Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139352e302f32342d3234203d3e20323138373830.roa
File: 3134372e3132352e3139352e302f32342d3234203d3e20323138373830.roa (raw, json)
Hash identifier: 2+66E8TcpZo94gqzAwgmz33ju+lxe3ep4FMXowgbb04=
Subject key identifier: 18:F1:52:40:D7:E6:DD:81:33:67:38:43:96:42:D2:DF:6C:7E:C7:19
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 7E071269BFEC74EDD0565B7519DF22CD599E65E8
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139352e302f32342d3234203d3e20323138373830.roa
Signing time: Thu 22 Oct 2026 12:03:00 +0000
ROA not before: Thu 22 Oct 2026 11:58:00 +0000
ROA not after: Thu 21 Oct 2027 12:03:00 +0000
asID: 218780
IP address blocks: 147.125.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 20:37:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:07:12:69:bf:ec:74:ed:d0:56:5b:75:19:df:22:cd:59:9e:65:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Oct 22 11:58:00 2026 GMT
Not After : Oct 21 12:03:00 2027 GMT
Subject: CN=18F15240D7E6DD81336738439642D2DF6C7EC719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f7:b5:32:9b:30:2b:f9:82:0e:e4:c9:f2:ea:
52:05:7d:46:57:30:72:e6:63:c1:f8:51:3c:32:06:
00:7c:40:74:7f:17:fc:e7:d4:f3:3e:3e:4c:f2:d5:
35:b0:a9:ba:cb:e6:92:84:fd:08:d3:af:4b:cf:76:
a3:77:73:55:89:12:01:3e:af:7d:51:b1:75:04:c2:
ad:24:dd:84:27:de:54:88:e2:aa:f6:89:ef:25:ce:
05:47:22:94:21:de:2a:f7:b2:25:8b:8e:87:fb:24:
a5:89:01:fc:85:68:d2:bf:77:5d:eb:bd:1f:60:c6:
bf:ff:5f:0d:a0:e4:f6:88:41:7d:12:db:8a:eb:af:
24:b6:ed:b0:9d:0e:aa:b0:d6:34:85:58:13:f5:f2:
23:85:fd:5f:15:96:e2:17:c9:5a:dd:91:3e:dd:f0:
f1:11:47:d6:b3:2f:eb:3e:e6:28:84:bf:f6:dd:40:
29:2e:13:ef:45:7b:d7:8e:28:35:4c:6a:47:b3:de:
d6:dc:bf:66:f7:ed:47:1f:ba:64:ca:62:ef:a0:23:
f4:e8:fb:95:3b:0d:b6:ff:8a:6c:7e:4b:9b:66:17:
bc:1f:f1:6c:46:f5:ff:02:4f:57:c7:0d:c4:89:0f:
d7:bd:76:54:d4:b8:5b:f7:d4:3e:9e:33:a3:8b:70:
c8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F1:52:40:D7:E6:DD:81:33:67:38:43:96:42:D2:DF:6C:7E:C7:19
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139352e302f32342d3234203d3e20323138373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.195.0/24
Signature Algorithm: sha256WithRSAEncryption
66:60:47:62:d3:4e:b0:44:31:ba:fc:6f:dc:c0:bd:c2:07:6c:
06:fe:9c:6e:5e:a6:35:36:8c:25:86:6a:85:d8:f1:e1:f2:30:
06:0a:66:ef:4c:ae:20:68:c5:d3:be:2b:f2:41:48:bc:c6:fb:
2c:f3:46:59:1f:2b:34:36:43:a1:17:bc:5d:7b:de:62:a2:c5:
81:23:02:91:71:30:66:97:d8:69:9c:9b:a7:db:29:9c:24:2b:
d2:0f:65:6b:96:51:7d:32:87:db:bb:bf:ff:87:7d:ac:e3:ee:
a5:a8:58:da:2a:f6:ba:23:b8:59:3e:d6:77:11:20:2c:c5:5c:
f4:4e:03:8a:72:f7:18:36:e4:9f:87:ae:a6:19:83:9a:04:a5:
4c:20:89:2f:e1:51:90:42:a3:6e:51:38:96:f1:ca:43:83:40:
42:d8:e7:e0:37:04:06:29:51:56:02:9c:b0:c7:19:92:fa:3d:
7d:e0:fe:cb:82:2d:c4:96:01:c4:e2:96:33:5c:d0:18:3e:5d:
29:19:fe:30:62:79:25:a9:aa:9a:fb:b1:47:7c:2a:8b:d8:80:
52:38:79:ea:9c:ef:e2:b0:a1:ac:27:4e:e6:9c:d5:9f:52:b6:
3d:a4:0f:eb:f7:91:c2:bc:cf:19:63:42:f7:e5:af:ba:e8:6e:
0a:13:4f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:13:38 2026 by rpki-client