Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134392e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3134392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: FSVd6FrblFvH4AI6gppQpFhJIxOot6EDb1iZ3fib7wM=
Subject key identifier: B0:00:16:AF:11:11:75:E6:9F:D5:E5:C4:DB:9A:EE:5D:E0:18:20:47
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 06BA7D8609F793DDC547EB24F8C4B5759CBA4B99
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134392e302f32342d3234203d3e20383334.roa
Signing time: Tue 28 Apr 2026 07:18:10 +0000
ROA not before: Tue 28 Apr 2026 07:13:10 +0000
ROA not after: Tue 27 Apr 2027 07:18:10 +0000
asID: 834
IP address blocks: 147.125.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:ba:7d:86:09:f7:93:dd:c5:47:eb:24:f8:c4:b5:75:9c:ba:4b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Apr 28 07:13:10 2026 GMT
Not After : Apr 27 07:18:10 2027 GMT
Subject: CN=B00016AF111175E69FD5E5C4DB9AEE5DE0182047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c4:c2:43:a3:9b:c2:3c:49:fc:28:ad:2b:a1:
10:50:33:c5:1d:89:4b:1f:f2:2d:7b:6d:bd:b7:e5:
6d:7f:75:86:3c:78:a3:22:87:5a:d2:f3:d2:d4:6c:
ef:21:14:f7:50:26:45:d6:60:62:41:2e:31:4e:dc:
23:0c:31:40:09:b0:71:57:bb:e9:fb:8d:5b:eb:84:
f9:f7:88:6d:f9:67:c2:25:16:cc:77:23:39:54:f6:
4d:de:ae:25:02:ee:67:9c:b5:cb:a2:49:b3:ef:fc:
9b:51:83:0d:a1:48:e0:18:0f:9f:72:98:d2:25:c1:
e2:db:6e:df:c1:69:91:fc:d4:c7:66:2f:49:29:ff:
25:e3:69:23:d0:5e:a2:7b:46:5e:ac:4b:7f:5d:5b:
ae:e0:83:a3:d3:55:5a:f7:6a:92:cf:58:20:28:1f:
30:d6:ab:19:ac:a2:8d:b2:af:b3:dd:5a:e7:c1:87:
a0:3e:e0:38:66:ac:7a:82:8c:97:1b:08:0d:ee:5e:
ce:4d:bf:b5:e3:18:f2:41:b3:48:4d:e9:59:30:3b:
d4:b0:22:90:3d:70:d4:44:86:cb:c3:8d:a8:bb:46:
1a:e5:4a:9d:17:4f:7d:21:6f:ad:59:54:88:d6:85:
95:04:f3:4e:38:45:89:59:6c:dd:7f:fd:e0:d8:7e:
11:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:00:16:AF:11:11:75:E6:9F:D5:E5:C4:DB:9A:EE:5D:E0:18:20:47
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.149.0/24
Signature Algorithm: sha256WithRSAEncryption
91:e1:8a:a1:b8:54:00:56:42:ea:a9:5c:34:07:70:5f:f2:8b:
50:79:a9:97:f8:60:68:e8:16:54:81:2a:e0:d1:bd:ec:33:38:
33:11:c0:c1:cf:05:19:f1:a0:eb:cc:a2:46:5c:0f:c9:7d:0a:
f9:13:ae:12:bb:e9:34:27:70:e5:28:71:d0:d6:93:f1:16:e5:
82:c2:53:c7:ad:cd:35:7c:39:37:4c:b8:24:09:9c:dc:3a:26:
e4:a9:e1:13:c6:b3:95:29:94:3f:ed:f1:1d:d4:30:d4:3e:9c:
e1:44:e2:75:19:c2:d0:2a:8b:28:a0:2a:e1:23:c6:a9:f8:99:
9a:74:b3:8b:e2:6a:15:04:45:71:98:fb:ee:f2:00:af:eb:32:
74:26:80:df:33:17:8a:2d:f4:0b:5d:ec:83:44:76:ba:b9:5f:
1d:bb:a4:6b:ab:36:23:82:72:cb:9b:6e:16:a5:dd:0b:7c:f3:
d3:84:3b:17:7d:0b:e7:c6:24:db:98:27:58:65:c4:a6:f3:0d:
d5:b3:52:d3:10:aa:98:1b:87:e8:c1:3a:e0:60:e0:9a:e5:34:
90:a5:d9:b3:d5:ff:67:64:74:eb:4a:f0:87:be:a7:41:87:23:
ec:39:b0:01:02:76:fa:5e:3d:bb:d1:2d:33:75:b6:86:e5:0f:
0d:9d:26:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:33:57 2026 by rpki-client