Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3233312e302f32342d3234203d3e20323138373937.roa
File: 3134372e3132352e3233312e302f32342d3234203d3e20323138373937.roa (raw, json)
Hash identifier: QAKmTMz5WwHf/R3ABXZKLNdAP9PIRPC8fQh7jq+RjDc=
Subject key identifier: 49:70:59:B3:84:3D:91:5B:5A:20:73:46:40:C7:EE:03:E8:5D:A5:42
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 18C7B3B793C869A0BF66F1C5A9510764F144F686
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3233312e302f32342d3234203d3e20323138373937.roa
Signing time: Thu 22 Oct 2026 12:03:00 +0000
ROA not before: Thu 22 Oct 2026 11:58:00 +0000
ROA not after: Thu 21 Oct 2027 12:03:00 +0000
asID: 218797
IP address blocks: 147.125.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:29:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:c7:b3:b7:93:c8:69:a0:bf:66:f1:c5:a9:51:07:64:f1:44:f6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Oct 22 11:58:00 2026 GMT
Not After : Oct 21 12:03:00 2027 GMT
Subject: CN=497059B3843D915B5A20734640C7EE03E85DA542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:bf:c3:13:0c:06:9c:6b:75:97:99:09:f8:
90:49:d1:0b:78:4d:b1:65:46:01:b9:a7:76:bb:e8:
e1:65:c5:9b:0d:39:44:f5:bc:9c:d2:8f:83:89:1f:
41:74:48:52:c5:61:57:b5:3f:a1:e0:7a:e0:85:87:
f1:73:c3:c3:1c:bf:2e:19:88:d7:53:f9:a2:f6:d5:
93:89:d9:69:85:60:60:ba:39:a3:dc:b5:89:e0:80:
04:34:40:bf:87:6c:9d:d2:c0:24:a5:bf:66:ba:3d:
0a:7c:ca:b8:6b:90:14:53:e9:a7:42:ba:7a:0d:ba:
b2:ed:c9:8c:98:bc:9d:4f:4a:4e:20:5a:97:b7:71:
77:a5:57:40:38:b4:b5:61:8f:ca:37:f7:58:84:f8:
f4:34:17:72:17:24:e2:47:ea:2f:f8:b5:1c:16:27:
76:e8:d8:32:11:2b:5e:1b:7a:37:28:d5:09:ad:a1:
b4:bf:4b:0c:53:f8:c7:c3:8a:be:00:be:49:a5:d4:
df:ec:61:ac:b5:a3:32:6a:d9:0d:6f:e4:f8:11:c9:
ca:05:7a:fc:57:56:17:bc:36:44:a8:3a:85:07:f4:
96:fa:c1:12:6a:ca:a9:21:f2:e8:8d:4d:37:b9:66:
b3:e8:0c:34:6d:c5:78:b4:5a:e0:44:49:f6:18:e6:
d5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:70:59:B3:84:3D:91:5B:5A:20:73:46:40:C7:EE:03:E8:5D:A5:42
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3233312e302f32342d3234203d3e20323138373937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.231.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:63:44:c7:35:de:67:5a:35:fd:1b:7a:49:c9:f3:00:cf:2c:
18:a5:38:80:81:20:39:f4:52:bd:14:2e:08:64:d4:31:1d:ae:
f1:a8:90:39:df:6e:ba:b6:e7:3f:2a:15:56:a8:0c:d4:b9:08:
08:14:6e:12:a1:b8:47:ea:5c:22:42:7d:ad:d0:a6:16:64:e7:
81:85:bf:03:1c:4b:df:e0:68:6e:b8:0d:55:b6:3c:a8:17:3b:
bc:f8:5a:d9:ba:07:a9:6a:34:5e:68:b4:52:18:bf:29:9f:75:
38:b7:46:d1:5b:39:10:ef:97:eb:f8:2e:cf:b6:02:4a:cd:b9:
5a:e1:99:e3:76:46:1a:f6:1a:24:38:e7:ca:f4:92:18:5e:55:
95:86:8d:58:0a:3e:e3:52:87:04:5f:da:ba:f2:1d:45:7a:23:
79:04:74:d1:c1:a8:70:a3:b9:58:74:9c:56:57:a8:19:42:af:
12:15:e3:32:e8:ad:dc:6f:b9:e0:73:bd:cc:a8:0d:19:fc:46:
3a:80:21:a4:17:1f:13:13:4a:4a:0b:88:de:2f:64:79:cc:1c:
70:d8:6c:d8:76:72:d7:92:29:96:32:df:8a:6a:a0:1f:a7:ef:
c1:c3:97:6b:b1:86:77:fa:59:32:09:25:f4:a3:be:ac:d0:c0:
b2:ae:86:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:38:24 2026 by rpki-client