Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230302e302f32342d3234203d3e203339383535.roa
File: 3134372e3132352e3230302e302f32342d3234203d3e203339383535.roa (raw, json)
Hash identifier: HlRXFUaxa/r3AVjNnVe8J6AYRyvBVaeykdYpn7VeQkA=
Subject key identifier: 20:43:C6:09:B6:61:6B:C5:28:FA:2F:DD:0C:DD:14:AA:72:F3:3A:B2
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 35A694DC3420DD416E3E19FA1C83C6D43EEEF4D6
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230302e302f32342d3234203d3e203339383535.roa
Signing time: Tue 21 Apr 2026 09:09:13 +0000
ROA not before: Tue 21 Apr 2026 09:04:13 +0000
ROA not after: Tue 20 Apr 2027 09:09:13 +0000
asID: 39855
IP address blocks: 147.125.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:a6:94:dc:34:20:dd:41:6e:3e:19:fa:1c:83:c6:d4:3e:ee:f4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Apr 21 09:04:13 2026 GMT
Not After : Apr 20 09:09:13 2027 GMT
Subject: CN=2043C609B6616BC528FA2FDD0CDD14AA72F33AB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:78:26:22:d4:78:84:7a:ea:16:57:21:57:59:
31:ac:bf:a6:c6:6e:16:a4:31:6f:fd:cf:25:bf:8f:
07:23:8e:92:89:8d:ba:22:b8:f6:c9:2e:a7:97:70:
d8:26:22:c2:37:15:a8:0c:b2:81:7c:bd:59:5c:af:
ad:9c:24:74:75:0a:98:19:75:1c:09:5c:da:20:1b:
dd:a3:de:ba:f6:d7:5a:cc:61:1e:b0:64:80:45:a6:
b1:a3:ad:96:07:a4:0e:7d:81:8f:ad:cc:ad:7f:59:
ce:28:37:45:24:67:62:2c:14:22:52:37:dc:1e:00:
63:25:aa:13:6a:55:e7:25:9f:90:85:d6:3d:85:0f:
2c:3c:05:f8:47:e3:21:31:42:a0:8c:a6:d3:75:f3:
8a:b6:cd:40:67:13:05:b7:71:df:58:aa:0f:18:69:
3c:71:af:17:85:09:8f:11:0b:47:db:58:41:ac:a3:
8c:05:eb:c5:f3:7e:6d:a2:ff:f3:ae:c7:51:50:bb:
55:74:5d:c6:2b:0e:86:8a:98:1d:1b:57:fb:d0:28:
7f:49:0b:5a:c2:b7:7d:03:b1:9a:6c:f6:70:50:2c:
ac:16:0f:a9:e9:40:3d:30:7e:cd:64:49:01:2e:a2:
3b:74:46:5c:69:ee:0f:f4:c5:72:2e:cf:d8:aa:53:
35:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:43:C6:09:B6:61:6B:C5:28:FA:2F:DD:0C:DD:14:AA:72:F3:3A:B2
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230302e302f32342d3234203d3e203339383535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.200.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:69:63:f0:10:22:b8:6a:a8:5e:f3:91:1b:3d:d4:6f:96:d8:
7c:9c:c8:5a:8d:f1:b4:b4:f5:33:83:b7:27:0e:ef:c1:21:d8:
22:4f:2c:76:a6:1c:7b:57:c3:25:f4:71:88:86:8f:12:a1:0e:
f5:66:f3:bb:67:d5:b3:43:8a:aa:b5:8a:15:82:23:ae:52:9d:
e3:79:91:14:64:72:6d:a5:ff:82:eb:72:9d:e4:7b:a2:52:09:
c4:24:e1:d7:d9:ed:41:6e:fd:30:7b:84:f3:0e:4b:60:71:03:
5a:29:84:74:b2:ea:5f:04:83:b9:c1:56:dd:ad:5a:d0:2e:6a:
c1:c9:4d:b9:d1:14:21:d9:bf:92:5a:39:52:8d:8c:a6:69:a2:
1b:27:18:ad:e9:3f:dc:45:b0:d1:5a:12:e8:b9:84:d8:15:c9:
b9:94:d2:8e:0a:22:72:0e:04:3a:b6:4a:d7:8a:da:20:3c:72:
ac:ef:29:af:d4:5a:f9:8d:87:ba:74:9b:6a:ce:4e:79:70:c4:
9f:30:b9:72:b0:b1:3e:7c:65:5d:1c:5f:39:21:be:6f:8a:33:
4b:cb:04:ca:59:56:ca:2b:2c:ca:87:d0:01:25:ba:79:76:8a:
2e:a8:3d:17:89:79:73:b7:c5:08:76:96:d4:89:0c:79:ec:ed:
54:99:9f:7b
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUNaaU3DQg3UFuPhn6HIPG1D7u9NYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNjA0MjEwOTA0MTNaFw0yNzA0MjAwOTA5MTNaMDMxMTAvBgNV
BAMTKDIwNDNDNjA5QjY2MTZCQzUyOEZBMkZERDBDREQxNEFBNzJGMzNBQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKeCYi1HiEeuoWVyFXWTGsv6bG
bhakMW/9zyW/jwcjjpKJjboiuPbJLqeXcNgmIsI3FagMsoF8vVlcr62cJHR1CpgZ
dRwJXNogG92j3rr211rMYR6wZIBFprGjrZYHpA59gY+tzK1/Wc4oN0UkZ2IsFCJS
N9weAGMlqhNqVecln5CF1j2FDyw8BfhH4yExQqCMptN184q2zUBnEwW3cd9Yqg8Y
aTxxrxeFCY8RC0fbWEGso4wF68Xzfm2i//Oux1FQu1V0XcYrDoaKmB0bV/vQKH9J
C1rCt30DsZps9nBQLKwWD6npQD0wfs1kSQEuojt0Rlxp7g/0xXIuz9iqUzU7AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUIEPGCbZha8Uo+i/dDN0UqnLzOrIwHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy
MzAzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzODM1MzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACTfcgwDQYJKoZIhvcNAQELBQADggEBAJppY/AQIrhqqF7zkRs91G+W2HycyFqN
8bS09TODtycO78Eh2CJPLHamHHtXwyX0cYiGjxKhDvVm87tn1bNDiqq1ihWCI65S
neN5kRRkcm2l/4Lrcp3ke6JSCcQk4dfZ7UFu/TB7hPMOS2BxA1ophHSy6l8Eg7nB
Vt2tWtAuasHJTbnRFCHZv5JaOVKNjKZpohsnGK3pP9xFsNFaEui5hNgVybmU0o4K
InIOBDq2SteK2iA8cqzvKa/UWvmNh7p0m2rOTnlwxJ8wuXKwsT58ZV0cXzkhvm+K
M0vLBMpZVsorLMqH0AElunl2ii6oPReJeXO3xQh2ltSJDHns7VSZn3s=
-----END CERTIFICATE-----
Generated at Wed May 13 09:34:31 2026 by rpki-client