Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS39855.roa
File: AS39855.roa (raw, json)
Hash identifier: RXWUPV6j2RK/vNPXoxmlg4tZKFcDV5/uZ8oTUMD87us=
Subject key identifier: FF:8E:A3:19:4C:D6:3E:8F:DA:2F:0F:67:59:DE:E4:4B:B6:DE:BB:EC
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 3D9F1DE92725AE154EAE271FA5179609496DD6D4
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS39855.roa
Signing time: Wed 04 Mar 2026 08:30:27 +0000
ROA not before: Wed 04 Mar 2026 08:25:27 +0000
ROA not after: Wed 03 Mar 2027 08:30:27 +0000
asID: 39855
IP address blocks: 147.125.200.0/24 maxlen: 24
147.125.201.0/24 maxlen: 24
147.125.202.0/24 maxlen: 24
147.125.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 10:24:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:9f:1d:e9:27:25:ae:15:4e:ae:27:1f:a5:17:96:09:49:6d:d6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Mar 4 08:25:27 2026 GMT
Not After : Mar 3 08:30:27 2027 GMT
Subject: CN=FF8EA3194CD63E8FDA2F0F6759DEE44BB6DEBBEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:61:48:59:6b:21:2c:47:b9:98:6c:e8:3d:0b:
b9:2b:0c:dc:83:d6:3e:b9:2e:c1:cf:25:79:0e:b0:
18:58:69:cb:04:a3:a6:1d:47:64:81:7b:31:e9:34:
bf:9d:2f:e4:44:4f:3e:83:b6:3d:26:2a:2b:dd:6c:
29:bc:62:ed:18:7d:c3:38:4d:7e:37:8a:2a:b3:43:
16:c8:e6:2e:b4:44:0d:8e:48:48:37:e0:fc:12:d9:
d5:ea:7b:6a:f4:4d:b5:f2:ca:c1:b1:d8:b6:b9:cf:
f4:f8:fe:2f:d1:c1:dd:65:6c:1e:74:d1:31:c4:b9:
4c:dd:3f:d9:a3:90:c4:31:71:41:e4:49:de:92:42:
aa:f1:6e:54:8d:17:5d:d1:1d:6f:6f:de:4e:8d:1f:
87:f4:7d:5f:49:25:3d:6d:95:b4:7f:d0:db:21:b4:
71:47:f3:2c:66:fd:f1:5d:dc:20:48:45:b3:93:8e:
c8:31:44:c6:a4:99:88:2e:16:17:6b:69:fa:09:fd:
78:18:e4:65:5b:25:a3:1d:b4:6f:ca:07:3f:56:d8:
a2:7d:24:16:e8:40:be:3d:ff:df:fd:7c:05:ea:c0:
7a:67:d1:5b:ae:a2:99:76:7c:07:6f:6e:9b:da:c9:
d7:04:c8:4a:6a:d8:ce:d1:04:55:a2:06:0f:38:86:
b7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8E:A3:19:4C:D6:3E:8F:DA:2F:0F:67:59:DE:E4:4B:B6:DE:BB:EC
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS39855.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.200.0/22
Signature Algorithm: sha256WithRSAEncryption
46:8f:e7:e7:80:67:9e:f8:9d:62:75:a7:94:a9:95:d3:0f:84:
4e:bc:a8:3b:95:fe:00:5d:21:35:fa:a2:69:8d:01:b3:a3:04:
6f:ec:c9:d2:68:77:9d:c4:ad:36:c0:88:a2:2b:46:fe:5d:fe:
c4:b4:14:e6:75:e9:14:0e:3a:93:eb:c8:2b:a6:fa:b5:4b:47:
93:72:14:ad:63:51:79:7b:94:e3:82:7d:28:50:ed:0d:99:bb:
ab:04:f3:9c:6f:f4:db:23:e2:5a:fd:96:d6:45:7d:ad:ef:1b:
ff:cc:04:b4:63:4e:97:cc:e2:2b:b6:ba:66:ca:e2:53:a7:9a:
1c:ec:8a:56:68:1b:33:19:b1:aa:71:f2:73:86:aa:1e:cb:1e:
72:e6:91:ea:90:56:c9:cc:25:90:96:ff:e7:bd:37:18:d2:b6:
0b:68:55:1d:17:27:a0:9b:3c:43:a7:4a:49:d3:48:41:24:ab:
68:5f:49:bc:ed:13:61:91:64:f1:12:86:3b:14:ff:bd:e0:a1:
84:c0:d8:ee:f1:dd:ad:f4:02:4e:ad:0c:da:fd:b9:58:74:20:
08:f7:67:ac:53:a2:15:cc:a6:ee:f5:a3:8f:a7:eb:7b:56:03:
6c:66:6c:c8:7c:4f:ef:92:2c:c6:e9:55:73:85:a8:fe:de:e3:
35:33:62:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 02:25:13 2026 by rpki-client