Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139362e302f32342d3234203d3e203437333737.roa
File: 3134372e3132352e3139362e302f32342d3234203d3e203437333737.roa (raw, json)
Hash identifier: o0ef6KdNtsEbi1N2NitIKDCeNJ0FVYbDDj9s+tg/YHA=
Subject key identifier: 47:35:2E:A9:00:7A:52:06:37:75:0A:F6:9D:F3:F2:BB:43:C4:61:84
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 1683F5F1F824839E0AAC9065C0E554E174FBF576
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139362e302f32342d3234203d3e203437333737.roa
Signing time: Tue 21 Apr 2026 09:09:13 +0000
ROA not before: Tue 21 Apr 2026 09:04:13 +0000
ROA not after: Tue 20 Apr 2027 09:09:13 +0000
asID: 47377
IP address blocks: 147.125.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 15:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:83:f5:f1:f8:24:83:9e:0a:ac:90:65:c0:e5:54:e1:74:fb:f5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Apr 21 09:04:13 2026 GMT
Not After : Apr 20 09:09:13 2027 GMT
Subject: CN=47352EA9007A520637750AF69DF3F2BB43C46184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:ad:b6:0f:8e:b8:55:cc:f1:f8:d5:e6:e7:
b8:a4:1a:2d:c4:57:9b:f3:25:2b:bf:cd:81:20:90:
a6:9d:8e:8f:3f:39:d1:c5:de:6c:06:6a:ba:29:87:
0c:7b:9a:b9:8b:2b:fb:d2:fe:ab:bf:44:54:1a:61:
73:7d:4e:98:1f:8d:7f:e4:c9:8e:cb:6e:88:89:3a:
3b:97:96:e7:aa:ce:68:32:7a:2f:19:f9:2a:e9:51:
19:52:55:58:8e:a4:2d:e4:73:28:16:ca:be:de:0b:
32:72:e1:01:90:39:99:59:cb:b8:c2:1c:3d:f7:67:
49:a9:19:42:a5:86:5d:26:f1:29:1b:75:0c:ab:6f:
67:b5:58:dc:d2:d0:56:fe:46:3d:65:4e:3a:69:84:
7a:af:4d:b1:bf:07:a0:f9:b6:e0:b3:33:c7:d1:12:
0b:91:da:4c:3c:bb:50:50:34:25:46:53:60:c2:a9:
f8:ee:94:18:18:47:54:2d:e5:7f:1a:de:97:90:66:
46:17:93:fc:60:aa:24:9c:54:ae:54:fa:b6:b2:4f:
21:0e:00:f2:6f:df:9a:29:1a:03:6e:81:e2:5a:0d:
ee:f5:dd:b0:56:1e:7b:8d:fa:dc:58:ca:64:37:be:
d1:8c:c1:0c:8d:47:54:35:10:12:ff:be:f1:a6:00:
e4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:35:2E:A9:00:7A:52:06:37:75:0A:F6:9D:F3:F2:BB:43:C4:61:84
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139362e302f32342d3234203d3e203437333737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.196.0/24
Signature Algorithm: sha256WithRSAEncryption
83:47:78:ff:bb:7e:ad:cc:9b:39:e9:8f:27:fb:b5:e4:9a:51:
6c:4f:5a:bc:ae:a0:4b:7e:fc:2c:7a:a1:73:fc:a0:4a:ca:4b:
76:1e:b9:1f:d3:93:63:7c:6b:1e:d5:85:77:e3:73:ae:5d:eb:
6f:a5:45:1e:00:eb:11:df:e1:79:7c:20:3c:51:7e:1d:43:22:
a2:bc:6b:22:21:77:54:ae:a4:a4:6d:0e:0e:16:a8:66:25:cc:
fe:0f:ca:ff:17:23:8b:24:f5:7f:0a:85:06:54:25:b3:c8:1a:
74:85:d1:85:10:98:3b:f6:05:02:9a:20:35:25:ef:92:ef:5a:
f4:fb:88:88:8e:a4:a9:f5:95:1c:7a:f4:a6:69:9a:01:d0:ab:
04:fd:16:91:33:c4:b7:a8:2c:82:79:44:1d:5c:ac:e7:65:93:
f0:91:0e:3c:8c:e6:5b:64:cf:49:fe:31:01:f9:3c:dc:0e:a7:
b8:83:f9:74:21:b5:4e:bd:92:42:5b:0d:11:ca:a8:e9:13:1b:
e0:fb:e7:85:fd:31:76:4b:38:c0:0b:45:bd:d3:e2:62:e8:3c:
10:fc:c4:20:6c:9f:1b:91:60:85:2c:48:08:33:89:84:d0:b8:
4f:b6:68:8d:da:db:3e:a3:67:b1:d2:f8:57:9e:a8:7a:3b:4f:
b2:96:a1:16
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUFoP18fgkg54KrJBlwOVU4XT79XYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNjA0MjEwOTA0MTNaFw0yNzA0MjAwOTA5MTNaMDMxMTAvBgNV
BAMTKDQ3MzUyRUE5MDA3QTUyMDYzNzc1MEFGNjlERjNGMkJCNDNDNDYxODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrOq22D464Vczx+NXm57ikGi3E
V5vzJSu/zYEgkKadjo8/OdHF3mwGarophwx7mrmLK/vS/qu/RFQaYXN9TpgfjX/k
yY7LboiJOjuXlueqzmgyei8Z+SrpURlSVViOpC3kcygWyr7eCzJy4QGQOZlZy7jC
HD33Z0mpGUKlhl0m8SkbdQyrb2e1WNzS0Fb+Rj1lTjpphHqvTbG/B6D5tuCzM8fR
EguR2kw8u1BQNCVGU2DCqfjulBgYR1Qt5X8a3peQZkYXk/xgqiScVK5U+rayTyEO
APJv35opGgNugeJaDe713bBWHnuN+txYymQ3vtGMwQyNR1Q1EBL/vvGmAOQjAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQURzUuqQB6UgY3dQr2nfPyu0PEYYQwHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx
MzkzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzczMzM3Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACTfcQwDQYJKoZIhvcNAQELBQADggEBAINHeP+7fq3Mmznpjyf7teSaUWxPWryu
oEt+/Cx6oXP8oErKS3YeuR/Tk2N8ax7VhXfjc65d62+lRR4A6xHf4Xl8IDxRfh1D
IqK8ayIhd1SupKRtDg4WqGYlzP4Pyv8XI4sk9X8KhQZUJbPIGnSF0YUQmDv2BQKa
IDUl75LvWvT7iIiOpKn1lRx69KZpmgHQqwT9FpEzxLeoLIJ5RB1crOdlk/CRDjyM
5ltkz0n+MQH5PNwOp7iD+XQhtU69kkJbDRHKqOkTG+D754X9MXZLOMALRb3T4mLo
PBD8xCBsnxuRYIUsSAgziYTQuE+2aI3a2z6jZ7HS+FeeqHo7T7KWoRY=
-----END CERTIFICATE-----
Generated at Mon Apr 27 07:58:11 2026 by rpki-client