Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS398704.roa
File: AS398704.roa (raw, json)
Hash identifier: tV7fJBEbUdih2JUzaeuMBZYnnpaFuJH7D78V8Cl5CZE=
Subject key identifier: F7:54:23:BD:24:8D:19:AB:22:80:DE:B9:FC:33:5B:6E:5C:0F:37:BC
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 47D61AD4101CA03C916D9B7486ACD259D0056167
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS398704.roa
Signing time: Wed 04 Mar 2026 08:30:30 +0000
ROA not before: Wed 04 Mar 2026 08:25:30 +0000
ROA not after: Wed 03 Mar 2027 08:30:30 +0000
asID: 398704
IP address blocks: 147.125.129.0/24 maxlen: 24
147.125.132.0/24 maxlen: 24
147.125.133.0/24 maxlen: 24
147.125.134.0/24 maxlen: 24
147.125.140.0/24 maxlen: 24
147.125.141.0/24 maxlen: 24
147.125.142.0/24 maxlen: 24
147.125.143.0/24 maxlen: 24
147.125.144.0/24 maxlen: 24
147.125.145.0/24 maxlen: 24
147.125.146.0/24 maxlen: 24
147.125.147.0/24 maxlen: 24
147.125.247.0/24 maxlen: 24
147.125.248.0/24 maxlen: 24
147.125.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:d6:1a:d4:10:1c:a0:3c:91:6d:9b:74:86:ac:d2:59:d0:05:61:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Mar 4 08:25:30 2026 GMT
Not After : Mar 3 08:30:30 2027 GMT
Subject: CN=F75423BD248D19AB2280DEB9FC335B6E5C0F37BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a3:9d:84:18:dd:2d:3d:b2:da:b0:36:c5:d0:
29:2a:c2:e7:d2:1e:df:c0:f3:04:10:2c:86:6e:22:
a4:db:a7:64:02:44:49:e8:02:1c:d5:40:00:18:83:
cc:4e:46:f1:bc:d1:46:59:04:b8:52:a4:18:42:d9:
b4:be:81:3a:50:f3:18:72:aa:cb:c7:6d:6e:d1:53:
3d:74:76:d5:47:5a:ca:e3:d5:c2:5f:ab:8d:5c:a5:
9d:2b:57:6a:64:33:b3:34:a5:24:53:94:f8:48:c3:
5c:2b:f5:c7:04:b8:27:fa:f7:ee:ed:cd:ab:81:2c:
9b:be:69:ed:7d:20:7f:60:f0:c4:0d:57:da:83:43:
1e:5c:8b:97:64:5f:5d:07:e2:d6:07:06:eb:22:19:
51:56:d9:25:d6:31:e8:fb:63:2a:e6:c4:f2:19:ea:
e9:e7:23:df:ea:54:21:99:41:f0:ed:c3:5b:06:59:
e6:d8:80:68:43:20:d4:cf:da:bb:d6:6d:bc:7d:2c:
6c:db:00:e2:93:4e:bf:93:29:c1:7c:c4:52:99:66:
2d:b4:d4:2d:93:96:06:40:b5:56:03:af:2c:75:f7:
e5:b7:e5:17:2d:91:e7:f5:7a:7e:dd:13:a3:5d:9e:
f2:9d:69:10:34:b0:d3:5a:65:d4:e4:ad:b9:57:94:
f6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:54:23:BD:24:8D:19:AB:22:80:DE:B9:FC:33:5B:6E:5C:0F:37:BC
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS398704.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.129.0/24
147.125.132.0-147.125.134.255
147.125.140.0-147.125.147.255
147.125.247.0-147.125.249.255
Signature Algorithm: sha256WithRSAEncryption
2a:62:36:45:dd:e1:bb:ea:9c:3d:9b:e1:b9:4f:2a:6b:26:92:
1e:67:90:e2:dc:e0:af:2d:99:51:e3:a2:39:71:03:dd:3e:fb:
c0:73:6c:45:1a:02:72:92:02:69:49:79:5f:7f:1e:33:7c:3e:
86:28:1d:25:e8:ed:28:71:56:56:40:ff:c2:20:33:70:7c:2a:
0f:76:2b:b6:c6:2e:02:be:e2:04:25:73:37:0a:97:7d:63:ab:
ff:51:70:98:dc:3d:74:6f:b8:86:7e:6c:7f:e3:8a:f5:6b:96:
09:19:55:e1:78:98:d4:d3:ef:10:ea:74:f0:ce:58:3f:39:e2:
98:d8:a7:a7:fb:17:75:c6:a9:f3:a5:bc:b5:23:10:4b:62:a7:
54:2f:8e:ea:61:fa:11:b1:22:0f:0f:b6:17:b9:b9:1a:0a:cf:
22:86:c5:f3:6e:73:cf:62:7e:c9:c8:4a:e7:c4:81:fb:bd:8b:
d4:77:86:33:09:85:95:89:d0:60:51:fc:e6:fc:aa:6d:84:12:
1b:6b:b5:c5:3a:f6:94:97:94:f5:f0:f1:d9:e8:8e:09:64:ac:
8b:e9:fa:b3:1e:ff:a8:17:fe:55:d8:c3:b5:27:00:8a:f1:34:
30:a8:23:1b:ed:c3:8d:46:5a:cf:bc:ef:b1:1a:19:90:a3:06:
85:eb:26:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:00:07 2026 by rpki-client