d5:ba:c2:64:37:59:19:3e:ef:ec:ff:16:05:1b:3d:e4:
73:ec:8b:88
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUVHTcKQ8rEsUGmRf5wB3+dffI4MwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNjA5MTYyMDE5NDRaFw0yNzA5MTUyMDI0NDRaMDMxMTAvBgNV
BAMTKEIwQjgwRjlGODJGREY2RUE3QjBCMzU1NjJCRUM0NjU2QjRBMjEwNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIAxR4zlh8P4y80Q0IhsMi39o6
SeKJqQCB4OiRBN4iWEW7r09cXykpa2YZkf2AMzs8km5FZ8F2DCo7QkwSsgvBsluZ
npTeQUV8zqMioZ9HMCgJJzHgk3w8rMufBXiN5KGzw5Fi/AiEESUzXmFnA/c6ne23
ElUb1TpK0cLKEFKle5QJ+uLHfyMWf9D02faZAfOk4aZRQsAJ28x8B5BkCT9m/2XS
Pq42hRGsG5EOdiBXiSmUWYk9fGlrqTzVLj8ETaFZI3IElfm1EbtrFT7unVo3apkE
XOpXrdVASXKNGQgHRCp70VeHxPMI2xJQHZpqqx1Hgg3TvAD4bK7kGGYsKq5lAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUsLgPn4L99up7CzVWK+xGVrSiEHMwHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy
MzQzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9
9TANBgkqhkiG9w0BAQsFAAOCAQEAgMISg/GWqoMS8QW+3aQy6iUi9EdVPXsfc6qy
RahfnMfhMkVsrBgSSgCwncFM7s029iKG1q1Gk7D2gFQcZMZ6/7bnN/oB64UnNmd6
EPD/YYzICvsaS8iFTQeb9AVRDELSOD2EVAs/uLtUUhYjXzsWyW+tuNYNBnTdJiOg
2vvHePkUQLcWOPOhpw+ilpYvWHJeWxAw7K65Lt168zxGV/UiTtnTUA0YH6hi25SJ
KMk0PW/f2uxFmGog7gkhJIiQ/YTZ4+hqcTjA1g42YM2V1hFi9Q1BwBHYK4h9JJQq
McYPYwgxNQY+og58iUXhDIXVusJkN1kZPu/s/xYFGz3kc+yLiA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:20:08 2026 by rpki-client