Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135372e302f32342d3234203d3e20323138393635.roa
File: 3134372e3132352e3135372e302f32342d3234203d3e20323138393635.roa (raw, json)
Hash identifier: b1nBpF7Iq4avoVPVkw0H9MJZxeff4NQKHQzt1d5YiJE=
Subject key identifier: D9:25:4C:64:C9:56:0B:65:7F:F2:23:E8:2A:D7:3A:BE:26:DC:C8:BE
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 23407CCC9D7A5A4162C5702D58CFFF36E99DD871
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135372e302f32342d3234203d3e20323138393635.roa
Signing time: Mon 14 Sep 2026 05:58:13 +0000
ROA not before: Mon 14 Sep 2026 05:53:13 +0000
ROA not after: Mon 13 Sep 2027 05:58:13 +0000
asID: 218965
IP address blocks: 147.125.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:53:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:40:7c:cc:9d:7a:5a:41:62:c5:70:2d:58:cf:ff:36:e9:9d:d8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 14 05:53:13 2026 GMT
Not After : Sep 13 05:58:13 2027 GMT
Subject: CN=D9254C64C9560B657FF223E82AD73ABE26DCC8BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:97:8f:af:03:1f:fd:3b:ab:01:74:35:ac:ab:
13:3f:fc:c7:68:0e:ad:51:84:72:96:e1:18:93:d3:
60:16:52:d1:3a:99:96:79:8f:9b:c9:a6:87:86:cd:
5e:df:72:46:36:f5:67:7c:07:e2:8b:2e:48:81:0c:
69:b1:3c:16:0b:21:3f:3d:aa:58:85:9b:4a:f4:ae:
0e:5b:a6:3c:ed:89:f1:d8:0a:f6:9d:f7:30:7e:bf:
61:5b:77:59:bd:43:98:e5:ef:ff:4e:aa:9f:26:0d:
a0:66:e9:4a:0b:db:da:21:07:0d:d3:05:79:5a:74:
be:9e:03:96:0f:f9:15:f0:7c:2d:98:64:79:02:e1:
1f:41:69:a9:93:9b:6a:64:51:34:2a:94:c8:26:e0:
22:dd:3b:45:2f:43:d9:17:12:28:84:da:c2:e0:57:
6a:fb:51:d5:84:4a:35:2f:a0:a0:af:04:f5:41:bb:
b1:15:60:d2:0e:61:1e:b4:48:9e:78:94:0b:52:cc:
45:2d:9c:0f:2a:06:1e:33:64:c2:12:20:53:5a:6c:
a1:86:70:ed:46:53:aa:9c:be:6b:79:11:24:a6:ea:
2a:00:0f:d9:14:c0:14:57:11:e3:0f:ba:66:9d:da:
46:16:89:28:38:11:b1:5c:f6:f3:99:da:43:59:15:
ec:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:25:4C:64:C9:56:0B:65:7F:F2:23:E8:2A:D7:3A:BE:26:DC:C8:BE
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135372e302f32342d3234203d3e20323138393635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.157.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:8b:91:aa:48:68:08:6d:a3:5b:81:53:c2:5f:cc:27:23:48:
f8:36:27:92:b5:5f:17:01:5a:98:23:87:4f:db:d9:18:09:16:
6c:09:88:1c:9f:22:1d:48:2e:4e:15:14:a7:c9:bb:1e:a7:52:
f9:7e:e2:c9:1d:ff:0b:66:96:65:a7:26:84:fb:02:e7:6f:5c:
aa:37:8c:50:9e:6f:d7:c8:7d:c6:f0:6e:de:78:09:25:63:6c:
bc:b9:e9:14:02:bc:62:2e:6e:64:dc:8f:e4:50:4a:fc:b6:da:
04:f7:6e:f3:0f:5f:d4:af:b3:42:a5:0d:3c:26:ad:e2:10:28:
e0:29:0d:42:5d:8b:b5:2e:13:3b:58:cf:8d:79:54:70:2c:b8:
98:84:e1:3f:ed:10:68:87:04:a4:0f:a4:c0:38:b4:b6:2c:ee:
95:22:9b:60:39:ac:6d:38:1c:bb:79:b8:f4:d0:9d:e3:8e:b8:
24:88:9d:3e:c7:d6:52:44:f0:9a:6a:e1:2a:57:22:f1:58:ee:
68:da:d6:b5:84:f9:55:01:83:d7:d0:04:2c:46:89:66:9a:d3:
bf:eb:8a:be:02:1f:12:ab:2b:f2:26:3a:3e:bb:84:a9:77:25:
7a:e8:b3:ec:65:35:f3:d1:70:34:fc:29:87:15:d7:7e:33:50:
1f:23:1c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:42:21 2026 by rpki-client