Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136312e302f32342d3234203d3e20323138373830.roa
File: 3134372e3132352e3136312e302f32342d3234203d3e20323138373830.roa (raw, json)
Hash identifier: CxzDfiD6QgLzQktqbJ5Zqn5kSEa+T5qmSnzMQcBiaFQ=
Subject key identifier: DD:F6:91:77:D2:09:94:01:2C:0F:DC:1A:F7:2B:D8:AB:51:BB:5F:2A
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 3D9D7459E014C1DCB47C16547478588A11746EBD
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136312e302f32342d3234203d3e20323138373830.roa
Signing time: Thu 22 Oct 2026 12:02:59 +0000
ROA not before: Thu 22 Oct 2026 11:57:59 +0000
ROA not after: Thu 21 Oct 2027 12:02:59 +0000
asID: 218780
IP address blocks: 147.125.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 20:37:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:9d:74:59:e0:14:c1:dc:b4:7c:16:54:74:78:58:8a:11:74:6e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Oct 22 11:57:59 2026 GMT
Not After : Oct 21 12:02:59 2027 GMT
Subject: CN=DDF69177D20994012C0FDC1AF72BD8AB51BB5F2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1b:49:e7:22:d0:48:f7:e2:de:9c:4d:15:e6:
c7:32:40:22:2a:c7:22:e0:84:fe:26:5a:53:b5:dc:
2d:f4:6e:48:87:e0:3f:be:91:51:ac:03:fa:97:25:
3f:af:7f:fd:38:6f:30:ce:1a:0c:e2:49:3a:a1:8a:
20:3c:53:f2:f0:a8:5c:d6:a6:73:18:ec:e4:f6:01:
7d:c1:59:44:2c:be:5f:1d:2a:b4:3b:39:15:99:67:
ee:95:1f:1a:be:a0:fe:ae:94:94:a4:9c:3a:7f:0a:
78:8a:50:09:75:2b:fa:60:c2:b4:36:a1:25:1e:3e:
9c:4f:d5:12:d4:71:12:63:d2:4a:84:97:26:75:cb:
73:63:04:cd:37:fc:81:60:8f:a3:03:f6:37:79:5a:
7a:eb:60:e0:01:d7:9c:23:d3:dd:fd:78:72:60:01:
3e:2a:bb:84:b4:db:c2:ea:92:4a:11:b6:2a:b5:25:
b5:03:b9:21:9f:7f:d4:1c:4b:d7:82:9b:cd:2f:4e:
36:b6:51:9a:b8:bd:7a:bc:65:3d:e6:fc:7c:cc:6a:
0e:2a:cc:e4:b9:3f:0d:37:29:6f:b5:5b:68:c0:33:
d7:01:45:6b:55:59:07:b2:88:7b:be:79:37:d5:23:
85:fa:e2:9d:93:03:26:7a:4c:e9:e1:d8:64:7b:c0:
32:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F6:91:77:D2:09:94:01:2C:0F:DC:1A:F7:2B:D8:AB:51:BB:5F:2A
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136312e302f32342d3234203d3e20323138373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.161.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:d5:4a:bb:a6:17:4f:7b:1c:8a:16:9e:fd:89:c5:f1:e6:79:
93:c8:36:a8:e3:ae:19:f8:64:20:8d:bf:79:52:3d:5c:33:fc:
de:7c:70:80:4d:4e:ee:75:94:8f:d9:ff:05:fa:49:6b:56:de:
13:ce:e6:87:e2:59:00:6d:17:fd:52:38:a4:1e:1e:26:b6:36:
89:02:eb:6d:85:22:01:a4:56:4c:ff:b1:27:28:5a:9c:83:b8:
5e:16:8d:d2:71:47:a6:55:0b:02:01:4a:5d:86:e3:c3:33:52:
c7:8e:eb:f7:96:92:8c:7f:21:fb:ba:e9:5b:ff:63:cf:bd:07:
6f:bb:9f:53:d7:76:28:19:7d:6e:f6:d3:cd:3c:cc:60:64:c8:
d5:cd:e7:7f:01:c8:3f:e7:71:dd:f1:69:6c:21:f8:10:e8:b5:
ea:bf:0f:0f:0f:6e:6a:36:f9:36:fb:fe:af:c7:fa:77:c2:cc:
3a:11:4d:ea:14:23:83:bb:24:0e:1a:b6:13:a4:f4:d8:76:8d:
db:c1:37:fa:26:92:bf:fc:3c:9e:6a:e8:7c:0f:a1:69:df:36:
77:99:39:9c:cf:cd:ac:16:3a:6c:bb:a0:d7:06:1f:f9:94:78:
be:1d:88:f3:cf:32:59:a8:4a:12:8e:7c:5e:05:a3:b8:70:c5:
a4:e3:21:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:13:20 2026 by rpki-client