Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136392e302f32342d3234203d3e20323135323934.roa
File: 3134372e3132352e3136392e302f32342d3234203d3e20323135323934.roa (raw, json)
Hash identifier: AhAGuGFNcru2FY+UuQfCWfVCJUPtLrYO2kW5rgOtFEc=
Subject key identifier: 04:8D:17:E7:90:AA:DA:13:77:6A:AA:37:CC:BC:1A:32:4F:69:32:4B
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 02D18974079529FF7F8342E422DDB5AA5D91585D
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136392e302f32342d3234203d3e20323135323934.roa
Signing time: Fri 14 Aug 2026 09:20:16 +0000
ROA not before: Fri 14 Aug 2026 09:15:16 +0000
ROA not after: Fri 13 Aug 2027 09:20:16 +0000
asID: 215294
IP address blocks: 147.125.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:d1:89:74:07:95:29:ff:7f:83:42:e4:22:dd:b5:aa:5d:91:58:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Aug 14 09:15:16 2026 GMT
Not After : Aug 13 09:20:16 2027 GMT
Subject: CN=048D17E790AADA13776AAA37CCBC1A324F69324B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:19:db:bd:63:11:ca:6f:fb:27:c8:51:39:22:
0e:5c:d4:1a:50:ed:c7:af:e1:fe:ac:85:85:03:0d:
a9:c6:1d:5c:8c:8e:d8:27:0b:c6:f7:70:ad:1a:b5:
62:08:93:90:82:2a:18:75:7c:a2:61:7b:3a:55:f4:
71:f9:4d:2f:56:ed:69:46:70:d7:8d:18:ec:02:f1:
6b:5d:7f:5b:b8:ea:6c:29:c7:e2:1e:8e:82:6a:80:
7e:50:7a:9b:a6:6d:ec:38:11:bd:98:d1:96:9c:65:
f1:83:16:60:06:44:9f:a0:19:61:74:78:ca:fe:26:
03:ae:0f:8f:b6:b9:26:05:ba:32:51:53:75:63:8f:
4a:4c:96:8d:06:d1:69:b0:64:53:15:e2:3e:5e:f1:
9d:a8:db:5a:52:4b:b1:30:74:b4:45:8d:52:7e:20:
93:b4:dc:eb:56:f8:19:86:d4:49:de:a5:47:18:ff:
73:47:61:0d:da:9b:d4:83:0c:b4:02:81:d5:e7:b6:
90:01:11:be:d6:a9:16:f3:a3:2c:31:8c:62:4a:ec:
3c:d1:4b:36:c6:1e:30:9e:d1:fa:f9:7f:54:5f:b4:
aa:00:66:a3:84:90:c2:29:e5:da:96:93:64:ba:17:
a8:79:b4:8b:98:2f:04:8c:1d:b9:9e:11:ad:fb:c4:
a2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8D:17:E7:90:AA:DA:13:77:6A:AA:37:CC:BC:1A:32:4F:69:32:4B
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136392e302f32342d3234203d3e20323135323934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.169.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:d0:79:48:d9:0a:6c:7d:cb:94:29:a2:82:11:b5:03:3c:5f:
7c:c9:d3:7e:8d:f8:a9:fc:c3:e7:f8:ee:a5:2c:c5:a2:52:aa:
01:0d:6b:cf:a5:44:60:e4:47:22:88:c1:1e:71:3c:6d:aa:1b:
7c:c4:a2:7b:44:2d:28:1d:f9:2c:97:f7:36:8c:1c:ee:14:1e:
7d:41:98:e4:db:ab:2e:c7:c1:91:c3:33:d6:47:9b:05:88:a2:
c8:0f:c9:4b:89:9a:4f:eb:e4:00:27:89:ae:68:e1:73:12:75:
bf:1e:b5:96:82:82:55:a8:0f:67:84:50:e3:1c:f5:76:73:b9:
cd:de:44:ce:bf:bb:1f:ef:06:1f:52:cc:19:bb:c7:01:ae:53:
6c:53:ac:2a:2a:88:54:28:1b:7f:37:26:ea:c7:29:c1:51:e6:
a1:d6:bb:8d:3e:7c:9f:9a:a5:1a:6a:b4:7f:ce:1a:c6:38:56:
30:1e:7f:f5:ff:2f:6b:a6:60:c9:69:79:0c:f2:0b:9c:4f:5b:
89:7b:33:d7:ad:ae:82:5a:46:6c:ae:97:d9:2d:ca:ed:f1:40:
d6:af:8c:c6:86:1d:23:c5:d6:74:73:a0:42:83:33:d0:a3:51:
23:69:c3:68:77:d3:30:5b:b8:1f:3f:4d:b6:0a:00:b5:53:a1:
97:38:05:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:22:20 2026 by rpki-client