Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232392e302f32342d3234203d3e20323138373830.roa
File: 3134372e3132352e3232392e302f32342d3234203d3e20323138373830.roa (raw, json)
Hash identifier: cyh28IAuj+oofpF8rzi4qjPhlbLOU+hZl11vmNYWO6M=
Subject key identifier: D9:F3:84:A0:47:EA:88:91:DE:9B:01:23:5F:51:40:AC:A4:E4:4F:7C
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 08B8FB0B0D71DA4C890EC8142AFAE0C74388AE2D
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232392e302f32342d3234203d3e20323138373830.roa
Signing time: Thu 22 Oct 2026 12:02:59 +0000
ROA not before: Thu 22 Oct 2026 11:57:59 +0000
ROA not after: Thu 21 Oct 2027 12:02:59 +0000
asID: 218780
IP address blocks: 147.125.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 20:37:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:b8:fb:0b:0d:71:da:4c:89:0e:c8:14:2a:fa:e0:c7:43:88:ae:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Oct 22 11:57:59 2026 GMT
Not After : Oct 21 12:02:59 2027 GMT
Subject: CN=D9F384A047EA8891DE9B01235F5140ACA4E44F7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:57:c0:43:0d:79:3a:5d:1f:a6:9a:41:4d:69:
83:7f:03:7f:91:d4:40:bc:23:12:fa:b0:8e:e3:26:
87:d9:e9:5a:65:dd:7e:0a:3c:fc:e7:fd:0d:f5:e4:
4b:f6:46:1f:56:de:14:bf:4e:87:de:68:d3:7c:6d:
9f:d5:8c:4b:ef:8f:b7:18:27:28:97:2a:2c:d4:0d:
c4:f3:8d:ca:e1:6c:32:bc:0b:4c:4c:d1:33:2b:67:
f7:70:66:45:48:ef:9d:c5:27:ea:2d:99:3e:49:15:
b3:51:2b:f2:01:79:31:77:9d:1f:78:3c:7c:46:6b:
2d:e9:50:56:61:82:fb:77:e3:5c:dd:e9:19:78:7f:
39:6e:4d:8e:3a:84:df:bd:5f:e7:e7:ff:eb:66:cf:
63:44:ca:94:d6:99:d3:f4:0b:87:9d:3d:fc:ce:67:
04:5b:15:a6:c8:19:a3:68:67:5d:a8:81:28:55:17:
b9:24:17:c1:51:92:7a:84:45:1f:9d:8d:34:79:30:
f4:b3:02:b1:8f:22:a8:a2:c0:fc:3a:17:0a:5e:7d:
c3:68:b0:b8:77:b6:64:0e:62:58:61:82:5a:4f:c0:
f4:68:34:bc:0d:1e:ac:13:8f:0e:7b:56:ba:48:5d:
96:e8:99:67:27:b9:6c:7a:fc:e7:d1:0f:a6:88:e4:
b3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F3:84:A0:47:EA:88:91:DE:9B:01:23:5F:51:40:AC:A4:E4:4F:7C
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232392e302f32342d3234203d3e20323138373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.229.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:ac:90:3f:13:cf:7c:42:78:86:af:8e:d2:6a:c5:c4:3c:b2:
16:59:98:ce:6d:02:6e:a1:a4:fd:74:fb:62:ac:12:4b:24:c9:
08:10:6b:28:6d:eb:80:0f:97:d8:1e:b1:8d:63:ac:ff:99:8e:
52:01:a4:4c:9b:51:e3:cd:84:07:7b:d7:69:ab:ac:14:3b:d8:
11:79:38:5a:03:71:34:8c:8c:2e:99:b6:f8:b7:46:73:a6:09:
41:0b:7d:53:2a:5d:64:84:68:ba:e0:88:80:4b:6f:a0:7f:d8:
df:5a:f0:cb:66:03:a9:f4:6b:59:e8:08:1b:99:5b:bb:5e:df:
b0:e0:01:7c:72:dd:3e:09:98:80:f9:96:20:21:f4:55:dd:42:
7f:cf:62:cc:51:6a:dd:e8:08:c5:89:a0:cc:19:70:14:4f:27:
35:84:24:bc:f6:d4:67:bd:e0:df:a2:2a:50:d0:90:60:75:64:
62:36:93:85:31:d8:4e:50:c4:1a:7f:a0:ef:62:30:96:41:06:
d6:8e:68:21:77:d6:f4:21:b8:a0:d4:7f:73:71:9c:8b:c3:8e:
a4:da:33:08:b4:2c:4a:13:88:2b:a5:67:c8:cd:5d:b7:42:89:
6a:cf:33:94:98:0b:34:14:e7:c1:c1:be:74:4b:a4:da:eb:63:
98:ad:bf:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:13:35 2026 by rpki-client