Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133382e302f32342d3234203d3e20313938323530.roa
File: 3134372e3132352e3133382e302f32342d3234203d3e20313938323530.roa (raw, json)
Hash identifier: HMdIVAQyK5ywVhjBmTKQS+ZT5IrG17jSzOjWN28fwhQ=
Subject key identifier: 51:68:E2:04:78:C9:D6:E2:B5:D2:70:75:A4:55:AD:C2:51:5A:E1:09
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 74F4A36D69AEA4078A26BA43E6A8CA88EC24B4A5
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133382e302f32342d3234203d3e20313938323530.roa
Signing time: Tue 21 Apr 2026 09:09:12 +0000
ROA not before: Tue 21 Apr 2026 09:04:12 +0000
ROA not after: Tue 20 Apr 2027 09:09:12 +0000
asID: 198250
IP address blocks: 147.125.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:f4:a3:6d:69:ae:a4:07:8a:26:ba:43:e6:a8:ca:88:ec:24:b4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Apr 21 09:04:12 2026 GMT
Not After : Apr 20 09:09:12 2027 GMT
Subject: CN=5168E20478C9D6E2B5D27075A455ADC2515AE109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1b:b9:bc:6f:a7:d6:6d:2b:1f:2b:f0:10:4e:
fd:8b:23:26:43:cd:06:a9:f4:ec:af:f6:e2:8f:40:
95:73:c9:b2:b4:8b:1f:5c:7d:bf:d2:7b:f3:d1:8a:
dd:8f:b0:4a:7a:bd:31:07:98:3b:9e:bf:a0:35:de:
cd:7d:12:d0:1a:bd:6f:b7:02:69:37:b1:75:9a:7c:
e2:b2:55:17:0c:5d:46:66:d2:a6:cb:77:68:f0:74:
4b:16:f2:1a:8f:7b:c6:9c:75:74:1b:61:8e:0a:72:
3a:c8:d2:38:61:45:74:5a:f2:24:de:02:e5:a3:65:
c5:53:dd:3d:6a:2f:98:94:62:a1:73:90:32:e4:85:
58:09:03:11:ef:28:ed:6c:71:00:48:de:e3:d7:c6:
2b:52:71:41:a9:73:68:80:45:74:fa:2a:ab:45:2a:
c2:4a:20:c2:a7:42:3c:fc:21:0b:d0:ae:e3:79:8f:
bc:99:62:50:31:72:6e:72:ae:0c:5f:54:7d:8a:bc:
b9:0c:b5:a1:a0:69:07:3d:5b:c9:2e:b8:3b:79:2d:
ec:b7:f2:e2:b2:01:b0:40:c1:f0:15:32:44:89:e8:
3a:0d:a3:c5:89:42:bf:4b:49:2d:44:04:20:6c:8f:
b1:3e:e3:9d:1f:00:19:5a:ff:36:8a:c3:78:4b:aa:
83:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:68:E2:04:78:C9:D6:E2:B5:D2:70:75:A4:55:AD:C2:51:5A:E1:09
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133382e302f32342d3234203d3e20313938323530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.138.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:64:31:ab:b9:b3:cd:cf:51:53:5c:e1:cf:41:01:0d:8a:f7:
f9:b1:42:8f:27:c9:9e:a7:48:1b:99:71:e0:96:5c:97:67:83:
c0:51:36:c7:33:22:86:2c:a6:01:78:20:ac:5c:06:4e:56:a9:
bc:c5:28:af:f3:3d:9a:f0:5e:e1:db:e7:da:81:82:6b:93:c0:
75:4d:e8:9c:95:44:3c:93:b8:33:07:28:46:40:96:ef:19:f1:
ff:2f:c9:27:52:72:53:60:e8:b4:62:9d:b9:45:97:b4:f0:8c:
53:5e:e9:65:b6:61:bf:31:38:9b:d2:d8:3a:f8:b0:01:2e:96:
5c:93:f4:be:62:db:83:ca:0d:70:d4:99:1c:e7:09:c8:b9:bd:
e4:e0:6e:40:44:2a:ea:16:4d:c6:e9:2c:e0:91:3f:7e:fe:1c:
b6:b5:79:cb:f9:44:b0:f0:25:9d:fc:df:33:24:a6:42:23:94:
a8:c0:da:2f:62:7a:50:58:2b:2d:39:61:dd:bb:41:c2:a7:0b:
b4:03:9f:7a:6a:71:a1:10:c2:a3:08:65:c7:49:5c:10:96:4c:
8b:fa:1f:ca:27:19:0b:0c:f6:37:8a:84:44:ce:61:ce:1b:f6:
45:92:26:90:44:08:16:ad:a3:c6:fb:f0:18:0e:d3:b9:53:f6:
4e:e3:41:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:13:42 2026 by rpki-client