Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234332e302f32342d3234203d3e20313532313739.roa
File: 3134372e3132352e3234332e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: cRfUiQfzx0rG3ijTmzTBT9PxByBQq7Tc6bUHiZ7cLqM=
Subject key identifier: 4E:29:DA:0F:7E:4D:8A:99:EB:48:69:5F:B5:12:6F:F4:D9:C4:74:96
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 17C1998B93026EE476D6094AD63B62991BCA83DC
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234332e302f32342d3234203d3e20313532313739.roa
Signing time: Thu 17 Sep 2026 17:25:07 +0000
ROA not before: Thu 17 Sep 2026 17:20:07 +0000
ROA not after: Thu 16 Sep 2027 17:25:07 +0000
asID: 152179
IP address blocks: 147.125.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:53:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:c1:99:8b:93:02:6e:e4:76:d6:09:4a:d6:3b:62:99:1b:ca:83:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 17 17:20:07 2026 GMT
Not After : Sep 16 17:25:07 2027 GMT
Subject: CN=4E29DA0F7E4D8A99EB48695FB5126FF4D9C47496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b3:0b:4c:a2:5b:86:21:31:95:bb:27:5f:c2:
4c:e3:06:43:fa:6a:7d:ee:17:ff:aa:d7:18:ee:84:
c0:5f:1b:2a:18:d7:5f:f0:53:ec:01:7a:08:93:6d:
2b:f1:f3:59:c5:6f:2f:56:4f:cf:c0:e3:cd:b0:f3:
25:d7:70:17:cf:9a:dd:89:40:fc:ff:ba:12:30:57:
63:f5:b6:fc:30:a9:79:05:0f:7a:0e:a3:00:81:7a:
b7:6a:20:dc:70:29:a9:31:fb:d4:ab:fc:c7:50:6f:
50:09:62:c3:57:97:46:a9:1c:57:9c:04:6f:3d:55:
ea:19:58:bf:a2:63:eb:74:47:a8:7d:48:0f:81:a3:
95:b8:74:c6:58:15:49:0c:55:fd:ff:d7:2c:25:25:
9c:b7:27:48:d3:e2:0b:0b:80:e0:3a:f9:81:71:4e:
64:9d:c2:18:fc:8e:03:2a:0c:15:d0:be:98:ce:3b:
ba:a4:03:24:7d:2c:26:45:b6:85:42:30:b5:23:a3:
e0:df:e5:62:4e:04:ea:ce:9a:80:5a:eb:5f:ec:19:
2c:6c:47:52:b6:bd:ed:d2:3c:08:8d:1f:a0:b0:b3:
d3:4b:ee:3d:ed:73:e5:ba:45:3a:c3:fb:5e:f8:f1:
43:bd:06:04:3c:97:c4:8d:3f:eb:21:2b:eb:10:6d:
4e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:29:DA:0F:7E:4D:8A:99:EB:48:69:5F:B5:12:6F:F4:D9:C4:74:96
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234332e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.243.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:56:87:97:9c:3f:6f:71:50:b0:b6:85:2d:89:ba:ee:00:1f:
ae:39:39:51:40:14:6c:a1:84:9d:54:71:ea:f5:ae:06:86:f6:
56:72:36:c7:b9:c0:99:11:bc:3f:1a:38:35:91:54:b9:8d:1f:
cb:03:0e:bc:e7:fa:3d:e2:d5:ca:ef:4a:9b:cd:65:39:2c:45:
15:a3:d9:e1:55:1a:4b:4f:55:1b:4b:98:9b:13:80:d1:54:4c:
f6:17:6b:63:08:ef:db:4b:a5:7f:54:38:3a:e1:e6:89:cb:37:
27:64:ea:65:6c:c9:6c:4f:c8:89:8f:f0:31:cd:58:57:26:61:
7d:b0:b6:6f:14:c8:a9:d2:6c:d8:4e:f5:b1:a1:18:72:5a:95:
ad:10:c7:5e:c4:f2:36:e6:d5:30:ef:79:16:d7:d9:26:5e:18:
a6:42:7e:c4:ad:f9:fe:d3:9d:85:2b:87:0a:c9:85:da:5d:bd:
7a:ad:cd:72:30:b6:83:02:60:12:5a:98:61:70:a3:ee:8c:a6:
54:d6:86:2f:d4:35:11:a3:32:8e:70:93:fe:31:d1:67:37:3f:
95:ab:0a:4a:f0:1e:8c:7a:c2:b1:82:3c:d8:34:56:7f:fe:86:
ea:68:3e:bb:15:a3:96:7e:49:b8:5d:1f:06:b3:08:23:88:49:
f8:04:81:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:43:46 2026 by rpki-client