Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133392e302f32342d3234203d3e20343032323938.roa
File: 3134372e3132352e3133392e302f32342d3234203d3e20343032323938.roa (raw, json)
Hash identifier: 8ZmkLYFcrbp/NAdhTPIom+1hdQU36em1iHDCH1txLUM=
Subject key identifier: EF:46:D1:41:C0:78:DA:69:39:64:13:73:45:93:B1:B0:0A:A7:36:0B
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 3C7299FAAE7B6FF05826FDE6D56B4DD6E1DF5D7C
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133392e302f32342d3234203d3e20343032323938.roa
Signing time: Wed 29 Apr 2026 16:44:48 +0000
ROA not before: Wed 29 Apr 2026 16:39:48 +0000
ROA not after: Wed 28 Apr 2027 16:44:48 +0000
asID: 402298
IP address blocks: 147.125.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 10:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:72:99:fa:ae:7b:6f:f0:58:26:fd:e6:d5:6b:4d:d6:e1:df:5d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Apr 29 16:39:48 2026 GMT
Not After : Apr 28 16:44:48 2027 GMT
Subject: CN=EF46D141C078DA69396413734593B1B00AA7360B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:27:60:20:c0:44:2b:bc:b9:3d:48:c1:ce:cb:
dc:48:5e:ae:33:b3:5a:50:03:a5:2b:00:88:80:6b:
cb:a8:85:1c:3f:3a:85:e6:2f:75:34:3a:7c:8a:e2:
e4:9f:4d:7b:6c:a6:5d:ac:8a:f0:c9:2a:67:fc:6d:
d3:d9:d9:7f:37:69:98:17:10:ec:47:88:a7:f5:e6:
b0:63:b2:ce:8e:cf:3e:bd:eb:36:32:e6:08:16:4c:
2a:f5:d4:bc:7d:01:91:3a:06:9c:f3:e9:a2:32:ab:
a9:3a:f8:26:a8:0c:f2:11:3a:3a:49:d0:b9:8e:5d:
9a:eb:d9:b7:9c:85:f2:22:e9:85:f8:e4:94:00:37:
c5:1e:e2:1a:f1:ee:52:3b:3a:55:ea:f2:0e:4e:2f:
08:5d:7f:95:7b:ce:7b:f1:7e:5c:18:c5:42:d0:e4:
c5:15:62:03:c0:c1:fd:fb:53:2f:c2:cb:14:32:c2:
a3:cf:69:33:fb:46:92:58:e8:0d:b5:e4:67:c1:35:
44:dd:f9:02:0c:1c:15:9d:ff:f2:c0:2b:da:ae:d7:
2d:bb:d0:45:c0:6d:d0:d5:5c:28:f8:e7:98:7d:78:
c7:64:c0:92:dd:84:f5:13:ab:b6:84:76:f9:6d:4c:
cc:e1:fa:8a:e9:13:c8:d0:68:27:7e:9c:dd:3d:3d:
81:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:46:D1:41:C0:78:DA:69:39:64:13:73:45:93:B1:B0:0A:A7:36:0B
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133392e302f32342d3234203d3e20343032323938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.139.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:77:74:6b:1f:bf:06:9d:64:6f:1f:2a:ec:25:8c:3a:79:06:
1f:72:d7:04:00:7d:24:25:87:91:6d:be:88:e6:62:88:68:d5:
66:b0:09:eb:14:5e:67:ec:9e:0b:7a:e8:22:a1:58:55:3c:88:
97:30:ac:11:2f:ad:de:8c:e2:db:d5:57:67:62:3a:5e:78:4a:
27:e9:f9:5c:8c:68:00:f8:c2:6b:28:82:71:8e:09:9b:42:f3:
72:e5:ab:5a:a7:35:0f:c5:ef:a3:f4:ce:d2:98:90:1e:d0:71:
b2:a8:09:07:c2:aa:95:93:8c:7b:af:43:56:72:ba:6d:c1:fd:
e5:ba:22:e6:87:31:22:ff:6a:59:33:50:f7:ee:f6:ac:b5:c4:
20:79:7d:da:bd:4c:29:91:37:9d:12:97:d7:1c:ea:f4:5f:f2:
45:e2:dd:63:c5:3b:d6:fb:b6:c9:1d:02:8c:8f:5c:47:5f:47:
e1:9e:d2:cf:29:77:d7:5d:36:7e:2f:6d:da:02:bc:c4:af:54:
9d:b7:a1:d3:a6:bb:64:21:3f:7a:da:03:60:d1:05:1b:ee:e1:
32:86:e5:6a:e9:00:f3:d5:4a:0f:f3:eb:87:f7:e5:43:71:de:
8f:63:ae:61:ba:6f:ae:da:af:e9:65:5b:3a:31:c0:73:82:80:
bb:d4:76:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 17:26:45 2026 by rpki-client