Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135382e302f32332d3234203d3e20383334.roa
File: 3134372e3132352e3135382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: GLmQkZwElgfZLNmZDEri9d7gcQqU6rCFQph1PKxsikA=
Subject key identifier: 4A:FF:BC:77:30:6D:0D:5F:4F:33:34:42:66:E5:B0:74:92:65:39:D5
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 7DB5865992874BFAFF1B23171A3DF24BFF638D5C
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135382e302f32332d3234203d3e20383334.roa
Signing time: Tue 21 Apr 2026 09:09:13 +0000
ROA not before: Tue 21 Apr 2026 09:04:13 +0000
ROA not after: Tue 20 Apr 2027 09:09:13 +0000
asID: 834
IP address blocks: 147.125.158.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:b5:86:59:92:87:4b:fa:ff:1b:23:17:1a:3d:f2:4b:ff:63:8d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Apr 21 09:04:13 2026 GMT
Not After : Apr 20 09:09:13 2027 GMT
Subject: CN=4AFFBC77306D0D5F4F33344266E5B074926539D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:82:8b:d3:49:a8:27:3b:6e:ed:b0:9c:71:e1:
60:bc:19:3f:ba:aa:cd:44:c3:54:20:f7:b0:4c:d5:
cd:19:f6:9d:b4:0c:db:15:49:cd:a4:2c:fd:aa:08:
52:dd:ba:3a:a7:6f:ee:58:65:ff:b7:9b:55:ff:26:
66:7a:3c:e8:ae:39:3e:e6:f3:33:8c:7a:6e:92:dd:
7e:bc:c9:71:6b:49:b7:86:a3:d1:2d:0d:9e:ba:36:
f6:b7:ac:db:ec:6b:db:98:db:4f:be:c8:d0:e2:3f:
5c:fb:15:14:cc:57:76:e1:af:56:1b:f2:2c:74:00:
ed:b7:bd:28:f8:8e:b4:32:d8:07:a4:74:33:1a:1b:
7e:66:9f:f7:ec:7e:d9:ce:8c:b8:d0:35:5f:e4:50:
a8:27:db:87:22:81:6d:a8:08:e1:32:a6:ec:87:6d:
9a:62:73:71:99:e5:cd:f9:1e:17:5b:8e:df:2f:d0:
3f:61:05:d0:a4:a5:c9:a4:74:43:75:e7:6c:c2:48:
57:d4:6c:ac:cc:cb:d1:12:c6:18:2b:15:36:80:09:
52:7f:15:27:49:4b:4e:44:21:e6:d6:03:5a:8c:69:
df:b1:99:f5:1b:94:90:5f:36:27:81:5f:a1:53:50:
d4:66:f1:76:4d:92:d3:3d:2e:2b:b9:10:9c:6e:da:
83:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FF:BC:77:30:6D:0D:5F:4F:33:34:42:66:E5:B0:74:92:65:39:D5
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135382e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.158.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:d2:5f:ba:3a:66:7b:7a:54:30:7f:df:32:4b:14:03:24:36:
35:32:c0:f8:cc:99:51:41:bf:1d:35:75:25:e2:9d:10:b3:90:
48:76:7d:31:73:f7:b9:e8:43:a0:dc:80:11:1d:65:2c:7e:e8:
be:1d:07:e5:12:42:40:14:85:44:f7:c6:25:5c:46:57:ef:43:
40:1e:75:cc:c3:62:cb:16:dc:f6:27:3f:90:e1:64:0c:5d:8c:
e9:59:80:aa:a6:c1:2f:64:66:48:e8:7b:67:56:99:0c:72:4a:
ba:fe:68:52:a4:0c:ae:51:40:b6:22:2c:8b:3b:10:0c:75:29:
dd:a4:45:45:3f:10:c9:6f:d7:e6:d5:b3:0b:bf:38:2d:d6:47:
45:3f:22:92:9f:8d:1a:42:ed:0c:9a:09:6a:24:7d:76:60:b5:
08:92:02:80:f0:a3:81:3a:91:b4:fe:da:5b:03:13:24:bb:69:
bf:d7:21:9b:c7:fe:b8:84:ec:74:30:4b:4e:8a:8f:4f:90:6c:
7d:6b:5b:9e:3d:50:b5:70:b1:96:bf:70:89:95:69:40:2e:72:
3f:9a:0d:79:e4:a4:f6:94:c2:e6:e2:bc:f3:22:4c:db:59:0e:
66:6f:0e:71:3e:83:5f:ef:4e:7a:82:c1:cd:f7:81:78:15:3f:
50:86:c8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:34:42 2026 by rpki-client