Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139352e302f32342d3234203d3e20323138373937.roa
File: 3134372e3132352e3139352e302f32342d3234203d3e20323138373937.roa (raw, json)
Hash identifier: SC2N2uFREFZwjoYSKdrwu1CzvMAfKKh9oQkQMjajX0E=
Subject key identifier: EB:6C:9D:8E:DB:F0:64:B9:FA:21:90:58:8A:3A:19:2A:8D:B8:33:C3
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 21A26EA6D523777C94CB5E8048A7194CC749F8DF
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139352e302f32342d3234203d3e20323138373937.roa
Signing time: Thu 22 Oct 2026 12:03:00 +0000
ROA not before: Thu 22 Oct 2026 11:58:00 +0000
ROA not after: Thu 21 Oct 2027 12:03:00 +0000
asID: 218797
IP address blocks: 147.125.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 04:29:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:a2:6e:a6:d5:23:77:7c:94:cb:5e:80:48:a7:19:4c:c7:49:f8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Oct 22 11:58:00 2026 GMT
Not After : Oct 21 12:03:00 2027 GMT
Subject: CN=EB6C9D8EDBF064B9FA2190588A3A192A8DB833C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2c:fa:14:c4:45:be:28:91:b0:bc:d6:0e:95:
19:1d:6a:5c:40:81:93:eb:88:76:26:bc:ab:91:91:
f5:df:06:86:25:35:f8:eb:72:a1:8c:19:f2:c3:c8:
f2:48:45:b3:2b:c2:64:80:c3:21:6c:8d:b3:5a:df:
1a:72:43:15:1f:61:46:86:13:24:ba:ca:68:1e:bf:
75:98:de:a8:69:77:27:e1:50:d8:6f:04:c9:73:43:
2a:43:43:b8:bc:48:3e:e2:1c:9f:ca:73:53:06:2f:
4d:bb:ad:8b:45:79:bf:c0:95:0f:69:5c:dc:6a:4c:
7a:13:6c:8f:56:81:bb:bb:80:4e:6b:a5:50:2a:cc:
41:01:0a:1d:3e:a5:af:85:63:43:c7:73:eb:83:45:
f4:62:c9:68:39:39:5d:ae:02:9b:51:12:69:0a:9f:
17:7a:17:87:f8:06:01:ee:15:1f:a2:c6:dc:31:f4:
6e:01:43:d4:d0:f3:c3:d9:51:30:55:e4:12:36:7d:
41:c8:8a:70:63:43:46:9e:b0:27:b2:63:d1:e2:53:
8f:7c:bc:08:e9:2f:ed:5f:f6:75:81:ec:18:f2:ce:
da:94:f7:8a:b6:5b:eb:11:99:7e:a8:62:02:69:ec:
82:bc:e5:06:79:b3:2e:a1:17:11:eb:fd:53:12:17:
1d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6C:9D:8E:DB:F0:64:B9:FA:21:90:58:8A:3A:19:2A:8D:B8:33:C3
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139352e302f32342d3234203d3e20323138373937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.195.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:6e:1d:04:3f:44:53:f8:c0:10:89:8d:d2:03:4e:7e:a5:d7:
a9:93:83:1f:ac:3f:97:21:30:d5:4d:15:6e:1c:07:c9:6a:fc:
63:79:e2:a8:31:43:e5:33:bf:f2:fc:46:3c:93:a4:81:e5:ae:
52:d3:59:6b:a7:92:25:f4:d1:c7:21:a6:ec:8a:21:7c:cb:6b:
22:7b:f9:30:6b:91:da:8e:38:7c:4e:5a:ab:8b:45:1b:c6:7b:
ec:d1:42:f0:6c:d9:5b:69:fc:88:54:95:df:1d:4f:25:a6:e1:
1d:5c:78:9f:31:6d:8e:f9:49:93:b9:56:b2:e0:1e:c2:ea:4a:
fd:5a:5e:64:10:98:ff:60:0e:97:4c:ef:2c:7a:09:40:33:b3:
94:7f:39:ca:1a:0a:6b:5c:0a:8d:f8:eb:ad:f9:b7:31:4b:8c:
f5:51:3b:d1:02:ef:32:71:2d:be:26:e3:97:61:16:b5:42:3b:
69:52:d9:71:40:cc:27:e2:7d:f5:59:3a:a4:b9:f7:88:33:d8:
47:b2:55:d4:cc:6b:f6:4b:1b:81:fd:28:ba:2d:e2:c2:2c:34:
e8:37:e9:84:af:28:cf:aa:a9:4e:ef:fd:97:0f:87:2b:b7:57:
45:e3:56:45:e9:4b:7a:06:2e:b1:e0:4a:f7:ac:a8:c7:e1:10:
4a:e5:4b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 15:20:00 2026 by rpki-client