Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235322e302f32342d3234203d3e203236303432.roa
File: 3134372e3132352e3235322e302f32342d3234203d3e203236303432.roa (raw, json)
Hash identifier: FioiYwZSi3ZzmmxWOb9+OSgLTsk9IIep+cJD0yNciNU=
Subject key identifier: AC:80:C8:A7:88:9A:86:45:63:35:14:FC:76:AD:1E:CA:2E:0F:13:A1
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 17BF4A549FE778562736EA95D7639CEE28960B09
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235322e302f32342d3234203d3e203236303432.roa
Signing time: Tue 21 Apr 2026 09:09:10 +0000
ROA not before: Tue 21 Apr 2026 09:04:10 +0000
ROA not after: Tue 20 Apr 2027 09:09:10 +0000
asID: 26042
IP address blocks: 147.125.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:bf:4a:54:9f:e7:78:56:27:36:ea:95:d7:63:9c:ee:28:96:0b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Apr 21 09:04:10 2026 GMT
Not After : Apr 20 09:09:10 2027 GMT
Subject: CN=AC80C8A7889A8645633514FC76AD1ECA2E0F13A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:50:21:80:c4:a5:2b:7f:f5:45:7a:7d:93:9d:
4e:81:9f:60:04:3f:86:ee:11:95:c8:28:7f:be:cc:
a5:91:f1:73:41:b1:66:70:b2:25:f8:4c:96:f3:6e:
2b:0b:8b:f1:ec:81:97:ac:11:70:de:c0:17:5f:7d:
84:59:20:5c:30:37:5e:58:3f:c7:5e:5b:39:dd:ce:
0a:d0:8a:d8:1e:48:77:2d:8a:e7:08:08:b6:f0:b7:
df:bc:95:0e:56:ec:44:16:2b:94:62:0c:c4:c3:79:
14:b5:c6:9b:ed:cb:e5:7c:67:35:e2:c0:3e:73:20:
c0:f9:d0:07:29:59:a4:83:d3:4b:f6:46:18:9f:d4:
6b:31:65:1b:d9:dd:84:e3:ac:13:f0:40:47:26:e3:
ea:c5:30:ea:1d:16:53:40:0b:a5:91:11:69:8e:49:
ed:a2:d3:0f:04:bb:65:25:93:2c:3b:ee:e2:f7:49:
1e:27:ab:fa:02:0d:e4:2a:99:fb:c3:ab:0c:fa:d2:
b2:08:6d:81:02:b3:99:59:e1:68:91:41:84:07:70:
d4:8b:64:59:c2:43:55:c2:be:aa:ac:0e:6d:89:d9:
ce:c2:3f:2b:64:1b:5f:99:24:1f:71:48:2b:93:b0:
fc:5a:48:b7:86:66:1e:cf:be:68:71:c1:b4:60:61:
9b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:80:C8:A7:88:9A:86:45:63:35:14:FC:76:AD:1E:CA:2E:0F:13:A1
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235322e302f32342d3234203d3e203236303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.252.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:a0:83:51:4a:7d:47:76:f5:a2:25:06:f2:ba:8c:31:c4:59:
96:de:5f:e8:f5:05:1e:00:c4:6a:8d:5d:23:21:96:08:21:f8:
2e:0d:5c:19:4f:8d:49:7e:9a:16:68:c6:c1:df:be:41:f9:41:
86:7f:b2:d1:15:0f:22:a1:9d:f8:06:ef:eb:b0:4a:ed:28:44:
39:d1:65:d6:02:8d:3f:74:78:01:65:5a:23:f9:ad:e1:17:ea:
b5:98:30:d6:2c:81:19:d6:8b:af:71:e2:24:5c:a0:d2:88:6f:
3c:2a:e9:d6:f7:d6:44:8b:99:5f:45:70:7c:c5:e6:f5:87:53:
2b:b3:5c:8e:62:d1:da:2c:9b:49:db:6f:45:68:fb:54:37:d6:
f6:bc:30:64:b1:c8:4c:23:c3:26:f4:99:07:18:17:ea:9d:df:
84:f9:f0:7a:df:f9:f3:dc:1a:d8:de:c9:94:59:f2:5e:8e:89:
07:74:28:77:b2:64:8b:79:55:ef:4e:fc:fe:fd:81:0a:e6:47:
af:89:1d:2a:08:3e:70:31:ee:35:88:b4:c1:1a:a5:b8:96:f6:
a1:c6:63:0e:bd:7e:4a:e7:19:84:0f:2c:08:89:fc:90:ee:f3:
f7:5f:60:f0:8b:8d:4f:90:06:16:c1:94:ba:ea:af:7f:89:a5:
f0:14:57:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:20:20 2026 by rpki-client