Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138352e302f32342d3234203d3e20323138373939.roa
File: 3134372e3132352e3138352e302f32342d3234203d3e20323138373939.roa (raw, json)
Hash identifier: /K48Zmdjfyrfltz67EhxpK7P0bIzhrsWfWzqiXgpims=
Subject key identifier: 31:74:18:70:42:DB:29:29:7C:A3:6B:CE:AC:B0:DE:91:B5:62:BE:19
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 6BEC8681843E93F7C025CF0E589C1F17F2C3F654
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138352e302f32342d3234203d3e20323138373939.roa
Signing time: Thu 03 Sep 2026 18:50:36 +0000
ROA not before: Thu 03 Sep 2026 18:45:36 +0000
ROA not after: Thu 02 Sep 2027 18:50:36 +0000
asID: 218799
IP address blocks: 147.125.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:ec:86:81:84:3e:93:f7:c0:25:cf:0e:58:9c:1f:17:f2:c3:f6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 3 18:45:36 2026 GMT
Not After : Sep 2 18:50:36 2027 GMT
Subject: CN=3174187042DB29297CA36BCEACB0DE91B562BE19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2c:41:b1:2f:c5:e4:bd:d8:d1:3d:61:df:23:
f1:da:ab:b3:0b:e0:50:f9:4f:22:6e:a5:0a:72:6b:
5c:e0:a1:40:4c:c0:84:97:41:8b:13:60:0c:b9:f4:
e9:d5:b3:d6:20:28:ce:77:07:7e:78:0b:6c:b3:68:
aa:f6:ea:c5:d7:4c:1b:9e:d2:d0:10:63:87:6e:83:
29:30:fb:0f:8c:f7:e3:93:c4:12:e2:7e:8a:28:80:
7b:76:cf:30:98:a4:1f:e2:97:16:aa:54:d1:a9:5b:
77:bf:02:d1:2e:97:0a:ec:73:83:63:e4:5f:ca:2b:
22:a8:50:4a:5b:84:88:88:14:9f:c5:4c:e1:1e:1c:
43:d3:b4:1d:6a:50:dc:7a:f3:f8:26:91:b5:8a:d1:
60:61:a6:78:40:87:a4:60:62:61:ee:27:2a:dc:36:
ea:11:78:0c:7b:bf:9b:cf:0f:62:d9:f5:be:57:b6:
db:34:33:90:67:69:50:2c:ff:4d:e9:28:9a:36:62:
4d:d0:21:12:36:dd:11:a9:81:96:1b:c2:63:fd:0f:
1a:26:9a:39:19:05:6f:4c:01:95:70:c4:0f:16:ae:
6d:b5:22:a5:eb:54:0b:4f:8d:09:a5:cb:c4:7a:ee:
59:c6:34:0c:e0:88:f3:ab:d8:cf:74:85:7b:fc:c9:
2d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:74:18:70:42:DB:29:29:7C:A3:6B:CE:AC:B0:DE:91:B5:62:BE:19
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138352e302f32342d3234203d3e20323138373939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.185.0/24
Signature Algorithm: sha256WithRSAEncryption
84:a9:cd:06:ab:54:9f:ed:fd:4b:c6:d9:33:b8:2e:69:32:bd:
f4:80:43:97:55:67:6a:8d:1b:e3:e1:79:f0:1d:b8:ea:8a:d5:
eb:14:0e:25:7c:7c:f6:62:e4:c0:07:b8:3d:cc:a0:4e:5f:3a:
33:9f:d9:b2:a7:6d:c0:f3:32:77:5d:3c:17:0f:e2:32:0d:59:
76:4c:68:7a:64:e3:fe:c5:5a:9f:f9:1d:20:76:dc:3f:e9:fd:
0d:5f:ab:ad:60:a6:ba:5a:b1:f9:85:70:f5:0a:36:9c:9e:9f:
4b:53:c3:1b:ad:d1:1c:12:e6:5d:d5:40:56:a0:cb:32:a4:a3:
9f:9f:97:34:a8:bd:21:50:29:47:7f:4c:52:7f:65:83:37:f7:
54:92:33:60:57:86:34:3d:ac:23:2a:1b:b9:6a:5f:c9:9a:c9:
bc:43:03:68:e7:48:ca:27:1f:c5:08:76:43:96:52:49:1d:67:
15:f5:1b:20:71:dc:4d:64:25:ab:b4:77:7d:28:55:b0:2f:bb:
ff:5f:9d:79:13:a6:14:f3:23:3b:f2:53:20:58:fd:c6:dc:50:
92:ed:77:0b:8d:29:d4:98:d2:c8:e4:d9:8d:4f:ec:a4:ce:7d:
74:a7:d0:b3:92:0b:9e:70:db:c4:45:8f:00:14:d0:cd:83:f0:
8e:29:d8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 05:11:24 2026 by rpki-client