Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139392e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3139392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: E8z5HKx81d/18TeNqMPRZfwpTy20Cyq9S5lfuHetZtw=
Subject key identifier: A5:F7:68:00:BE:78:3F:E8:F6:7D:AA:CD:61:C4:32:AD:14:91:63:04
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 571FA69006E00A60E29191ED4F649E68EFE8ED32
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139392e302f32342d3234203d3e20383334.roa
Signing time: Wed 16 Sep 2026 13:29:03 +0000
ROA not before: Wed 16 Sep 2026 13:24:03 +0000
ROA not after: Wed 15 Sep 2027 13:29:03 +0000
asID: 834
IP address blocks: 147.125.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:53:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:1f:a6:90:06:e0:0a:60:e2:91:91:ed:4f:64:9e:68:ef:e8:ed:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 16 13:24:03 2026 GMT
Not After : Sep 15 13:29:03 2027 GMT
Subject: CN=A5F76800BE783FE8F67DAACD61C432AD14916304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ae:73:2e:b1:58:21:29:76:08:59:a3:90:ed:
88:38:79:fc:d0:6a:fe:38:b2:52:9e:18:d1:3b:50:
c5:37:8a:80:8f:69:7e:74:57:15:f0:4b:a2:dd:b2:
71:27:3e:dc:1e:b7:78:47:61:b4:b0:12:39:e9:f1:
c0:e9:2b:51:76:77:73:5f:06:1d:af:ff:08:cb:38:
72:46:7e:c5:bd:41:a4:60:ae:96:27:7f:38:b1:1e:
af:db:07:ff:05:5a:d0:79:b3:51:13:75:b2:a6:b5:
2e:35:c4:d8:1a:a9:95:4a:93:5b:5d:c6:6a:17:8b:
d9:d9:b0:5e:b1:90:be:2e:65:11:d6:2a:27:c5:be:
50:f8:d8:5c:f8:90:1f:ea:ee:20:58:ef:d5:88:38:
73:61:0b:0d:d6:6d:3a:04:5c:8c:b7:aa:75:a4:95:
7a:38:bb:fa:03:67:fb:21:3f:ad:e8:72:2f:02:58:
f0:e2:8e:be:e6:b6:77:8e:1c:4a:e1:36:cc:89:c1:
e7:c3:bd:a0:0c:df:3f:7a:3a:23:44:e6:83:cd:d2:
2b:e8:bf:3f:dc:92:1c:d0:21:da:35:91:75:1c:ba:
63:c8:52:98:a0:f8:41:d6:dd:5a:c5:a1:9b:7a:5f:
af:c5:90:7b:7a:4f:f0:d1:b4:d2:39:00:c5:23:82:
84:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F7:68:00:BE:78:3F:E8:F6:7D:AA:CD:61:C4:32:AD:14:91:63:04
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.199.0/24
Signature Algorithm: sha256WithRSAEncryption
60:a4:fc:16:e9:3d:99:ce:55:c4:96:df:ed:97:74:78:3d:e2:
5f:5f:47:d8:7d:b8:c3:d5:6f:6d:07:28:00:48:9c:ff:8e:d6:
94:68:5a:57:59:c8:99:97:56:a1:3b:11:49:98:c7:b4:8e:70:
7a:ef:bb:6f:26:2d:9e:d6:1a:ca:34:9e:2c:1c:7d:bf:da:21:
3c:c1:f6:dc:cb:e7:7c:37:8c:dc:2c:23:11:ab:a3:15:4e:8d:
f5:2f:6b:5b:73:25:4f:18:2b:f9:bf:81:86:04:6b:0c:b1:f0:
d5:f5:bf:b6:d8:57:43:c0:4b:05:a6:a9:c6:01:c0:3f:a0:9a:
60:c9:6c:13:7c:41:36:19:0e:88:7c:f5:35:4a:00:88:97:4a:
5b:73:03:db:40:98:d2:97:f0:43:39:bc:54:8b:40:c8:3d:62:
0e:f6:42:af:a0:82:9f:5d:55:22:ea:a9:1c:6e:b2:92:e6:9a:
65:52:69:36:3d:70:01:29:21:04:c5:cc:4c:56:ea:6f:c0:f3:
46:b7:d9:7a:62:f8:ea:5d:f2:67:28:d5:55:42:31:28:ec:ee:
c4:a0:b6:45:01:79:32:d1:29:a2:71:7a:9a:5b:4d:de:6b:68:
da:29:a2:3d:5c:7c:ab:92:ff:19:76:9e:6a:72:9f:c2:25:c7:
ea:57:b3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 22:44:22 2026 by rpki-client