Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231342e302f32342d3234203d3e20323132363039.roa
File: 3134372e3132352e3231342e302f32342d3234203d3e20323132363039.roa (raw, json)
Hash identifier: rc3Ql6tzIA8sccm+kfx0gGEJW9YDHeqOCACEfE4Vix0=
Subject key identifier: 64:4C:6C:D2:93:67:C2:63:7B:EA:09:AF:8F:56:11:5F:76:0E:E4:26
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 77AD972315ABD4914065A95C9EA394AA10DBEDAB
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231342e302f32342d3234203d3e20323132363039.roa
Signing time: Tue 21 Apr 2026 09:09:11 +0000
ROA not before: Tue 21 Apr 2026 09:04:11 +0000
ROA not after: Tue 20 Apr 2027 09:09:11 +0000
asID: 212609
IP address blocks: 147.125.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:ad:97:23:15:ab:d4:91:40:65:a9:5c:9e:a3:94:aa:10:db:ed:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Apr 21 09:04:11 2026 GMT
Not After : Apr 20 09:09:11 2027 GMT
Subject: CN=644C6CD29367C2637BEA09AF8F56115F760EE426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:53:24:93:29:15:a3:40:96:3f:de:39:17:
7d:1e:b7:48:4e:47:51:14:76:38:b0:f3:48:cd:0b:
e0:e3:69:ba:f2:95:10:59:f6:43:e9:db:64:25:f7:
5c:94:96:08:d6:88:1c:23:a5:fa:2a:59:2d:71:cf:
f8:fb:56:bd:09:d8:8f:77:a6:e9:e1:dc:ac:7e:fd:
bd:b4:a8:a0:cd:13:58:a3:d5:83:01:71:50:fc:96:
6b:09:fc:f8:82:e7:5d:dd:81:f1:6d:69:9b:97:2c:
69:48:73:49:f7:0b:c4:e5:a2:7f:15:7d:17:3f:6e:
08:dd:0d:9d:8e:59:92:33:e4:b5:8a:f9:61:06:1a:
ad:3c:6f:fb:89:b0:19:7d:ce:9e:46:1d:24:82:34:
d6:1c:34:0f:e7:23:9e:e9:66:13:df:8e:a9:e2:0a:
13:00:6e:f9:55:b7:44:7b:ef:e1:8f:a4:83:c9:a2:
74:d1:12:29:96:53:8e:d4:7b:f4:18:17:9c:31:9a:
b9:92:34:8c:07:74:e0:41:34:36:01:42:1b:73:d7:
24:76:2c:94:22:af:cf:3e:1d:f6:24:49:2a:16:2c:
6a:1f:fa:4f:07:06:d6:fa:47:20:14:f3:6d:f4:a4:
18:58:c8:4f:98:91:75:5e:50:38:d9:5d:4b:54:f6:
9b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4C:6C:D2:93:67:C2:63:7B:EA:09:AF:8F:56:11:5F:76:0E:E4:26
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231342e302f32342d3234203d3e20323132363039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.214.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:16:38:9d:eb:69:4e:c7:d7:78:c0:38:51:dd:93:8a:ee:ad:
9d:e7:23:69:93:11:b6:61:e4:69:4a:71:4e:3c:c5:d7:66:c5:
52:2f:07:a9:ec:98:dc:b3:d2:89:4e:ee:09:7a:4f:0f:fb:4f:
1b:1a:64:21:f2:e9:de:e4:7c:e2:52:85:d3:82:34:da:29:53:
7c:a6:7b:d9:a8:63:6a:38:7d:01:a2:37:83:d2:9c:f1:cb:71:
2c:5c:f6:13:1d:aa:db:71:ba:34:da:4a:c4:55:7b:ea:3f:f0:
69:59:62:c3:e6:8e:bf:f5:62:bf:8e:82:d0:4e:d6:3f:d1:4e:
e9:9b:e1:c3:30:d0:4e:7a:70:df:1d:42:6b:77:52:dd:80:69:
aa:1b:7e:08:2b:26:4a:7e:e0:5a:5c:85:5e:6b:6d:8d:ce:2e:
61:fb:37:ca:d6:47:46:1e:0c:5b:75:9d:43:fb:2f:e5:ec:67:
19:62:2f:48:9a:b8:27:8c:d1:28:78:0d:e4:f9:09:08:10:d3:
f1:f2:b1:7c:2c:09:7c:40:cb:f4:2f:eb:29:14:a5:92:ac:5a:
e4:74:29:6e:61:a4:a3:d7:f4:d2:98:30:96:1e:66:55:68:9b:
d8:f4:49:5c:6e:f8:02:66:f0:8d:38:59:c6:6e:66:ce:55:26:
3e:10:21:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:40:47 2026 by rpki-client