Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133322e302f32332d3234203d3e20383334.roa
File: 3134372e3132352e3133322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: HBUrG9myiVH6QP6X44XDYkdXHmrNUlJgwrdoe9Is3/A=
Subject key identifier: 6B:D6:D6:C3:A5:75:D1:D4:D7:21:0E:BD:9D:2E:87:A9:52:1A:94:C4
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 4C20542A3965F1AE6F5AB9BA0E04F86ACF5E0582
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133322e302f32332d3234203d3e20383334.roa
Signing time: Tue 21 Jul 2026 07:42:35 +0000
ROA not before: Tue 21 Jul 2026 07:37:35 +0000
ROA not after: Tue 20 Jul 2027 07:42:35 +0000
asID: 834
IP address blocks: 147.125.132.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:20:54:2a:39:65:f1:ae:6f:5a:b9:ba:0e:04:f8:6a:cf:5e:05:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jul 21 07:37:35 2026 GMT
Not After : Jul 20 07:42:35 2027 GMT
Subject: CN=6BD6D6C3A575D1D4D7210EBD9D2E87A9521A94C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:56:72:71:53:87:96:11:a9:48:b9:c7:2b:01:
58:5e:39:0c:d1:e8:27:ff:63:b2:25:8c:7e:d7:9b:
ec:07:b4:2f:69:0c:d4:57:2d:46:17:b1:d5:c8:a9:
06:2c:4b:67:20:c2:e5:ef:e8:6d:d1:b6:ef:0d:36:
79:a8:0d:8f:f8:da:9f:3f:9d:2d:e0:ec:8a:47:15:
60:30:74:05:79:ba:14:28:37:cd:88:99:10:4f:05:
09:9f:f6:54:54:1f:58:43:8f:2e:19:01:ba:0f:84:
4e:ce:fb:e6:a8:b1:c1:52:ca:b0:70:8a:27:b8:b8:
f5:64:2b:f9:97:ef:56:6e:b8:43:1d:50:2f:64:bc:
e2:37:fc:fa:ce:f2:9b:5e:c6:f5:90:53:4d:68:bc:
97:ea:00:fd:87:e6:c7:5e:27:c0:ac:97:42:d3:65:
1c:1b:d5:79:4f:33:b0:2a:e8:8b:73:23:e8:0c:bc:
91:70:57:04:f0:b4:ac:45:d9:40:76:19:e9:66:b1:
0d:21:74:f3:6f:f2:57:23:44:42:c7:99:c4:e7:ad:
38:6c:7a:b6:6f:90:6c:1c:70:dd:f3:5a:94:97:54:
69:57:a7:c1:1e:16:36:af:25:f4:4c:2e:f3:e6:cb:
e3:3d:0f:fe:74:df:a9:e4:55:29:37:a4:c4:69:56:
ff:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D6:D6:C3:A5:75:D1:D4:D7:21:0E:BD:9D:2E:87:A9:52:1A:94:C4
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.132.0/23
Signature Algorithm: sha256WithRSAEncryption
39:49:cd:50:67:33:c4:9c:11:08:f4:0a:cd:d8:a5:e1:7f:2c:
1f:d0:46:75:2c:a7:c4:2b:95:c2:7f:d9:9f:a7:56:1e:3b:0a:
79:f5:94:07:2e:bf:a2:e6:31:5a:3a:26:06:14:18:ae:94:bd:
90:da:f6:ab:74:de:8d:49:61:87:15:77:2c:cc:ab:62:7d:86:
87:aa:e5:eb:41:ae:02:1f:7b:d7:08:52:d5:18:b2:b7:d1:45:
35:92:df:cb:9a:86:33:b2:30:46:97:62:4e:f8:4b:b2:c7:29:
7f:a9:32:bc:2f:a4:cd:fd:af:cc:41:d5:69:90:41:fa:d9:e2:
75:09:82:ff:eb:02:6b:96:aa:94:7e:a3:bc:36:71:c8:ae:26:
7d:37:d3:69:4d:93:2c:c5:a6:29:3e:20:48:77:88:e7:37:24:
4c:3f:97:75:a8:24:5c:a0:a1:0f:48:a3:ed:b6:19:7f:4b:64:
c5:50:7c:20:82:03:6b:84:92:97:9c:2c:52:5d:7e:d3:17:77:
99:49:94:88:25:de:94:3b:ab:81:77:17:82:cd:47:df:bb:e7:
49:44:c4:61:2e:fd:b8:65:81:c4:d8:62:12:6c:a4:53:f9:b0:
d0:fc:63:53:e2:84:4b:62:b4:4a:b1:1c:73:c7:72:16:48:28:
c9:17:b3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:28:48 2026 by rpki-client