Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235312e302f32342d3234203d3e2039333034.roa
File: 3134372e3132352e3235312e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: eN8J0V9HR3sRJGG99b3WNM56R5fCmFod76NL6j6umK0=
Subject key identifier: CB:F8:3A:C5:CF:52:57:79:7B:BD:74:B8:41:8F:8A:99:29:42:C6:9A
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 6AA9A94CD12DD1C4B915BF52C7B04A1876E54F1D
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235312e302f32342d3234203d3e2039333034.roa
Signing time: Tue 21 Apr 2026 09:09:12 +0000
ROA not before: Tue 21 Apr 2026 09:04:12 +0000
ROA not after: Tue 20 Apr 2027 09:09:12 +0000
asID: 9304
IP address blocks: 147.125.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:a9:a9:4c:d1:2d:d1:c4:b9:15:bf:52:c7:b0:4a:18:76:e5:4f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Apr 21 09:04:12 2026 GMT
Not After : Apr 20 09:09:12 2027 GMT
Subject: CN=CBF83AC5CF5257797BBD74B8418F8A992942C69A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d0:40:45:1c:90:e6:db:2b:c9:84:8b:2b:5e:
2f:b7:05:d2:d3:d5:ff:77:e0:d7:bf:07:3a:79:0b:
e1:63:fd:93:3c:3c:e1:02:2f:8d:9b:4c:1d:8c:f2:
42:3e:f3:f0:ab:c8:ed:d6:78:a5:d2:c9:1e:01:6d:
82:d2:08:66:8a:f9:ac:99:65:f6:0d:77:a2:4a:64:
a1:62:6a:78:fd:0f:1c:8f:fe:c5:25:07:86:85:87:
7c:a9:c0:43:e6:3e:7b:e1:36:d4:8c:62:da:e3:87:
c6:04:6b:1b:ce:d0:3f:be:e8:e5:82:83:93:f0:4d:
2c:ea:8e:ca:e0:8a:f7:90:6c:5d:95:0b:88:fa:b6:
4a:df:e6:7c:89:8f:db:37:92:5f:50:82:11:94:6b:
24:e0:8e:11:a0:66:a7:a7:7a:73:4d:b2:9a:1e:0a:
c6:05:86:d4:81:3e:5b:49:92:39:7c:42:85:ce:e9:
39:9f:fe:8e:32:0e:f7:56:2a:1d:ee:3e:7c:e9:f5:
20:dc:bf:a3:ec:db:e0:5e:87:66:2b:d6:8e:8e:2a:
94:7a:b6:4d:0e:6d:f3:5a:46:28:80:21:7e:a1:df:
fa:99:1a:52:ab:99:5d:c9:71:60:33:90:14:f1:63:
38:4b:3f:d3:aa:db:1b:88:4e:cf:71:7c:83:01:8c:
af:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F8:3A:C5:CF:52:57:79:7B:BD:74:B8:41:8F:8A:99:29:42:C6:9A
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235312e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.251.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:0f:8c:4e:28:b1:81:f9:84:de:b3:d3:36:9e:da:bc:6d:03:
ca:28:2b:bc:87:02:a1:63:c5:a6:43:3b:f3:f3:36:0a:a8:d0:
07:4d:8b:db:0a:6d:48:21:93:95:03:6f:a5:ac:15:b9:cb:78:
09:e4:ca:91:be:ae:b7:82:e8:a8:5c:74:27:df:39:e5:18:3e:
e4:25:b3:34:ac:93:98:12:a2:63:57:50:30:29:26:03:4c:69:
c5:f4:d8:03:2d:bf:d2:d4:b2:11:c2:79:4c:7b:b0:8a:ba:50:
bd:55:dc:80:d3:01:fc:a3:4a:6c:a4:45:f6:ab:64:99:db:ea:
5b:09:bb:d6:86:8a:82:9c:37:e8:b5:cf:37:ac:8f:e5:82:ae:
d3:b7:b5:95:34:8f:71:36:6e:70:17:30:7a:01:93:ba:4a:ea:
eb:d0:bb:2f:20:a3:58:c6:34:ad:7c:d1:7e:4d:63:fc:29:1f:
92:9b:6f:0c:7a:81:fb:c4:5f:d4:fd:a5:72:dd:f9:f9:df:a3:
2a:df:5e:fb:cb:6b:2e:19:04:86:5c:0f:30:93:82:42:5a:11:
b7:d4:a0:1f:aa:91:29:25:3f:f5:1f:58:1e:e3:85:54:27:8e:
83:12:ea:af:d5:02:fb:64:51:a7:b1:0c:5a:53:32:0a:78:ed:
6a:59:0f:ba
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUaqmpTNEt0cS5Fb9Sx7BKGHblTx0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNjA0MjEwOTA0MTJaFw0yNzA0MjAwOTA5MTJaMDMxMTAvBgNV
BAMTKENCRjgzQUM1Q0Y1MjU3Nzk3QkJENzRCODQxOEY4QTk5Mjk0MkM2OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV0EBFHJDm2yvJhIsrXi+3BdLT
1f934Ne/Bzp5C+Fj/ZM8POECL42bTB2M8kI+8/CryO3WeKXSyR4BbYLSCGaK+ayZ
ZfYNd6JKZKFianj9DxyP/sUlB4aFh3ypwEPmPnvhNtSMYtrjh8YEaxvO0D++6OWC
g5PwTSzqjsrgiveQbF2VC4j6tkrf5nyJj9s3kl9QghGUayTgjhGgZqenenNNspoe
CsYFhtSBPltJkjl8QoXO6Tmf/o4yDvdWKh3uPnzp9SDcv6Ps2+Beh2Yr1o6OKpR6
tk0ObfNaRiiAIX6h3/qZGlKrmV3JcWAzkBTxYzhLP9Oq2xuITs9xfIMBjK9BAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUy/g6xc9SV3l7vXS4QY+KmSlCxpowHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy
MzUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
k337MA0GCSqGSIb3DQEBCwUAA4IBAQCkD4xOKLGB+YTes9M2ntq8bQPKKCu8hwKh
Y8WmQzvz8zYKqNAHTYvbCm1IIZOVA2+lrBW5y3gJ5MqRvq63guioXHQn3znlGD7k
JbM0rJOYEqJjV1AwKSYDTGnF9NgDLb/S1LIRwnlMe7CKulC9VdyA0wH8o0pspEX2
q2SZ2+pbCbvWhoqCnDfotc83rI/lgq7Tt7WVNI9xNm5wFzB6AZO6Surr0LsvIKNY
xjStfNF+TWP8KR+Sm28MeoH7xF/U/aVy3fn536Mq3177y2suGQSGXA8wk4JCWhG3
1KAfqpEpJT/1H1ge44VUJ46DEuqv1QL7ZFGnsQxaUzIKeO1qWQ+6
-----END CERTIFICATE-----
Generated at Wed May 13 09:41:07 2026 by rpki-client