Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS396356.roa
File: AS396356.roa (raw, json)
Hash identifier: Ye+NfvA2IBwZl2cJu9dzzx5vhPrKTykIDkAaYtOezg4=
Subject key identifier: B4:CE:8D:49:4B:9B:35:29:0F:28:0D:2D:DA:60:25:B3:71:50:A8:F1
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 601DEE0AC7A04756FE2DF842093BB77E6082BB3C
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS396356.roa
Signing time: Wed 04 Mar 2026 08:30:27 +0000
ROA not before: Wed 04 Mar 2026 08:25:27 +0000
ROA not after: Wed 03 Mar 2027 08:30:27 +0000
asID: 396356
IP address blocks: 147.125.135.0/24 maxlen: 24
147.125.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:1d:ee:0a:c7:a0:47:56:fe:2d:f8:42:09:3b:b7:7e:60:82:bb:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Mar 4 08:25:27 2026 GMT
Not After : Mar 3 08:30:27 2027 GMT
Subject: CN=B4CE8D494B9B35290F280D2DDA6025B37150A8F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e9:e9:ab:99:a7:3f:18:6b:4a:fe:28:54:41:
73:f7:08:50:f1:b7:81:56:d6:d2:5f:9b:c3:33:5c:
da:d4:b3:c3:ad:53:9a:c0:30:0c:b8:ac:d7:90:c6:
bb:94:0e:6c:89:91:af:e5:df:e2:80:7a:45:54:f8:
58:be:bf:18:26:08:ca:fe:cf:82:48:cd:d1:47:25:
35:da:40:2d:46:81:1d:40:aa:e5:77:59:a7:37:04:
40:ea:4e:a8:03:ab:3f:d4:f0:c6:c6:44:c3:2d:b0:
37:37:8a:22:c0:eb:ca:fd:d6:fe:ec:90:35:77:fb:
76:b0:77:59:5e:3f:8d:3a:69:30:fa:9f:e7:b3:6b:
60:d1:f7:de:cd:cf:0f:65:98:b3:53:d0:cb:0e:0c:
c8:22:39:a2:9c:6a:e3:46:fd:48:61:8a:d1:7d:6b:
38:9b:2d:47:f4:c1:a5:e8:3f:8c:31:18:31:ea:aa:
3c:f1:93:04:53:0d:4d:65:93:4f:c1:cc:71:19:7f:
cc:eb:16:06:2f:19:7c:d0:eb:75:44:77:1e:27:70:
5a:c8:46:81:f4:52:dd:b8:44:05:dd:53:1a:c8:58:
74:e0:4c:5f:dc:b6:0e:0a:e6:3e:a8:fd:1b:bd:51:
81:58:12:27:db:ff:bc:02:8c:b1:6c:3e:13:28:05:
01:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CE:8D:49:4B:9B:35:29:0F:28:0D:2D:DA:60:25:B3:71:50:A8:F1
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS396356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.135.0/24
147.125.255.0/24
Signature Algorithm: sha256WithRSAEncryption
33:9f:c9:0f:a1:92:84:f7:59:7e:8e:0d:db:1e:e2:d4:d3:db:
de:69:73:5f:c4:98:4a:15:c6:1f:e1:f1:0d:3c:e9:90:77:5d:
ab:59:cb:18:ee:68:52:90:99:19:f1:28:25:b7:4e:47:af:a3:
ab:ed:28:84:cc:d2:ec:4e:f4:9e:df:64:25:05:61:05:d7:cd:
0d:2f:fe:e9:ae:b3:0c:5b:0d:d1:f2:f0:25:d0:aa:63:42:1b:
ff:d6:8b:fc:1b:4a:d0:cb:8e:ad:25:e7:d8:da:71:b7:f2:ed:
b7:fa:57:1f:6a:61:08:9c:53:cf:07:a2:f8:db:a1:d2:d5:5c:
fb:02:b6:44:9b:bc:87:23:41:cd:24:ce:72:64:e0:c5:05:74:
7c:e6:2a:40:1c:ce:16:6d:a2:a3:25:62:50:4c:91:8f:42:02:
95:04:64:1e:66:fd:1e:bc:f4:6d:d5:c6:4b:1c:1f:2b:97:57:
be:af:b7:37:19:81:8b:3e:02:c8:3f:fb:57:b9:f3:8d:80:ad:
f1:8a:2d:fb:98:57:76:0b:8d:dc:8c:16:9d:4d:67:51:d8:84:
bc:21:24:69:48:7b:41:96:69:c6:cf:45:b0:08:6e:94:34:a3:
5e:74:a6:2b:fc:68:b2:67:49:48:90:d2:c3:ce:24:9b:17:ef:
8a:87:9e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:47:22 2026 by rpki-client