Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3233302e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3233302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: KBpYfrRn+B4ZvMXyxojHjka/VTJxt3eX2+gM9oWFQQA=
Subject key identifier: 41:05:D3:61:03:82:5E:95:5A:40:3A:6B:96:B2:38:0E:F8:AD:35:1E
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 5F752C8CC008B1589C84B27608727E460E607EA5
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3233302e302f32342d3234203d3e20383334.roa
Signing time: Thu 22 Oct 2026 12:03:09 +0000
ROA not before: Thu 22 Oct 2026 11:58:09 +0000
ROA not after: Thu 21 Oct 2027 12:03:09 +0000
asID: 834
IP address blocks: 147.125.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:75:2c:8c:c0:08:b1:58:9c:84:b2:76:08:72:7e:46:0e:60:7e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Oct 22 11:58:09 2026 GMT
Not After : Oct 21 12:03:09 2027 GMT
Subject: CN=4105D36103825E955A403A6B96B2380EF8AD351E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:94:ef:d8:89:d9:6a:c3:e2:14:b4:ac:4a:b6:
3c:54:40:2c:21:ef:06:60:bc:a2:49:22:16:3b:30:
e8:dd:68:04:6f:66:21:91:64:12:ac:7e:24:1b:4d:
9e:17:63:2d:17:ba:37:f3:55:25:2f:03:ce:18:1f:
d2:ad:69:12:cc:45:45:42:94:c5:55:e0:fb:fc:3a:
a4:9f:c7:e8:77:8a:a0:a0:bf:70:71:c3:94:ee:86:
67:1f:df:89:e8:10:e7:9f:2c:09:4f:3c:a4:96:31:
3f:cd:e0:0d:a4:01:51:87:a3:dd:b5:9a:7d:f3:a7:
94:68:b0:44:88:1d:68:63:b7:be:b4:a6:02:ab:ac:
03:42:32:26:76:82:bb:37:b7:64:62:9a:1b:7f:50:
74:d5:6e:a0:a0:97:0a:86:da:32:35:05:08:aa:fa:
63:42:36:13:5a:0b:15:25:47:ff:b7:1e:0e:19:a6:
3c:7f:81:e5:6c:a7:f8:1d:a0:35:88:d3:20:d3:ea:
fa:93:ee:a6:b2:ec:2e:8e:9e:aa:87:4a:b5:02:cf:
18:ee:36:1c:90:66:4d:85:0c:dc:12:44:37:4c:d1:
b5:b6:16:90:e9:b8:cb:28:dd:b1:81:3f:fc:b3:a9:
46:04:61:6b:37:cf:a2:08:0e:6c:11:6f:49:bd:41:
c6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:05:D3:61:03:82:5E:95:5A:40:3A:6B:96:B2:38:0E:F8:AD:35:1E
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3233302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.230.0/24
Signature Algorithm: sha256WithRSAEncryption
78:80:0a:a1:f3:3a:78:8c:97:88:c3:45:53:a9:f8:55:65:92:
cd:f5:ed:87:fe:51:77:9d:cd:17:83:e0:e4:ce:90:12:ec:4b:
b0:a9:55:26:fb:e4:f6:4d:f4:f2:aa:e8:10:f6:2f:3c:dc:37:
bd:51:bf:33:4d:e9:54:cd:cd:9c:e4:50:f5:1a:8c:e1:36:85:
07:c4:93:a4:43:e1:5b:35:cb:08:d1:31:31:f9:10:06:39:91:
4f:0d:d4:9e:6a:53:86:3c:32:d5:5b:ec:18:4e:f7:24:bf:e9:
9f:21:ec:04:8d:7f:f0:12:13:a9:9b:03:33:69:3c:b8:30:ce:
88:dd:54:8d:07:f6:2a:0d:ab:d3:62:53:4a:c7:f9:17:33:1f:
3a:ca:3f:f0:89:8b:27:a5:58:58:42:b6:03:d1:7f:7a:f5:8f:
b6:db:98:ce:22:41:0e:1e:a6:7b:ba:cd:9a:44:ec:fd:e5:b3:
66:7f:05:6b:a1:fb:2b:18:c3:12:72:e5:e3:e8:c4:00:d5:cb:
f0:a0:3d:bb:05:a4:bb:ba:28:37:d4:2e:fa:2a:de:34:6e:74:
bc:fe:5d:b1:9a:3f:2d:58:c6:ad:aa:e7:a7:bb:e1:bc:a0:3b:
7e:82:fd:41:ce:27:17:ed:40:5b:0b:5f:b9:1e:9a:ca:fe:1a:
a7:7b:33:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:46:32 2026 by rpki-client