Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138322e302f32342d3234203d3e20343032383636.roa
File: 3134372e3132352e3138322e302f32342d3234203d3e20343032383636.roa (raw, json)
Hash identifier: h8O4yaKFQiMjUvSah9rAG9sCrJlq6wPpL/Xh06RQe4Y=
Subject key identifier: 64:56:5D:74:C8:A0:D5:AF:D9:EC:3B:4B:95:F9:3B:69:B0:0D:01:66
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 4F6114F025C03665B6CE33FBA946FD9BAE496876
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138322e302f32342d3234203d3e20343032383636.roa
Signing time: Thu 17 Sep 2026 21:50:15 +0000
ROA not before: Thu 17 Sep 2026 21:45:15 +0000
ROA not after: Thu 16 Sep 2027 21:50:15 +0000
asID: 402866
IP address blocks: 147.125.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:53:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:61:14:f0:25:c0:36:65:b6:ce:33:fb:a9:46:fd:9b:ae:49:68:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 17 21:45:15 2026 GMT
Not After : Sep 16 21:50:15 2027 GMT
Subject: CN=64565D74C8A0D5AFD9EC3B4B95F93B69B00D0166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:29:7c:70:1c:4e:19:07:54:f8:36:64:b8:
42:db:4c:21:ee:07:df:9e:a3:60:77:d4:4d:ba:98:
66:25:46:3a:27:bd:e1:80:62:98:ad:b7:ad:cb:0f:
0c:ae:13:0f:ea:a9:3c:a0:7a:47:45:7c:58:e2:72:
df:35:93:0a:24:83:37:81:9d:05:4a:c8:63:10:04:
d9:35:2e:75:14:50:f0:28:fa:fb:4c:0d:a1:54:73:
5c:da:b6:0b:3f:67:9b:9a:6b:d3:5e:16:1c:d0:07:
63:58:0d:eb:00:f9:b1:8c:10:b1:f0:15:16:c5:90:
40:e7:53:0c:c1:7d:c0:09:c2:38:1a:db:70:ac:25:
10:45:9b:ee:23:93:19:52:20:f3:6a:01:48:2b:49:
36:b7:70:03:9e:f3:70:e3:cf:70:fa:28:2f:84:97:
5c:a7:a0:d8:25:ca:36:be:cb:82:6b:77:a9:0c:3f:
51:b8:99:53:36:66:d6:b6:49:4c:5a:ba:89:b2:bd:
d9:d4:3d:96:4d:36:2a:b8:0f:09:04:78:bd:79:7a:
91:37:ec:78:e6:b4:af:31:34:05:93:1f:ae:e7:20:
d2:e5:3e:82:47:2b:d7:51:fb:18:39:98:6e:51:9e:
f9:dd:4f:59:62:f1:29:77:5d:81:40:37:5e:9d:af:
74:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:56:5D:74:C8:A0:D5:AF:D9:EC:3B:4B:95:F9:3B:69:B0:0D:01:66
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138322e302f32342d3234203d3e20343032383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.182.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:69:c8:f5:c3:66:66:d4:86:31:25:01:3b:8d:47:a7:ae:42:
2d:69:a8:06:e2:86:fc:7a:f1:f3:b0:42:33:a6:b0:9b:ba:4b:
bf:96:25:5b:10:b7:ad:ff:a8:63:67:b2:cd:07:6a:a2:a0:ee:
34:f9:ed:33:fb:75:9b:1e:90:e5:78:2e:62:30:ac:45:b1:d5:
2f:38:ca:bd:08:9e:72:14:df:60:62:9b:e2:5c:7e:64:c4:27:
21:e6:c1:f1:23:dc:6a:3c:02:20:5b:a2:1a:03:e4:59:35:49:
8a:7c:72:02:27:92:e7:03:b2:01:92:2b:21:d7:47:7c:75:b4:
6a:04:46:b9:24:d5:14:90:e9:b8:03:30:3c:8e:77:ca:36:7c:
0d:23:6a:39:b9:47:cc:bc:03:36:ed:63:0b:e5:d0:6a:d8:f3:
2c:dc:ec:7c:e3:41:32:fa:17:9e:b1:3b:f9:60:69:a1:74:5b:
11:b4:74:2c:56:4c:cf:d2:03:46:eb:12:32:36:d5:bd:3d:dc:
d2:f5:c2:f6:ce:0b:bd:52:90:a8:63:c1:67:82:a7:2f:65:a4:
91:97:e2:46:93:bd:ea:64:32:31:6c:c3:6f:2f:d3:63:c5:d5:
95:9f:3b:dc:67:9c:59:c7:cd:80:4b:69:44:bf:df:c2:a3:68:
00:c5:2f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:18:21 2026 by rpki-client