Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e302e302f31372d3137203d3e2032343838.roa
File: 3134372e3132352e302e302f31372d3137203d3e2032343838.roa (raw, json)
Hash identifier: oXkkU96XigE+rpan6nxdzLh4ZrXbVm5xxVnDuRhpusE=
Subject key identifier: F1:06:66:FA:3C:2F:08:1B:91:51:DE:BE:22:C4:1C:E7:81:83:89:B8
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 014CC646E27937C8FDA1398CD2F3CFCB52FC9D4B
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e302e302f31372d3137203d3e2032343838.roa
Signing time: Tue 21 Apr 2026 09:09:12 +0000
ROA not before: Tue 21 Apr 2026 09:04:12 +0000
ROA not after: Tue 20 Apr 2027 09:09:12 +0000
asID: 2488
IP address blocks: 147.125.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:4c:c6:46:e2:79:37:c8:fd:a1:39:8c:d2:f3:cf:cb:52:fc:9d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Apr 21 09:04:12 2026 GMT
Not After : Apr 20 09:09:12 2027 GMT
Subject: CN=F10666FA3C2F081B9151DEBE22C41CE7818389B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:29:92:3d:47:82:1c:90:c6:ac:00:15:00:36:
a4:e4:3b:62:c4:51:20:64:e5:d1:fe:da:8e:f5:3a:
07:4e:26:0b:4e:8c:fe:46:76:30:37:56:8b:f7:7c:
95:67:3f:b2:97:3b:80:22:a8:8b:98:07:1c:1b:5d:
8e:29:a7:cb:15:87:2c:51:32:18:4d:5d:55:de:6e:
5c:ac:6b:19:12:f2:98:6e:ce:cc:90:39:0e:f5:23:
ea:6b:12:44:92:5b:87:37:1e:bb:8a:66:33:fd:08:
7e:df:14:d3:12:ac:4e:cb:58:94:39:74:cd:1e:93:
a2:1a:7a:08:b1:f8:c0:4c:e3:16:28:d6:71:5f:b8:
f3:0d:79:9a:3a:8f:31:dd:13:43:f7:18:b3:22:22:
aa:ac:ad:56:b6:5d:5b:da:5e:58:aa:69:d8:4e:a4:
15:2e:85:7c:43:e7:fc:9b:e9:87:0b:c3:eb:2c:36:
31:d0:5c:3c:bc:d8:55:30:72:1f:fa:f2:82:af:ec:
c2:27:93:b8:60:59:82:4d:02:08:fe:ba:99:29:f1:
32:eb:0e:eb:aa:ce:19:47:a7:72:ab:21:35:8f:bd:
e2:af:93:fe:d6:6d:13:bd:d4:c0:3b:5e:f5:5b:66:
a2:f7:c5:ac:b7:8a:74:94:e9:a0:af:c2:de:3a:68:
49:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:06:66:FA:3C:2F:08:1B:91:51:DE:BE:22:C4:1C:E7:81:83:89:B8
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e302e302f31372d3137203d3e2032343838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.0.0/17
Signature Algorithm: sha256WithRSAEncryption
5f:1d:cd:3c:b6:a2:91:73:21:db:b0:51:dc:ed:17:00:3e:19:
89:12:2a:d6:cc:54:26:27:43:c8:59:ae:20:4f:ff:f2:d6:a1:
c0:87:4f:25:d9:45:84:71:e1:4f:ea:06:1d:05:45:73:72:a0:
81:78:77:8e:59:f0:91:5d:94:d3:b7:cc:14:cd:5e:08:86:0c:
a6:d2:74:1e:d2:eb:de:19:d0:17:69:c2:c1:9e:4e:bb:fc:7a:
b8:c1:8b:a1:82:89:a4:98:ca:17:01:35:37:0e:bf:6f:36:19:
b3:f3:6e:ac:87:8e:be:68:1e:b3:87:45:20:8f:7b:9c:65:a0:
68:cd:2e:04:40:fb:3d:ae:12:7f:29:91:ad:b1:5d:ea:67:0e:
04:fc:29:be:40:57:d0:e4:ac:41:3b:bd:77:e4:3e:e0:c0:f4:
62:08:61:2c:2f:c1:e4:fd:85:eb:fc:b2:f3:fe:e1:a4:bd:e1:
40:b7:f4:26:27:42:f7:19:04:28:3a:64:45:67:b0:51:f4:97:
61:90:91:7f:a3:f9:f0:0e:34:2d:c3:40:e8:b0:a4:04:4a:06:
15:1d:d1:55:be:a2:4c:39:b2:0f:3a:bf:30:f0:aa:48:b6:2b:
4f:5b:bf:66:ad:01:df:20:a2:ca:ca:49:95:3c:8b:03:24:96:
44:dd:e6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:34:32 2026 by rpki-client