Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133362e302f32312d3234203d3e20383334.roa
File: 3134372e3132352e3133362e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: ya4GEN1Ec940LGhXconV02ZQAeaR41s0QeNPp+2Zt9o=
Subject key identifier: 11:5F:8F:C2:A2:1C:78:0A:7D:1F:30:E0:3D:76:87:74:C9:25:F1:15
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 61BFF80CE34A1729974A3E8082FC942D5DFC5B4B
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133362e302f32312d3234203d3e20383334.roa
Signing time: Tue 21 Jul 2026 07:33:20 +0000
ROA not before: Tue 21 Jul 2026 07:28:20 +0000
ROA not after: Tue 20 Jul 2027 07:33:20 +0000
asID: 834
IP address blocks: 147.125.136.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:bf:f8:0c:e3:4a:17:29:97:4a:3e:80:82:fc:94:2d:5d:fc:5b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jul 21 07:28:20 2026 GMT
Not After : Jul 20 07:33:20 2027 GMT
Subject: CN=115F8FC2A21C780A7D1F30E03D768774C925F115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1e:fe:5c:75:87:28:63:67:1f:43:ac:51:e6:
3f:96:fb:aa:1d:d5:bf:6e:cc:b4:8d:07:b2:79:a4:
b7:d1:f6:08:2b:4e:85:48:43:50:dd:de:22:2d:b2:
c0:9d:0e:77:05:fb:4e:5f:75:9e:73:d7:6d:c3:b6:
94:66:42:da:cf:30:b7:8f:b9:78:fe:45:5c:ce:15:
ec:13:63:3e:ba:ba:99:a1:5e:25:69:05:e0:07:6d:
b1:68:a8:de:0f:8b:ba:d9:bb:4e:63:55:10:68:71:
bb:12:f6:03:df:01:d6:78:4d:64:c7:96:d9:be:3e:
06:f1:a2:0b:c6:50:c7:1e:79:9c:91:b7:d4:0a:29:
53:0e:f9:e7:b6:7f:14:e1:b5:f0:94:1c:08:71:ec:
e6:37:7d:7e:02:37:7f:c5:bf:c6:32:72:11:2f:e7:
57:1c:66:a3:3e:47:fd:34:a1:26:5e:a8:c1:dd:86:
cd:4f:4c:f1:5e:74:8d:bd:bd:49:cf:0c:2f:d6:33:
ce:2a:4b:b4:8c:15:d9:52:d0:56:69:ea:30:a6:f2:
14:70:10:96:e8:f4:20:4d:4d:86:57:46:2d:42:ee:
27:88:a9:1a:9d:2b:e3:28:75:9c:16:a5:cf:ec:4b:
27:20:c4:50:79:81:6b:f3:4c:9d:fa:80:68:6c:40:
48:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5F:8F:C2:A2:1C:78:0A:7D:1F:30:E0:3D:76:87:74:C9:25:F1:15
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133362e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.136.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:58:47:2c:a9:1d:61:bc:96:90:6b:4a:8e:98:aa:3e:b1:66:
36:00:e7:d3:8b:51:6e:59:aa:77:68:ef:47:23:c7:b1:76:8c:
a4:49:f1:70:20:c8:ef:ca:cf:e8:89:e0:80:62:71:4b:32:ea:
c9:06:10:03:83:a8:a8:cd:1b:4a:e1:32:1e:1c:73:5c:97:1c:
00:8c:c1:f2:00:ae:9c:31:29:87:e0:92:b9:de:4c:79:4d:f7:
1e:39:8f:4b:03:69:6c:fa:1b:4e:11:37:69:44:26:41:2c:3c:
43:32:67:f4:3b:81:55:7f:8c:e3:1e:3b:3d:ea:f1:15:e6:15:
92:93:5e:1b:63:93:32:3f:c5:88:37:5b:07:03:57:88:3e:3f:
0d:f4:c9:df:42:6f:eb:d6:3c:b1:47:d5:7d:0c:2e:25:d3:21:
17:ad:96:06:93:b8:66:8a:8e:b6:3b:c7:9f:15:d2:27:2e:7e:
00:7a:65:3d:30:d0:ed:71:ba:ce:ee:10:1e:a7:0c:5b:ed:9f:
b7:6c:9c:b4:d4:08:1e:d0:0a:8d:bc:5b:28:f9:0c:da:6e:bd:
8b:1e:d5:57:6e:94:ba:8c:2b:6d:58:59:10:b4:a6:c6:62:25:
6e:75:e4:e9:e3:4a:c9:cc:ad:29:8a:6b:4e:23:b7:f9:a0:f1:
25:94:d2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:08:07 2026 by rpki-client