Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136382e302f32342d3234203d3e20323138383837.roa
File: 3134372e3132352e3136382e302f32342d3234203d3e20323138383837.roa (raw, json)
Hash identifier: XUA7jpZ4JZiW5VcY6wDiPVyoiVZvue1Gy58CByK74Xk=
Subject key identifier: 6A:13:56:FA:69:53:08:D1:E1:4D:9A:44:CC:53:A6:0F:D2:18:FF:DF
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 5EB96143FE01D8D9EBFA5D4682523B25B1C17B60
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136382e302f32342d3234203d3e20323138383837.roa
Signing time: Mon 07 Sep 2026 09:32:49 +0000
ROA not before: Mon 07 Sep 2026 09:27:49 +0000
ROA not after: Mon 06 Sep 2027 09:32:49 +0000
asID: 218887
IP address blocks: 147.125.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:b9:61:43:fe:01:d8:d9:eb:fa:5d:46:82:52:3b:25:b1:c1:7b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 7 09:27:49 2026 GMT
Not After : Sep 6 09:32:49 2027 GMT
Subject: CN=6A1356FA695308D1E14D9A44CC53A60FD218FFDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9c:89:b6:5f:d9:b5:19:92:0f:18:7f:a7:78:
8f:38:ae:e7:f9:29:a9:7c:6e:47:3e:24:50:36:7d:
56:6e:b1:9f:c3:96:f6:43:30:1d:2e:df:8c:ce:4c:
7b:ee:d1:6f:9a:fa:23:59:a3:11:64:10:6d:45:9d:
ce:03:c3:5e:7b:c1:57:e1:5c:90:8e:c7:42:56:dc:
c2:64:67:ac:db:d4:26:fe:e6:66:20:65:c5:21:e8:
98:8d:6b:33:70:7a:8e:35:ed:53:21:dd:20:1a:2a:
b0:a5:10:ca:82:0b:d2:85:b2:88:1d:33:e3:6d:dc:
78:9f:32:12:1c:3a:ec:cf:13:65:c3:36:7e:c4:0d:
b5:9c:57:05:a6:48:62:f0:b9:94:37:80:6f:c7:70:
1e:23:2a:e9:b8:ec:67:3e:0d:eb:1d:e7:3f:30:7a:
2f:1c:68:4d:05:56:bc:89:b4:bc:89:aa:55:7f:0b:
99:b5:e4:55:a1:1c:26:a1:22:c2:63:95:61:8d:4b:
bd:e5:1b:95:fe:4e:4b:a7:11:e6:12:27:a9:1a:76:
35:4c:01:90:f2:67:ec:4d:e9:a2:e9:aa:bb:38:d5:
b5:5b:b8:1e:8e:d5:ab:e1:66:bc:97:49:fd:7a:db:
6c:e0:85:68:f8:71:73:36:67:d6:64:b6:74:d8:d8:
19:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:13:56:FA:69:53:08:D1:E1:4D:9A:44:CC:53:A6:0F:D2:18:FF:DF
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136382e302f32342d3234203d3e20323138383837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.168.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:da:57:59:be:5d:35:b4:c2:77:61:bd:f5:3d:91:40:e8:bf:
c1:17:60:5a:ed:ba:58:06:29:26:a3:eb:9a:b5:57:3e:00:1c:
18:11:62:44:a1:fa:df:d9:11:cf:2b:f0:cb:73:45:ba:19:04:
f3:a6:b9:97:ac:f0:22:35:53:b8:b5:b6:f3:d6:55:49:3d:08:
35:22:80:9c:c5:e4:24:34:f3:85:ef:e5:65:9f:6f:dc:7e:46:
8d:5f:a0:23:9e:f9:bc:98:e9:0f:2f:70:7d:a2:fc:bd:27:62:
a5:7c:45:e9:c3:50:6b:d2:c9:55:fe:a9:89:ce:95:91:11:df:
7c:12:5a:90:ac:36:99:f5:15:8d:25:66:7e:db:1d:db:6a:02:
8d:a4:17:5b:ea:df:3b:5d:77:fb:49:e9:dd:bf:0a:b9:20:a0:
97:da:e0:89:6b:b8:71:d4:31:2b:ad:41:2f:d3:d5:f1:b3:75:
82:52:72:4f:b4:47:c8:f3:14:83:58:c4:53:39:72:22:0a:33:
c3:4b:a5:ed:c7:8b:bf:39:4b:f8:62:05:d9:78:38:f2:73:39:
94:a6:8a:70:48:d4:a0:37:14:b9:36:8a:78:bc:31:1c:fe:7f:
5e:c3:f6:60:0f:3b:10:f2:d2:c7:9b:92:e1:80:1c:df:2c:15:
08:a2:08:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 07:33:19 2026 by rpki-client