Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136302e302f32342d3234203d3e20323138383632.roa
File: 3134372e3132352e3136302e302f32342d3234203d3e20323138383632.roa (raw, json)
Hash identifier: y7uD2scyBhCC3y8GY7AaIyrY0TVGx13346AS6GLjosI=
Subject key identifier: F7:CF:4D:6B:3E:6D:9D:5A:30:B3:B8:6E:45:03:10:8C:11:0D:5C:BC
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 0AE751B273D26528A91B907A75307D2A5DC417DF
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136302e302f32342d3234203d3e20323138383632.roa
Signing time: Mon 07 Sep 2026 06:21:24 +0000
ROA not before: Mon 07 Sep 2026 06:16:24 +0000
ROA not after: Mon 06 Sep 2027 06:21:24 +0000
asID: 218862
IP address blocks: 147.125.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:e7:51:b2:73:d2:65:28:a9:1b:90:7a:75:30:7d:2a:5d:c4:17:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 7 06:16:24 2026 GMT
Not After : Sep 6 06:21:24 2027 GMT
Subject: CN=F7CF4D6B3E6D9D5A30B3B86E4503108C110D5CBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:91:b0:7a:60:7e:36:fa:e1:85:c2:bc:56:3e:
64:11:cc:2a:61:e2:37:28:d4:8b:08:07:1d:18:05:
e8:da:64:dc:75:aa:4c:f4:32:39:81:5a:4c:98:6e:
ec:82:37:4d:79:17:84:2d:91:21:87:82:1f:0b:6e:
e0:19:13:ff:6b:a4:f8:16:af:c9:fe:89:ed:90:2c:
33:5a:5a:7d:28:ae:fb:58:78:a1:f0:58:68:91:ca:
55:00:24:8b:c1:60:9b:4f:a5:a8:55:0f:40:61:f6:
45:06:02:dd:55:b6:34:a1:b4:1c:6d:ea:16:24:b5:
5a:c8:65:2b:4f:31:54:e2:b9:97:6b:63:e3:93:d6:
bb:60:a0:35:c9:ed:38:d2:4c:a1:18:1f:0f:39:23:
9c:cc:d4:d1:5b:0b:1a:77:be:84:84:14:cb:df:53:
36:45:b3:78:5b:e2:f5:2e:03:75:7a:87:69:d2:be:
b6:e6:2a:db:39:4b:3a:4a:6c:b1:b0:92:d0:c3:2b:
fa:1b:38:82:50:f9:67:ee:7b:0f:d5:fe:fd:2b:ae:
07:44:52:40:30:40:01:13:05:f5:02:c4:de:8b:11:
49:84:2b:31:da:e6:1e:f8:d6:d2:21:ca:42:87:f3:
e7:60:e1:c1:c4:38:c6:42:8a:0d:57:9c:c8:d5:d0:
e9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CF:4D:6B:3E:6D:9D:5A:30:B3:B8:6E:45:03:10:8C:11:0D:5C:BC
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136302e302f32342d3234203d3e20323138383632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.160.0/24
Signature Algorithm: sha256WithRSAEncryption
09:b8:a2:f1:5e:b8:e5:43:32:e8:aa:7e:bb:48:aa:6f:7d:56:
81:f0:aa:0f:fb:02:7b:e2:c0:c9:74:bc:cc:d5:72:e6:11:93:
3b:d8:3c:60:b2:8b:5a:a7:d9:91:ec:45:6d:36:78:4c:c2:97:
4c:c8:bf:1a:47:26:c6:c4:4c:92:27:bb:e6:ed:69:72:91:e1:
53:25:ea:a8:49:72:85:a7:d9:49:96:da:8b:77:a5:6f:a9:38:
1c:39:e6:c6:db:a0:10:f6:3b:a2:c7:f1:77:29:c3:e8:32:40:
26:fe:3b:05:4f:8d:fc:28:c0:e9:ac:bd:db:d4:35:8e:9b:0d:
2b:e2:7e:3c:77:31:6e:24:f7:dd:78:0f:8b:00:b8:30:04:68:
77:05:82:76:2e:81:a5:01:6e:8d:30:86:66:c9:b1:0c:3e:98:
c7:f2:29:b1:be:a3:42:0f:35:9c:5e:af:20:24:c8:d4:09:b6:
95:fd:44:ce:0c:ad:8f:02:b3:8d:3a:1b:ba:a4:71:38:0b:ea:
2f:cd:c2:fe:ba:3b:b7:a9:39:57:35:a2:26:ee:38:57:0a:42:
a4:66:a6:22:44:08:3e:bd:29:f6:06:2f:c9:06:5d:b6:53:36:
64:d7:92:f6:b0:70:61:88:24:4b:a5:48:e7:55:0f:af:f7:25:
3d:a0:dc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 19:47:59 2026 by rpki-client