Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230392e302f32342d3234203d3e20343032383635.roa
File: 3134372e3132352e3230392e302f32342d3234203d3e20343032383635.roa (raw, json)
Hash identifier: QumgqYNk2zESPf9uFPX71LYcuOa2zUTj0VtgYvTc57k=
Subject key identifier: 94:5A:1F:DF:35:D3:97:F2:57:68:6D:F3:F9:44:74:11:3E:4F:D4:E9
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 58A09F62DB054EE45AE16C88DA6C4B807078D68E
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230392e302f32342d3234203d3e20343032383635.roa
Signing time: Sun 23 Aug 2026 00:41:05 +0000
ROA not before: Sun 23 Aug 2026 00:36:05 +0000
ROA not after: Sun 22 Aug 2027 00:41:05 +0000
asID: 402865
IP address blocks: 147.125.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:a0:9f:62:db:05:4e:e4:5a:e1:6c:88:da:6c:4b:80:70:78:d6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Aug 23 00:36:05 2026 GMT
Not After : Aug 22 00:41:05 2027 GMT
Subject: CN=945A1FDF35D397F257686DF3F94474113E4FD4E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2a:55:a0:43:eb:b8:27:29:60:0e:d0:5c:de:
a1:53:6c:66:4b:b1:5e:63:c6:68:1a:f0:53:89:e5:
01:d7:cb:27:fb:c2:85:31:75:f2:49:28:c8:8b:d5:
77:9a:cb:b7:42:d0:b7:57:56:5b:70:4f:62:c2:24:
1d:d2:da:63:ca:6f:3f:b2:be:a3:49:d0:b3:d9:2b:
25:99:1a:3b:74:f7:44:99:83:47:56:44:66:5a:5f:
4a:fb:02:2a:bc:36:b7:b9:c2:cb:8e:8c:9b:99:f3:
25:ff:88:6e:97:6a:6f:f2:07:e6:a3:f5:9a:56:6f:
c3:2d:48:de:60:24:db:ee:cf:a1:5d:59:5b:cf:d4:
f8:36:e5:2e:32:87:41:5a:14:88:3f:91:fc:5b:ce:
c8:81:45:a8:ea:e4:5b:43:78:c3:55:19:70:48:fd:
20:10:ea:bb:60:df:99:25:3a:cd:2d:5a:7a:6b:26:
f3:33:da:d7:51:2e:c3:dd:4a:c7:00:3a:85:6a:8e:
bc:3a:68:a6:2c:b2:06:bb:cc:d7:1f:0f:80:bf:6f:
80:31:34:68:be:cd:43:e9:f6:03:64:25:b5:b5:87:
a5:3c:a7:83:67:f4:54:b6:0c:47:7b:9d:76:7a:6e:
a4:b3:83:93:99:ff:ab:d0:a0:e5:f5:b7:52:78:23:
64:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5A:1F:DF:35:D3:97:F2:57:68:6D:F3:F9:44:74:11:3E:4F:D4:E9
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230392e302f32342d3234203d3e20343032383635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.209.0/24
Signature Algorithm: sha256WithRSAEncryption
69:c9:41:eb:93:9c:60:77:78:d4:44:db:ba:f7:ce:bc:f1:79:
f2:74:db:2a:f4:d1:b2:45:fa:7c:ef:c8:3b:c4:b0:10:31:06:
0e:a3:f2:bb:36:5d:7c:19:8f:0a:07:32:b8:8c:7a:9f:22:f6:
3d:ad:bf:58:d5:63:98:51:1b:4f:6d:ca:c1:b1:64:0e:fa:ed:
1f:56:6b:41:14:7e:71:07:f5:15:a0:2a:ea:57:6e:a5:fa:ba:
5c:21:89:86:ac:fe:00:f5:cc:44:da:83:f4:56:f7:d1:f5:a1:
2e:f4:d0:1b:0a:66:e4:bb:42:5a:59:91:c7:b0:21:85:64:b7:
4a:ce:5c:ff:ea:db:f0:00:1e:59:e5:3d:2f:4a:59:61:09:7c:
4b:5f:1a:32:e8:17:03:ec:30:b3:37:91:56:3e:9e:d1:56:f8:
db:7b:87:6b:49:97:da:19:ee:78:42:f8:26:ae:d1:57:08:d8:
dc:e2:88:ce:8d:01:52:90:dc:73:43:69:88:d3:f8:57:a4:be:
c1:c7:eb:09:a3:5c:dd:ae:73:ce:82:a2:38:61:f4:b8:0c:69:
b4:57:a4:b5:00:71:a0:2a:a0:7d:0c:64:2e:5f:36:14:8d:23:
83:ec:e9:8f:2f:5b:78:a1:50:90:92:eb:78:e9:f1:88:7b:fe:
81:ee:f5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 04:33:01 2026 by rpki-client