Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135392e302f32342d3234203d3e20323138373830.roa
File: 3134372e3132352e3135392e302f32342d3234203d3e20323138373830.roa (raw, json)
Hash identifier: CdwUB2Nmo/o7FbFBd0PhzUBLj7+Ynxe9uu8yoQT/55A=
Subject key identifier: BA:39:D2:A0:0A:B7:42:7A:85:0A:42:58:8B:17:9E:ED:81:B3:32:F7
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 159F5312DF13105EB9F798D3976718AFB92451C9
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135392e302f32342d3234203d3e20323138373830.roa
Signing time: Thu 22 Oct 2026 12:02:59 +0000
ROA not before: Thu 22 Oct 2026 11:57:59 +0000
ROA not after: Thu 21 Oct 2027 12:02:59 +0000
asID: 218780
IP address blocks: 147.125.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:9f:53:12:df:13:10:5e:b9:f7:98:d3:97:67:18:af:b9:24:51:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Oct 22 11:57:59 2026 GMT
Not After : Oct 21 12:02:59 2027 GMT
Subject: CN=BA39D2A00AB7427A850A42588B179EED81B332F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e1:8e:39:2f:a5:87:61:6c:a2:40:4d:c6:4b:
b0:5c:10:9e:09:1a:71:bd:ae:c7:21:10:19:ad:6b:
b6:e5:5c:8b:e9:4a:dd:3c:cd:c7:6e:9c:44:82:31:
91:be:0b:fe:06:43:6f:8d:c0:46:c7:6f:98:0b:15:
eb:93:fb:37:2b:9a:55:59:5f:19:be:74:70:92:c2:
cf:40:4a:5b:ef:f3:8d:27:3d:42:5d:c2:36:00:a5:
7b:2c:85:7f:40:8c:41:8d:9d:e9:4b:08:36:ca:7c:
47:2d:15:0c:bd:a5:02:b6:e1:90:2f:13:b6:d1:19:
a5:8c:33:fe:33:ab:4f:72:3a:b0:0b:61:d7:c3:bd:
1d:62:b5:de:ca:19:bc:a5:71:7d:85:2e:c2:be:9f:
e0:a2:69:a8:90:fb:37:a4:12:37:5a:98:f7:28:4a:
31:b0:fd:13:7a:79:23:ea:45:fd:34:db:26:29:16:
29:65:e7:61:5b:fa:ee:21:99:eb:40:f6:9a:08:80:
81:bd:5d:bf:6d:95:c9:99:67:78:bc:fc:a4:cf:37:
e7:af:fa:b9:ba:5a:cb:b3:1e:aa:ef:cc:09:e5:5a:
df:1b:7d:99:8c:86:de:df:f4:be:a9:91:47:84:eb:
25:1b:82:59:e8:c2:61:36:bc:97:ee:33:96:79:2f:
91:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:39:D2:A0:0A:B7:42:7A:85:0A:42:58:8B:17:9E:ED:81:B3:32:F7
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135392e302f32342d3234203d3e20323138373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.159.0/24
Signature Algorithm: sha256WithRSAEncryption
87:f2:f3:30:8e:c3:62:05:ad:b2:f3:35:5d:fa:31:50:9e:07:
eb:9b:36:bc:5a:2f:b7:20:00:1f:99:1f:21:ab:b4:31:76:f8:
05:b5:ef:88:a4:f6:70:15:a8:33:d6:6c:17:a0:13:4e:0c:45:
cd:2e:89:30:fb:44:55:43:f4:d9:37:90:9a:40:a4:4b:6a:68:
aa:bf:f3:8a:a6:1a:45:01:12:34:f0:90:97:d1:d6:43:47:4d:
30:4c:69:b3:9c:09:2f:15:c9:b0:bb:11:46:c2:65:17:28:54:
4e:d9:07:08:23:7a:a1:6b:d2:5a:ea:11:76:b1:73:ad:20:9c:
4d:0c:0e:8f:84:a8:c6:b4:04:29:fc:cc:e3:8b:60:33:e2:19:
52:d6:69:58:bd:7a:3c:5d:fb:0b:6a:36:4d:a2:40:5b:95:74:
76:9b:99:09:c1:04:8a:34:66:02:23:6d:2d:5a:1e:23:26:de:
94:16:fb:3e:e4:0e:68:be:9b:6d:b3:3f:0b:2e:95:d9:7f:cd:
92:2a:79:0a:d0:a1:96:9b:5b:2f:bd:03:92:7a:0a:68:4c:b5:
bd:27:bb:66:36:a0:2b:8e:15:ac:2e:df:ca:a1:93:e2:e6:a7:
33:47:8e:97:15:50:64:d9:6d:bd:18:bd:0f:f9:81:ce:de:85:
7f:dc:f9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:59:03 2026 by rpki-client