Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134392e302f32342d3234203d3e20323134343833.roa
File: 3134372e3132352e3134392e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: cqCQyC9b80mX6uL1FyrhvsP7O0iu6Ni5Q46pVau44eI=
Subject key identifier: 12:DE:28:1D:D9:73:C2:38:BC:60:2F:D7:7F:E5:B6:27:53:C5:4E:4C
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 18BF13D4C993A1FB0F7A1CAF48274D9B137686FF
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134392e302f32342d3234203d3e20323134343833.roa
Signing time: Tue 15 Sep 2026 04:36:29 +0000
ROA not before: Tue 15 Sep 2026 04:31:29 +0000
ROA not after: Tue 14 Sep 2027 04:36:29 +0000
asID: 214483
IP address blocks: 147.125.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:bf:13:d4:c9:93:a1:fb:0f:7a:1c:af:48:27:4d:9b:13:76:86:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 15 04:31:29 2026 GMT
Not After : Sep 14 04:36:29 2027 GMT
Subject: CN=12DE281DD973C238BC602FD77FE5B62753C54E4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:bb:9a:a1:31:2a:4f:e8:f7:d6:c8:c7:49:df:
d7:ba:66:7a:84:0f:5a:37:14:3a:69:8e:d3:11:02:
8a:32:a8:37:62:76:3e:a3:e1:91:81:3b:59:e7:bf:
ec:44:0d:64:e6:98:fe:5d:7a:72:f9:5c:35:40:cc:
17:2d:b8:25:b9:17:b9:08:d7:c0:c8:0e:b3:ee:50:
55:8d:79:13:83:82:4c:e4:e3:97:49:29:18:cc:a8:
71:ca:0c:82:50:ee:3f:81:37:58:3d:04:e3:63:16:
b8:c3:57:a5:13:e0:cd:0c:62:f8:12:9a:90:61:d6:
0a:3b:39:88:6b:11:38:7c:b4:d9:5d:4b:9d:67:3b:
54:f8:37:38:b4:eb:5f:e7:d2:30:fa:5b:12:ea:85:
61:25:86:66:4b:a7:71:45:e1:3a:e1:ed:8b:46:a1:
69:84:4f:70:f3:a6:55:df:96:26:de:40:54:e8:9a:
d1:79:cb:96:33:34:47:e6:94:6b:d7:59:53:3d:72:
0e:89:4a:d5:e9:23:a3:55:c5:5b:ba:46:12:38:a8:
5f:9f:9e:ba:99:5c:97:d4:67:a7:95:87:4e:08:e2:
a4:dd:28:70:30:e9:02:02:3f:4e:bb:d3:5e:99:36:
04:3e:46:15:dc:bd:b7:e4:4a:a9:c3:30:2f:af:c5:
10:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DE:28:1D:D9:73:C2:38:BC:60:2F:D7:7F:E5:B6:27:53:C5:4E:4C
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134392e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.149.0/24
Signature Algorithm: sha256WithRSAEncryption
37:51:0f:a6:cd:2d:a2:cb:1d:2a:68:35:ba:e5:01:02:62:42:
95:05:b9:32:03:ab:db:3a:b8:5d:6b:aa:58:64:5f:a2:18:8c:
12:18:ea:e5:a9:1c:2e:f1:1b:8c:ae:c3:7f:30:f8:b7:41:e9:
f3:ff:33:34:00:af:06:1f:99:6d:c8:2d:4d:3d:08:94:02:2c:
d2:28:52:0d:4d:65:85:1b:d1:91:f3:c3:82:84:9f:49:15:18:
5b:13:64:2d:fa:bb:c0:81:87:0f:5c:7a:52:00:92:ad:4c:f1:
ae:e7:07:fe:71:fb:e4:6c:1e:c4:61:de:48:19:80:2a:3f:11:
8d:84:cd:9b:3b:3c:2f:f3:47:e9:51:a2:ee:cd:78:83:3c:69:
9f:1b:53:bd:a8:a7:c8:ad:da:b4:2e:2c:2e:5e:fd:2b:5b:51:
23:7e:89:38:21:88:57:cb:98:4c:6b:7b:e7:4d:c1:7f:10:a6:
79:d1:74:05:02:0a:56:a9:71:e5:b9:cd:8a:a1:eb:a5:1a:84:
e5:a5:a5:ee:90:53:cf:5b:9f:b0:e3:10:19:3b:fd:50:35:ec:
74:07:e8:e6:e8:17:fd:c3:6f:a5:d7:9f:8a:99:e1:ac:a6:5b:
21:b7:5f:82:08:e1:b2:a2:18:eb:a3:43:41:d5:80:9d:f9:57:
32:55:79:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:33:26 2026 by rpki-client