Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139382e302f32342d3234203d3e20333939343532.roa
File: 3134372e3132352e3139382e302f32342d3234203d3e20333939343532.roa (raw, json)
Hash identifier: C+L7AX10ROIQh48ELUJiyL5QFgcNdNeknmx45Irs+jM=
Subject key identifier: 46:0A:7F:E5:44:C3:A6:A6:35:99:0F:5A:A4:E4:9D:8F:D7:23:4A:39
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 417AA3C79D5319A461EBCDDCB8B14076BEAD8E32
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139382e302f32342d3234203d3e20333939343532.roa
Signing time: Wed 16 Sep 2026 13:27:02 +0000
ROA not before: Wed 16 Sep 2026 13:22:02 +0000
ROA not after: Wed 15 Sep 2027 13:27:02 +0000
asID: 399452
IP address blocks: 147.125.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:53:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:7a:a3:c7:9d:53:19:a4:61:eb:cd:dc:b8:b1:40:76:be:ad:8e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 16 13:22:02 2026 GMT
Not After : Sep 15 13:27:02 2027 GMT
Subject: CN=460A7FE544C3A6A635990F5AA4E49D8FD7234A39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:a6:d1:8e:79:85:b5:8c:59:69:16:b0:79:
19:40:d2:2f:bc:b5:e4:0a:e0:69:39:cd:7b:a1:d9:
53:84:45:e7:11:9d:9f:27:80:1c:8a:6a:0a:b5:d4:
1d:a8:49:6f:88:65:c6:27:64:1e:b4:db:97:8c:31:
40:50:e2:58:c1:87:5c:24:0c:62:d1:57:ab:4f:3a:
97:a5:3d:b6:ab:4f:ce:c4:ec:21:d3:0a:96:5e:05:
e4:df:9e:b9:93:a1:8d:92:b6:a4:ae:a8:d2:25:db:
68:8f:44:fb:3b:22:f5:bc:0c:11:cc:eb:34:9a:18:
d5:55:1d:b6:6c:4d:a6:dd:dc:a7:67:25:99:dc:c6:
3c:cb:86:cc:03:82:4d:d0:41:20:85:04:3a:34:db:
7e:2e:b0:4e:47:22:66:28:49:2f:cb:d5:f1:aa:0c:
9e:81:7a:ee:1b:8e:85:4c:16:e0:eb:26:b4:3c:eb:
b9:6a:46:a7:83:4c:0a:f0:cc:17:d3:bf:ce:00:11:
1b:9f:9c:d0:c9:d8:29:bd:8b:ab:8e:64:81:64:63:
09:ef:c1:d3:4b:b3:63:5a:66:5c:e9:f3:46:a6:68:
fe:34:29:77:56:c1:6b:89:86:3b:21:e5:42:f8:51:
33:a9:d5:f1:f0:f1:d5:ec:65:5b:b5:82:0a:5c:4e:
3e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0A:7F:E5:44:C3:A6:A6:35:99:0F:5A:A4:E4:9D:8F:D7:23:4A:39
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139382e302f32342d3234203d3e20333939343532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.198.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:d4:65:f0:ee:18:8b:22:0b:62:60:75:32:c0:1b:6a:94:e7:
f3:73:51:01:0a:e2:1a:61:96:13:7a:50:70:c7:a5:2b:0a:1d:
6e:8a:70:5d:d5:f8:d3:2e:0e:4c:7d:c0:1b:5e:c8:7c:93:8c:
34:03:12:f7:d1:d7:60:0d:fc:27:aa:e6:e7:9b:6f:8d:0c:35:
bf:e1:76:79:92:05:b3:67:1b:b0:1f:1f:02:1c:2b:3d:27:81:
15:e1:db:7c:09:d3:77:9d:a3:8a:33:80:73:b7:ea:7f:2f:f4:
2a:69:42:5d:21:ea:4f:1e:73:cf:68:ce:24:66:d9:8e:27:0b:
b5:0a:8c:6d:cb:51:bd:02:70:87:2a:02:f9:cf:c7:46:b0:6c:
25:6f:71:9b:85:b7:ef:26:c4:be:9f:c8:ad:a2:ef:1b:9e:06:
67:08:10:74:e0:f4:d5:90:f6:34:dd:27:b3:4e:c7:3d:b6:0b:
09:99:30:44:0c:29:ff:5f:19:7a:59:d4:55:3f:0b:4a:e8:06:
50:8c:df:64:74:b4:94:9c:1a:4e:ef:94:e5:e4:b8:5e:c5:13:
f8:94:91:71:fe:69:32:23:14:18:0a:3f:e5:e4:08:b3:e2:58:
b2:1a:86:59:91:ae:42:5d:90:c8:c7:71:c4:35:6f:b2:2a:b6:
c0:bd:9e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:05:57 2026 by rpki-client