Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133322e302f32342d3234203d3e20323138373937.roa
File: 3134372e3132352e3133322e302f32342d3234203d3e20323138373937.roa (raw, json)
Hash identifier: udIFfNHKivzLPCNIuYjtFFsfAXMyse1y8xR/N42ikgY=
Subject key identifier: C2:9B:D7:50:86:C9:B9:F9:DA:B0:9B:05:BB:C3:68:93:C2:DD:D9:EA
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 26F7135C188B053A0DE85E53233D7F85BC04335F
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133322e302f32342d3234203d3e20323138373937.roa
Signing time: Thu 22 Oct 2026 12:02:58 +0000
ROA not before: Thu 22 Oct 2026 11:57:58 +0000
ROA not after: Thu 21 Oct 2027 12:02:58 +0000
asID: 218797
IP address blocks: 147.125.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:29:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:f7:13:5c:18:8b:05:3a:0d:e8:5e:53:23:3d:7f:85:bc:04:33:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Oct 22 11:57:58 2026 GMT
Not After : Oct 21 12:02:58 2027 GMT
Subject: CN=C29BD75086C9B9F9DAB09B05BBC36893C2DDD9EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:05:ce:2e:2a:af:98:b3:09:78:c8:cd:89:33:
a3:2c:fe:60:63:73:05:1c:bf:de:c9:eb:a1:59:4e:
0c:1c:e9:9b:ab:53:e0:67:5b:7f:3e:1c:2c:0d:0d:
15:6c:b5:e0:e6:a7:54:00:d5:ff:7c:01:8a:b7:54:
6c:32:aa:fd:54:21:3e:8e:46:73:f0:4c:51:fc:14:
87:a9:0c:67:65:19:8b:97:f9:dd:4b:7d:fb:87:b4:
16:17:22:f2:95:1a:83:89:f3:35:59:40:62:31:26:
a8:1c:40:84:cc:d9:1b:40:1d:ed:23:a3:e0:fa:1f:
d4:8b:8e:2e:3d:f0:f1:e2:64:8a:18:e8:ea:c7:27:
b8:78:50:67:e5:ca:f5:00:f1:0e:69:72:36:42:00:
87:19:6f:55:f5:5d:95:c1:bd:db:d8:31:2f:a4:1b:
b4:c5:f0:2c:e1:90:25:d4:74:bc:65:46:ca:52:a2:
4b:be:a8:6e:08:d3:34:20:79:ab:88:0b:94:dd:0b:
18:b5:2d:3f:b7:e4:4b:31:06:9c:8d:3d:a9:15:42:
77:fe:e7:b5:79:f5:3a:b0:d0:09:bc:1e:f3:26:f8:
d3:14:5b:86:50:ec:35:55:c6:29:1e:10:a3:1f:d9:
12:7a:9f:8d:f8:92:94:38:89:1b:32:d5:b5:93:6b:
a6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9B:D7:50:86:C9:B9:F9:DA:B0:9B:05:BB:C3:68:93:C2:DD:D9:EA
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133322e302f32342d3234203d3e20323138373937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.132.0/24
Signature Algorithm: sha256WithRSAEncryption
68:65:9d:17:c2:ad:d2:3c:52:1c:34:d9:c6:4d:e4:8d:5f:ca:
0c:6b:8d:9b:6f:64:2a:b5:8e:b9:24:d4:1c:c2:1f:55:4d:db:
20:b0:ee:88:2e:ec:84:e9:aa:be:c0:7b:1f:69:39:b1:60:a5:
33:04:cc:b7:1b:42:71:fc:e2:57:7f:02:ef:4d:01:9d:b6:d6:
89:8e:4d:a3:18:c2:f2:21:19:d6:2a:25:29:ca:f9:ac:02:ed:
cb:c1:36:b6:ab:1b:10:87:1e:44:80:02:d3:06:72:2b:da:8b:
4e:d6:8e:63:e0:17:93:a2:a0:7a:ca:31:d4:5c:61:da:9a:63:
4e:e5:fa:0f:b4:4d:b0:22:3f:f8:62:f9:fb:f3:bc:53:c8:f3:
fb:3f:f6:b3:2f:c7:1f:21:a2:4c:1c:d8:75:83:64:bb:80:9a:
20:1f:f6:f0:39:b4:28:65:e7:b6:1d:2d:77:6d:8e:ba:bf:a7:
4f:6a:a8:0c:44:c0:a9:b9:ce:87:b6:ce:d9:a0:07:eb:ed:d2:
5a:93:db:2f:8e:9d:35:f8:07:3b:5c:39:d3:9f:9e:ed:4d:64:
87:34:93:f6:fc:97:03:cc:05:07:a8:6f:9f:ed:9c:b6:35:d4:
85:a4:39:87:00:e7:c2:bf:e0:b3:a1:1a:06:69:43:13:53:b5:
47:7f:5b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:38:38 2026 by rpki-client