Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133322e302f32342d3234203d3e2039333034.roa
File: 3134372e3132352e3133322e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: RX7LjNXREKJW4Fo6l0PaF8dx900aqui0WsDY91PSGWw=
Subject key identifier: FD:DA:57:E0:F2:2B:BA:50:2A:87:88:E4:E7:6F:8B:76:D2:42:BB:3D
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 487254D7527D1A4D23B5F9DCAE7946F2E2ED98C2
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133322e302f32342d3234203d3e2039333034.roa
Signing time: Tue 21 Apr 2026 09:09:13 +0000
ROA not before: Tue 21 Apr 2026 09:04:13 +0000
ROA not after: Tue 20 Apr 2027 09:09:13 +0000
asID: 9304
IP address blocks: 147.125.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:72:54:d7:52:7d:1a:4d:23:b5:f9:dc:ae:79:46:f2:e2:ed:98:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Apr 21 09:04:13 2026 GMT
Not After : Apr 20 09:09:13 2027 GMT
Subject: CN=FDDA57E0F22BBA502A8788E4E76F8B76D242BB3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:da:9c:9c:94:81:ce:b3:3b:22:60:5a:2e:ce:
a2:09:0d:f1:75:ec:79:32:32:f2:25:2f:a4:2d:c8:
92:f5:2d:66:40:57:bb:b7:1a:61:ec:f2:5d:cc:4f:
5c:ec:29:f5:c8:fd:0c:8f:a5:6e:a7:49:8d:51:4c:
c0:85:b6:35:b5:34:b1:e7:79:ca:3f:2f:f9:93:e1:
94:27:34:92:a7:73:80:00:67:0a:66:13:68:e6:25:
45:97:48:12:26:6a:73:5b:bb:c3:7d:3c:c6:0d:61:
b7:76:fd:5c:c5:90:2a:b5:1e:69:04:eb:5a:d7:38:
27:a0:f9:10:bd:0a:78:d9:68:a3:61:00:25:99:0b:
c5:45:fb:4c:e3:d3:6c:db:cb:de:df:96:2f:26:75:
ef:17:ab:b6:d6:f1:45:81:39:ac:3d:1b:64:3f:12:
b0:1c:e5:6e:b6:6c:0e:3d:2a:6e:3c:b4:d3:3d:f5:
ff:0b:90:71:99:5f:da:91:74:93:2e:70:bc:20:97:
d0:1f:43:db:9b:c7:d7:2c:8d:a8:f7:15:12:a3:af:
56:5e:3f:57:d0:01:d4:99:f5:bb:40:d1:46:4d:af:
e2:d8:56:19:0f:81:1d:08:3a:36:f3:c2:1e:bb:07:
dd:78:7d:2b:f8:e9:3a:03:c3:9c:42:e3:4c:99:1b:
ad:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DA:57:E0:F2:2B:BA:50:2A:87:88:E4:E7:6F:8B:76:D2:42:BB:3D
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133322e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.132.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:e9:9a:86:bc:9e:1a:00:ec:0c:4c:2e:c4:2f:e4:12:2b:d8:
0c:f9:b3:7b:75:f3:84:a5:f2:57:e7:ab:3c:9b:3d:d0:fa:4a:
69:b4:4f:0d:d0:12:b2:88:b9:02:f6:eb:18:f3:2a:03:ac:4a:
07:ca:59:a1:71:6b:1d:9d:58:bb:15:c0:0f:34:85:9a:6d:2f:
6a:fd:62:f8:b0:5d:15:30:81:f9:9e:9d:41:ab:8f:2a:da:82:
15:31:f0:0e:82:b4:83:0b:54:36:37:14:ec:6a:32:30:e1:04:
19:6d:66:ab:fa:14:fe:6f:d4:64:62:9d:01:2d:39:f7:9f:03:
1c:d7:70:de:2a:5b:02:3c:5f:0f:e9:7f:70:ca:3d:67:d7:82:
bf:0f:8e:ed:d4:0b:4c:57:95:f4:4b:db:b7:e9:7f:99:bb:21:
a4:96:dd:e3:7d:67:bd:88:5b:51:da:ee:88:f8:f1:e6:15:dd:
65:01:7b:80:32:7c:bb:d4:27:d8:b0:ec:f8:96:1f:53:35:c2:
45:fc:a6:75:1b:d7:0a:34:43:61:9d:a4:b1:3b:48:d4:20:a5:
8d:5d:61:99:f1:d4:f6:8a:cb:a6:37:ea:dd:16:76:2d:9e:c4:
8c:db:e0:2a:ec:dd:3e:43:12:56:05:ec:25:e8:03:cf:16:1c:
60:23:97:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:41:07 2026 by rpki-client