Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232392e302f32342d3234203d3e20323138373937.roa
File: 3134372e3132352e3232392e302f32342d3234203d3e20323138373937.roa (raw, json)
Hash identifier: GokSCl9hXQWZOTzx+9qPkJzimKxIKH5uwC5CQlHs8+o=
Subject key identifier: 75:13:20:74:79:DA:6B:45:0E:59:2D:26:F8:16:D4:4A:B2:03:31:20
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 2599DA7602825E77DBCCE02C2096DBCD2FDB2DBA
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232392e302f32342d3234203d3e20323138373937.roa
Signing time: Thu 22 Oct 2026 12:02:59 +0000
ROA not before: Thu 22 Oct 2026 11:57:59 +0000
ROA not after: Thu 21 Oct 2027 12:02:59 +0000
asID: 218797
IP address blocks: 147.125.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 04:29:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:99:da:76:02:82:5e:77:db:cc:e0:2c:20:96:db:cd:2f:db:2d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Oct 22 11:57:59 2026 GMT
Not After : Oct 21 12:02:59 2027 GMT
Subject: CN=7513207479DA6B450E592D26F816D44AB2033120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fd:ea:e0:e6:f2:b1:97:2b:79:73:8c:47:57:
3c:c0:4f:5f:13:1c:e5:6a:b9:aa:7f:ab:cc:7c:df:
8d:60:e7:5a:12:9b:31:50:8e:bd:08:30:3e:50:25:
3e:cd:cb:00:56:64:31:97:91:49:83:3b:e5:f6:18:
94:dc:81:f0:47:75:01:cc:6d:47:ab:2e:73:80:57:
65:63:f5:d0:f3:12:27:04:96:c7:75:8b:02:20:5d:
41:65:31:12:b5:74:c3:25:ed:56:c4:19:00:5f:db:
33:f5:72:f6:4a:b2:ba:d6:d6:2a:28:d2:8e:72:9e:
17:50:a3:ed:1b:60:e2:1a:f6:42:d7:88:34:db:5b:
2c:ee:3b:14:1a:a2:90:62:cf:9d:9e:37:f6:32:46:
43:08:8a:ce:d9:f8:6a:fa:24:87:ea:c0:fa:ba:7b:
77:d1:e2:a3:ab:2c:cf:80:6b:97:3c:da:40:53:4f:
57:3a:11:0e:de:e1:d2:b6:ff:96:a7:9c:82:62:90:
48:d7:db:10:e5:55:64:b2:2e:76:a2:5b:ab:65:f3:
4b:d7:c5:12:12:73:09:ce:c0:2a:7f:9b:ae:10:e1:
93:80:65:7c:81:d2:e5:d3:0b:fe:3f:3d:40:f8:33:
24:ad:21:d8:d6:a6:a7:b0:cb:69:fc:4a:93:29:c8:
14:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:13:20:74:79:DA:6B:45:0E:59:2D:26:F8:16:D4:4A:B2:03:31:20
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232392e302f32342d3234203d3e20323138373937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.229.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:e3:1a:3f:7f:5f:29:19:32:10:72:be:ad:92:a7:11:f9:29:
72:70:53:c5:53:23:ef:84:df:87:9a:83:26:2b:55:5e:10:7c:
cf:26:eb:c9:f4:33:19:8b:91:94:40:43:6e:3d:da:1a:ba:30:
e1:7d:4c:1c:41:27:6f:0d:b1:bd:59:d2:15:54:37:58:af:4a:
47:be:9e:25:fd:cd:5b:bc:c6:d2:34:27:84:d9:5c:70:d9:50:
40:0e:99:78:d9:ff:74:a8:84:b4:9f:1a:08:fc:dd:a0:a7:bb:
57:14:d3:e0:4b:82:15:3f:55:6c:c7:6b:d7:57:93:04:da:06:
31:31:dd:0f:d9:b6:e4:14:e7:ed:8f:32:86:aa:e1:03:32:30:
0a:e2:d1:9b:53:e9:94:b4:38:e4:b8:65:e7:ef:29:95:d8:28:
42:34:e7:d7:c3:67:90:49:09:6a:ff:0b:51:85:ac:29:00:3d:
08:c0:8b:93:10:0c:dc:ab:80:81:3a:a1:08:bd:24:fa:86:81:
4a:d6:ae:76:b5:5d:da:50:cd:87:88:d6:06:5c:7f:bd:7a:ff:
bc:77:f1:0c:02:89:b1:db:69:ee:45:f0:31:77:e3:83:da:6d:
d8:98:5f:ca:d9:5e:66:cd:de:74:07:d0:db:b0:b0:74:25:74:
b5:cc:f2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:01:47 2026 by rpki-client