Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138362e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3138362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 46oOmnik2JMqJq+h3FOor3qPcOUXeqL+0i/pHUXX5Eg=
Subject key identifier: 7A:CB:A8:F6:02:D4:EF:A9:3D:56:72:B9:E9:8B:7D:03:DF:51:B0:0D
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 1A3E1A75A12FE7634F104D543F4E394E50EAA17E
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138362e302f32342d3234203d3e20383334.roa
Signing time: Thu 24 Sep 2026 16:44:39 +0000
ROA not before: Thu 24 Sep 2026 16:39:39 +0000
ROA not after: Thu 23 Sep 2027 16:44:39 +0000
asID: 834
IP address blocks: 147.125.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:53:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:3e:1a:75:a1:2f:e7:63:4f:10:4d:54:3f:4e:39:4e:50:ea:a1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 24 16:39:39 2026 GMT
Not After : Sep 23 16:44:39 2027 GMT
Subject: CN=7ACBA8F602D4EFA93D5672B9E98B7D03DF51B00D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:da:e8:09:b1:57:d3:e4:da:6a:db:9c:82:30:
f8:c2:a0:45:e8:47:bb:fd:26:df:e9:d3:7e:80:66:
df:8b:e9:b9:6e:e9:28:ca:17:a0:57:4e:39:62:b7:
a7:17:1f:fc:a6:d2:b1:31:d5:96:08:2c:f8:f7:20:
23:40:91:0b:b2:72:81:32:f0:b6:93:a0:89:f9:7e:
4a:2b:5b:1e:7f:58:91:73:ae:36:cd:75:b4:77:d7:
a2:04:12:30:f9:8b:09:2e:00:57:d5:c0:7d:8d:d9:
84:97:7b:68:35:98:5c:bd:8a:6e:c7:af:9b:53:fc:
43:da:a6:b1:c0:4b:06:73:f2:92:27:01:34:fc:04:
80:ff:76:d9:2f:80:45:42:a7:78:f3:be:ec:53:01:
9f:a3:23:f1:b2:35:c0:f2:41:20:18:86:49:44:2f:
8a:1b:4d:03:c2:91:88:d6:c5:18:a4:58:5e:e6:f0:
8f:b3:aa:c3:b6:4d:14:e9:95:aa:16:9b:df:21:86:
b6:e7:e8:c3:a0:f4:05:a0:b8:80:35:bf:92:30:2c:
54:a6:52:81:52:87:69:f5:21:c5:cf:45:2f:01:66:
0a:cc:d1:08:7b:60:b3:9a:0f:5a:21:bd:17:da:87:
66:b1:c8:81:b3:a1:41:cf:2f:8f:db:77:1f:40:1c:
56:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CB:A8:F6:02:D4:EF:A9:3D:56:72:B9:E9:8B:7D:03:DF:51:B0:0D
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.186.0/24
Signature Algorithm: sha256WithRSAEncryption
41:e3:54:50:a0:cc:2d:14:59:e6:e5:97:30:9c:82:38:30:5d:
b7:0e:7e:55:31:88:49:9a:e5:0d:00:dc:b9:ad:c5:1e:f1:24:
0c:17:6c:76:67:04:12:05:2f:7e:d2:28:2c:6b:91:7c:a4:56:
b5:ed:f0:53:a2:ef:3b:d9:75:b4:d2:25:05:ba:95:1a:61:58:
db:41:93:09:50:a1:42:2a:4a:57:22:12:02:8e:92:5d:50:0f:
d6:21:6d:bc:c5:93:dc:13:08:fa:c7:58:cd:fa:e3:de:cd:0c:
2e:e2:bc:14:71:92:c4:17:39:6f:f1:c8:f1:dd:d6:cd:45:06:
6a:87:81:b7:a7:d1:16:e6:b1:d9:d6:25:af:6d:df:6c:b4:c5:
0b:d8:4d:b8:3b:a2:98:29:6c:ce:0c:e6:1f:bd:ca:73:47:c0:
31:c0:e6:79:2d:68:dd:f0:95:d1:bb:19:b5:94:f1:7b:2c:e7:
e8:c3:4c:84:e7:84:74:fe:1e:9b:01:fb:8b:f8:a2:47:fd:17:
d2:0d:31:6c:2a:06:36:15:12:ab:54:1d:85:06:99:28:71:00:
24:3b:4f:05:47:23:20:1a:51:9b:5d:11:a2:34:f4:92:c1:d5:
ef:0e:e4:65:4c:77:34:03:50:b4:bf:34:4c:b1:ce:66:8f:2e:
cd:7e:a0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 15:00:35 2026 by rpki-client