Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138302e302f32342d3234203d3e20343032383636.roa
File: 3134372e3132352e3138302e302f32342d3234203d3e20343032383636.roa (raw, json)
Hash identifier: jlhsHt76cezOTlUR5Pz23M78OF38u+C9aToHtD+j3aY=
Subject key identifier: 49:23:B5:58:FB:47:48:CA:04:89:8D:E9:6A:22:31:9C:B9:49:A1:0F
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 435DC776502435A59756C082AFDFFBB4C25BE4F7
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138302e302f32342d3234203d3e20343032383636.roa
Signing time: Wed 16 Sep 2026 21:30:39 +0000
ROA not before: Wed 16 Sep 2026 21:25:39 +0000
ROA not after: Wed 15 Sep 2027 21:30:39 +0000
asID: 402866
IP address blocks: 147.125.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:5d:c7:76:50:24:35:a5:97:56:c0:82:af:df:fb:b4:c2:5b:e4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 16 21:25:39 2026 GMT
Not After : Sep 15 21:30:39 2027 GMT
Subject: CN=4923B558FB4748CA04898DE96A22319CB949A10F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0d:00:7e:b9:b9:a1:f1:af:7b:61:12:5d:c6:
7e:ce:81:63:65:00:dc:46:25:c3:ad:05:7d:3f:a2:
64:86:db:af:b0:a5:01:e3:55:53:af:de:e7:eb:14:
0d:22:f8:88:ae:f9:35:3b:8b:99:3c:d7:fe:89:8c:
84:c3:f1:49:7d:ae:a3:2a:40:b8:69:d9:78:6e:9a:
9e:f3:0d:6a:bb:1e:b1:8c:49:f3:0c:c5:c9:2e:7c:
8f:61:6c:b3:e3:ec:98:02:5e:9c:d1:23:4c:2f:2d:
dc:13:c0:fd:ee:b9:3a:7e:26:70:28:8a:e8:54:85:
f4:c5:ce:de:48:b9:55:9c:f7:f7:bc:01:27:55:df:
16:f9:b3:b8:c4:e1:59:a6:a8:6d:0a:7a:61:cf:6b:
79:2a:52:4e:c4:77:b6:dc:67:83:73:a0:c1:85:56:
b8:f0:ce:17:7d:60:12:17:74:4f:57:7e:b2:53:48:
ef:45:ae:05:fd:00:21:50:9b:83:96:1c:7f:df:d4:
a1:63:1e:39:ad:2f:5d:91:54:c9:a7:11:83:5d:f6:
da:4d:98:93:ae:5c:b1:28:05:f5:cd:4d:9d:63:c8:
60:f5:dc:37:f9:79:cf:c1:e4:f1:2e:23:bb:79:89:
b1:bc:02:0e:f8:8e:81:10:d6:98:b9:28:c4:b2:8d:
c6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:23:B5:58:FB:47:48:CA:04:89:8D:E9:6A:22:31:9C:B9:49:A1:0F
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138302e302f32342d3234203d3e20343032383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.180.0/24
Signature Algorithm: sha256WithRSAEncryption
67:85:c4:9a:06:eb:f1:82:20:54:d8:6d:ed:42:23:b8:43:3f:
47:31:cf:f7:ee:cd:51:55:4a:78:0e:fc:fa:7f:1c:a5:e7:b1:
a1:f3:b0:2b:2b:39:eb:c0:a0:73:ef:6a:20:c4:17:53:3d:90:
eb:a6:bb:b8:00:05:c8:93:e5:f2:78:e8:e4:96:3e:88:f0:df:
de:90:c3:b9:7d:b4:43:ce:49:64:90:e5:19:8b:ff:67:d7:64:
60:4e:aa:9e:24:1b:f6:1a:e6:d8:8c:85:27:b9:b5:28:f9:47:
0f:ae:55:ed:6b:da:e4:a4:a6:f5:5f:a2:fc:be:bc:6b:cd:f9:
14:9d:ee:bb:db:b8:9c:cb:bb:b9:23:97:3c:13:b2:58:01:b9:
9c:23:c7:ef:10:93:3d:3e:8e:52:69:59:46:13:e4:fa:0a:6c:
46:7e:21:9a:47:a9:ea:8b:0f:78:42:75:41:dd:28:42:63:fd:
36:90:f3:80:59:a0:de:28:2c:ff:39:e4:1a:55:06:f7:b6:f8:
c7:89:f8:25:bc:b0:9e:a2:07:1c:09:af:72:c8:ad:b1:4a:d3:
d6:a3:f1:53:77:c2:52:46:14:2f:db:c4:7a:10:00:47:7e:03:
76:15:ba:a0:e9:78:84:e2:9b:2f:f5:66:8c:c2:bb:e5:20:d2:
6a:a3:3c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:33:25 2026 by rpki-client