Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137302e302f32342d3234203d3e20343032323635.roa
File: 3134372e3132352e3137302e302f32342d3234203d3e20343032323635.roa (raw, json)
Hash identifier: RxrJj64oqCIgDpUpg4HknEfJLHccMajtNTghvLCwhxY=
Subject key identifier: 36:84:76:41:CF:BA:EC:9E:EB:7C:32:FF:EC:E8:02:C9:B7:B9:61:79
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 07BB684195A2F9FF1E61B3A3F619ABD2DB29AC5F
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137302e302f32342d3234203d3e20343032323635.roa
Signing time: Tue 22 Sep 2026 12:02:57 +0000
ROA not before: Tue 22 Sep 2026 11:57:57 +0000
ROA not after: Tue 21 Sep 2027 12:02:57 +0000
asID: 402265
IP address blocks: 147.125.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:53:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:bb:68:41:95:a2:f9:ff:1e:61:b3:a3:f6:19:ab:d2:db:29:ac:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 22 11:57:57 2026 GMT
Not After : Sep 21 12:02:57 2027 GMT
Subject: CN=36847641CFBAEC9EEB7C32FFECE802C9B7B96179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:51:28:b0:c2:ac:1c:fc:07:86:29:b1:18:72:
de:19:1c:a3:fe:0b:5c:20:18:22:6e:98:cb:a1:2b:
7e:db:0d:4c:f4:ad:6e:87:da:81:62:fc:f0:d8:5c:
46:b6:aa:ae:aa:b8:60:49:b6:c1:c7:16:49:82:60:
6c:34:48:7a:6d:7c:84:3c:18:08:27:f1:d1:e0:19:
7f:e1:ba:5f:58:40:5a:ad:ff:2c:a1:1d:0e:24:a2:
5c:7d:51:9b:46:7a:41:32:cb:7c:d5:32:97:b4:72:
14:91:55:68:11:6b:ec:f7:66:a4:0f:29:e0:b2:fb:
74:f1:54:c7:ca:ff:cf:d1:b8:ad:c3:7f:dd:a6:11:
e4:78:00:c6:67:7d:5d:62:0b:cf:47:98:8d:a3:d7:
c1:1b:8b:cd:79:c9:96:ce:1a:dd:a3:65:d9:8a:22:
36:67:35:96:5e:c0:c1:43:9d:c1:06:b4:09:b9:8b:
a5:62:94:c0:07:9c:d2:d9:47:e6:66:33:5a:97:cd:
ec:ed:67:66:23:77:ec:6e:e5:98:fa:4e:7d:e4:87:
be:6d:17:e3:06:19:3e:bc:bd:55:42:e2:34:4b:ee:
09:ae:d8:c6:8a:58:41:f9:7e:e2:c4:30:e0:b8:fc:
33:c5:3d:34:f5:96:74:5a:b2:22:47:92:78:6b:c8:
93:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:84:76:41:CF:BA:EC:9E:EB:7C:32:FF:EC:E8:02:C9:B7:B9:61:79
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137302e302f32342d3234203d3e20343032323635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.170.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:9d:83:6d:ce:ab:cf:a3:24:db:d3:38:71:06:5b:81:45:91:
4e:0f:cb:96:5d:eb:dc:6d:60:46:9a:5c:a7:33:22:61:a5:65:
9e:2b:f4:76:8a:33:51:c7:93:b0:1d:e1:d1:da:a3:d9:3c:b5:
de:16:f1:af:ee:93:cb:0e:a8:f0:6b:13:b3:87:f9:f6:80:06:
59:24:db:18:ac:92:fe:45:a9:32:8e:9e:2c:d3:f2:15:e7:bb:
45:12:e9:60:8e:06:31:8f:35:16:e5:3b:6e:d2:84:db:e6:71:
ea:cd:55:57:86:13:6e:8d:bc:c6:81:a9:1a:84:a9:d0:a9:89:
48:5f:05:88:51:0e:a4:2a:2e:b3:15:04:f0:ba:79:0e:cb:b7:
ee:53:b4:c0:01:b3:5a:c0:0c:f0:0e:49:61:c8:cf:9d:1a:58:
95:e0:27:92:34:13:98:8f:82:6a:07:4e:c6:3a:ba:b8:9f:ea:
29:3d:15:2d:17:01:9f:49:4c:37:33:5e:66:98:f9:22:d5:cf:
01:17:32:4e:c4:74:7f:6d:e6:2b:b2:b8:d5:c5:da:d1:a2:af:
f0:56:62:d1:de:8c:36:96:bc:02:1d:20:ec:bf:93:07:45:0a:
49:9d:88:81:f7:68:b7:74:d8:a4:f7:3a:5a:6a:f1:79:cb:35:
8c:66:34:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:09:32 2026 by rpki-client