Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133322e302f32342d3234203d3e20323138373830.roa
File: 3134372e3132352e3133322e302f32342d3234203d3e20323138373830.roa (raw, json)
Hash identifier: lK6XB3giEBFE5N+3UAOeUi8yJLl3vnoleqSmyJOGrSY=
Subject key identifier: 43:C7:01:2F:25:42:27:54:A0:F2:56:25:90:F3:A1:19:AB:32:36:C9
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 17312D0FA517CA7D2971860163172A4EF8FD0D7B
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133322e302f32342d3234203d3e20323138373830.roa
Signing time: Thu 22 Oct 2026 12:02:58 +0000
ROA not before: Thu 22 Oct 2026 11:57:58 +0000
ROA not after: Thu 21 Oct 2027 12:02:58 +0000
asID: 218780
IP address blocks: 147.125.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 20:37:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:31:2d:0f:a5:17:ca:7d:29:71:86:01:63:17:2a:4e:f8:fd:0d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Oct 22 11:57:58 2026 GMT
Not After : Oct 21 12:02:58 2027 GMT
Subject: CN=43C7012F25422754A0F2562590F3A119AB3236C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e4:87:c7:95:98:de:d2:60:86:40:4f:4c:d2:
d0:d7:ef:44:14:6e:41:29:0c:dc:a7:e6:8a:63:2d:
df:84:82:2c:a4:47:9e:96:f8:35:e5:a2:da:cb:5e:
dd:88:71:84:7b:94:29:5d:4b:31:b4:67:80:fa:67:
61:17:41:58:6d:aa:f1:63:bb:5e:68:6f:86:d3:ea:
3e:c9:b7:29:a7:23:9b:81:ea:be:9f:47:1b:ad:82:
b6:ff:6c:ef:ca:2d:72:e3:6a:17:5c:ca:64:5c:d1:
2b:c5:96:8b:ae:5f:77:27:ea:53:56:8b:4a:1d:03:
ec:02:cc:1b:1b:0d:20:a9:7c:cc:e6:1f:49:89:b0:
74:a3:ae:fd:9c:a9:7f:2d:1f:e8:6a:b6:6f:13:b1:
ac:f2:10:84:fa:c9:d1:ff:3c:90:43:32:63:d6:64:
96:1d:3a:71:83:c6:64:0e:3c:60:53:a3:14:00:0f:
46:aa:ab:fc:fd:f4:44:57:82:8d:92:95:70:4e:af:
08:d7:35:a2:4b:e7:a8:39:99:89:72:68:d5:71:59:
71:8d:27:27:0a:04:67:3f:eb:74:89:8d:03:a8:c2:
d7:b7:b5:dc:67:0d:51:65:b9:08:f2:88:86:21:be:
10:2c:1c:8d:29:0f:42:b3:a8:40:2c:62:0f:1b:36:
cc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C7:01:2F:25:42:27:54:A0:F2:56:25:90:F3:A1:19:AB:32:36:C9
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133322e302f32342d3234203d3e20323138373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.132.0/24
Signature Algorithm: sha256WithRSAEncryption
60:2b:c3:8b:ec:78:a8:6a:54:45:01:01:34:8c:5f:27:90:59:
a7:27:c3:6b:08:72:57:3c:60:5c:b5:82:15:a9:10:9e:60:e5:
9f:6a:73:bc:b4:af:56:3f:53:db:28:22:e4:34:44:c8:90:6d:
e8:d8:2f:b3:6e:b8:e4:e4:df:12:c2:dd:6a:d8:8c:ca:ad:6d:
0d:38:36:e5:ef:fa:a1:b9:9b:d6:e9:24:f4:7f:7f:24:dc:d2:
7c:b6:bd:0d:4c:98:e2:2e:1f:f7:fb:a3:5d:00:c4:57:bc:f1:
3b:7a:ec:dc:5b:f5:3d:47:9d:0a:20:0e:97:dd:70:78:13:15:
21:38:7e:bf:1c:e3:9f:28:8a:58:b9:37:16:13:5b:98:62:4d:
b4:8d:0c:78:26:ad:28:e6:ba:db:38:e2:56:21:48:af:6e:ce:
f9:cc:85:13:2a:7e:6e:24:72:e0:22:a9:70:07:44:1b:ce:ed:
79:71:10:b9:29:d4:5a:ae:7a:52:09:48:42:7b:ab:8b:30:3c:
a4:07:62:44:5a:24:d5:f3:04:20:16:83:d7:ab:99:fb:7e:d6:
1a:dd:b9:35:43:c9:58:b3:7e:ef:0f:61:19:3c:a3:6d:6b:f9:
0b:85:fd:49:09:59:2e:e4:34:f6:ae:5c:7f:dc:0c:a9:f6:8b:
fe:56:91:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:13:33 2026 by rpki-client