Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3132392e302f32342d3234203d3e20313533363731.roa
File: 3134372e3132352e3132392e302f32342d3234203d3e20313533363731.roa (raw, json)
Hash identifier: TVv80q5DrJW0PvMtxpaJThTPQ3sf2dDYTgur7CdolPM=
Subject key identifier: 94:BA:E9:23:98:B1:2E:82:A1:D2:8D:C7:5A:D2:E0:A5:F3:BA:B2:6B
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 6145AEAF5042DBCB47EBAADBDED2251B8790C5F4
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3132392e302f32342d3234203d3e20313533363731.roa
Signing time: Wed 06 May 2026 06:02:39 +0000
ROA not before: Wed 06 May 2026 05:57:39 +0000
ROA not after: Wed 05 May 2027 06:02:39 +0000
asID: 153671
IP address blocks: 147.125.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:45:ae:af:50:42:db:cb:47:eb:aa:db:de:d2:25:1b:87:90:c5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: May 6 05:57:39 2026 GMT
Not After : May 5 06:02:39 2027 GMT
Subject: CN=94BAE92398B12E82A1D28DC75AD2E0A5F3BAB26B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:13:a5:f2:29:d4:1d:e3:3b:a9:78:91:aa:d7:
fa:5b:8f:2e:3f:33:50:2b:62:7a:97:f6:47:d5:2b:
7e:ef:cd:2b:92:d4:e2:a9:7d:05:35:2e:2b:74:3a:
26:9e:21:b4:c0:81:c5:cf:ee:fb:d6:14:ed:b3:2d:
ce:2c:5b:5d:9c:a2:0f:ff:e5:ec:86:cc:a9:b4:f2:
dc:57:f5:66:6a:f0:c5:54:96:a9:52:53:f1:13:da:
6b:2d:bc:26:72:56:06:dc:c6:a8:ac:b7:56:2a:bc:
d5:a6:e2:d6:c0:c2:57:d6:79:9f:42:3c:fd:31:89:
a5:f0:17:2e:79:fd:13:ca:87:76:fb:80:7d:07:65:
cd:44:36:24:d2:01:58:9a:e6:66:78:a2:64:67:62:
69:11:87:21:f7:3a:d7:0c:be:bd:2a:41:c3:94:24:
ed:14:ac:cb:d7:3e:4a:c6:d4:e9:b3:7f:d6:d4:77:
fa:9d:60:b9:6c:06:8a:2b:9f:1a:ab:24:f2:9e:b9:
96:a1:ca:f5:af:ee:2a:27:a5:a0:ee:ea:bb:a5:11:
57:c9:55:ce:11:38:91:f9:a1:ef:5d:5d:f2:86:3c:
ab:46:d3:af:01:26:d1:f6:c8:b1:13:64:a3:bd:70:
33:e4:22:1c:f6:a7:56:f7:95:d4:d9:5c:3d:9f:62:
e8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BA:E9:23:98:B1:2E:82:A1:D2:8D:C7:5A:D2:E0:A5:F3:BA:B2:6B
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3132392e302f32342d3234203d3e20313533363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.129.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:17:99:16:a6:ff:f7:a6:47:e0:18:05:56:bc:c6:e6:16:4a:
3b:6b:32:c2:3a:a6:00:a6:9f:33:b4:7c:fe:b7:1c:96:39:0c:
aa:e6:12:5e:be:6f:1c:cd:13:a3:e2:3a:16:39:13:b1:9b:b8:
03:8a:ad:e9:09:30:a9:6b:c7:73:fe:17:96:d7:31:d4:78:3c:
e1:6d:f8:44:d3:0c:97:0c:cc:02:3a:0d:de:21:c2:0b:f5:7a:
60:fa:f3:d8:8d:d2:75:19:25:08:70:7a:73:00:84:99:ac:f1:
fa:61:83:e7:35:ed:48:1d:5a:7c:87:cd:28:c3:ba:f8:aa:d7:
03:b4:96:19:3c:2f:1e:70:2b:b9:d2:fd:30:4a:ed:a3:cf:6e:
94:63:f9:06:88:f5:a2:a9:e3:d0:68:d3:ec:d9:a4:c3:b6:d1:
c2:d6:37:ba:ad:e6:99:95:4d:f2:c0:c2:1f:0a:4c:d6:96:72:
39:3a:7f:72:3d:29:79:cc:3a:d3:7b:78:f7:31:38:7a:5a:b2:
16:4b:2b:10:f5:d5:2b:5a:aa:65:f3:fa:4c:b4:1f:18:5c:e6:
f9:18:db:28:85:cc:0a:3b:83:1a:58:e8:43:73:a4:32:8a:f0:
ff:e2:46:a8:1b:58:c4:9a:3e:65:db:98:4a:f2:ce:b5:80:29:
0c:c2:83:94
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUYUWur1BC28tH66rb3tIlG4eQxfQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNjA1MDYwNTU3MzlaFw0yNzA1MDUwNjAyMzlaMDMxMTAvBgNV
BAMTKDk0QkFFOTIzOThCMTJFODJBMUQyOERDNzVBRDJFMEE1RjNCQUIyNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqE6XyKdQd4zupeJGq1/pbjy4/
M1ArYnqX9kfVK37vzSuS1OKpfQU1Lit0OiaeIbTAgcXP7vvWFO2zLc4sW12cog//
5eyGzKm08txX9WZq8MVUlqlSU/ET2mstvCZyVgbcxqist1YqvNWm4tbAwlfWeZ9C
PP0xiaXwFy55/RPKh3b7gH0HZc1ENiTSAVia5mZ4omRnYmkRhyH3OtcMvr0qQcOU
JO0UrMvXPkrG1Omzf9bUd/qdYLlsBoornxqrJPKeuZahyvWv7ionpaDu6rulEVfJ
Vc4ROJH5oe9dXfKGPKtG068BJtH2yLETZKO9cDPkIhz2p1b3ldTZXD2fYuiHAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUlLrpI5ixLoKh0o3HWtLgpfO6smswHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx
MzIzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMzM2MzczMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAJN9gTANBgkqhkiG9w0BAQsFAAOCAQEAnheZFqb/96ZH4BgFVrzG5hZKO2sy
wjqmAKafM7R8/rccljkMquYSXr5vHM0To+I6FjkTsZu4A4qt6QkwqWvHc/4Xltcx
1Hg84W34RNMMlwzMAjoN3iHCC/V6YPrz2I3SdRklCHB6cwCEmazx+mGD5zXtSB1a
fIfNKMO6+KrXA7SWGTwvHnArudL9MErto89ulGP5Boj1oqnj0GjT7Nmkw7bRwtY3
uq3mmZVN8sDCHwpM1pZyOTp/cj0pecw603t49zE4elqyFksrEPXVK1qqZfP6TLQf
GFzm+RjbKIXMCjuDGljoQ3OkMorw/+JGqBtYxJo+ZduYSvLOtYApDMKDlA==
-----END CERTIFICATE-----
Generated at Wed May 13 11:47:32 2026 by rpki-client