Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136302e302f32332d3234203d3e20383334.roa
File: 3134372e3132352e3136302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: FLdg8oCwkDwHEiyI86d+PQtPpR1MzZcXY7lYqpT+TQk=
Subject key identifier: F5:57:2E:69:33:C0:09:7F:50:C5:39:CC:AC:2A:30:CE:7F:26:1E:04
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 4619777F1FFB82D8067E3527B43BA2B43AB5BB22
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136302e302f32332d3234203d3e20383334.roa
Signing time: Wed 08 Jul 2026 10:42:26 +0000
ROA not before: Wed 08 Jul 2026 10:37:26 +0000
ROA not after: Wed 07 Jul 2027 10:42:26 +0000
asID: 834
IP address blocks: 147.125.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:19:77:7f:1f:fb:82:d8:06:7e:35:27:b4:3b:a2:b4:3a:b5:bb:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jul 8 10:37:26 2026 GMT
Not After : Jul 7 10:42:26 2027 GMT
Subject: CN=F5572E6933C0097F50C539CCAC2A30CE7F261E04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1a:f7:c8:4e:e6:b4:da:2a:88:2d:74:c0:d2:
3d:d6:04:fc:f3:e0:29:e6:ca:11:98:c2:c9:77:0e:
a3:5e:39:de:2d:41:b7:59:39:af:af:b6:6d:6f:55:
e8:fd:aa:3a:3e:08:5d:ac:8c:8d:67:b9:96:9e:57:
d1:8a:ca:a4:5f:92:05:7a:3c:73:bc:88:fd:84:88:
b5:af:5f:f4:69:32:85:6e:60:0f:97:87:f7:14:91:
c1:6f:ef:96:7e:6a:f4:59:07:5b:bd:4e:29:1b:a4:
8c:55:7a:ea:81:46:2c:cc:3b:4d:1e:89:fc:18:fa:
3e:96:26:20:ea:b0:a9:83:c8:20:ed:86:b5:4a:b8:
44:7c:24:ba:b7:9b:88:4e:24:f5:14:7a:a0:72:ad:
fe:54:22:b2:47:c9:d8:0b:e3:47:44:16:1f:c0:45:
40:56:06:49:8b:3f:c0:0e:95:13:90:56:a5:07:dd:
b5:a7:b8:12:0e:06:25:bf:71:fd:47:c5:9e:02:ae:
71:5b:71:2f:ff:23:cc:57:f1:e6:72:88:e3:2a:5a:
48:96:34:41:aa:6a:aa:3c:09:79:0d:3d:3c:bd:23:
51:71:d1:d0:ee:21:0b:cf:55:10:e8:83:05:32:22:
7f:08:b8:4d:ab:d8:b3:75:f4:fb:39:ab:c9:3c:b8:
1b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:57:2E:69:33:C0:09:7F:50:C5:39:CC:AC:2A:30:CE:7F:26:1E:04
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.160.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:1f:94:12:51:b8:4e:10:6a:1c:13:7a:32:c5:0c:b1:fa:0b:
b7:c3:c5:24:33:a6:ff:a0:38:e9:25:f5:23:92:a1:fa:d0:b5:
62:52:82:b1:02:03:75:d8:69:0c:e8:0b:ad:29:5f:ee:f9:08:
19:a1:ef:dd:9e:e2:61:23:40:32:c4:be:84:9a:b7:fe:90:f3:
36:9f:28:51:86:db:9d:e6:d6:67:3e:17:72:45:9a:43:56:29:
61:94:ca:e8:52:c3:b7:a3:d9:a5:5c:30:01:18:b9:52:6f:3e:
23:67:9e:d0:d1:16:bc:16:9d:27:f0:2e:7a:10:81:40:66:10:
3a:61:f4:0c:b0:64:26:9d:a3:f8:89:89:a1:8f:d9:2b:da:35:
41:ed:fe:ad:79:eb:1a:8a:90:fb:b5:58:f1:9e:01:79:7e:b1:
7d:c2:33:b8:2b:50:59:58:4f:cd:60:9e:c5:9e:b5:09:df:5b:
9e:ec:51:e0:6b:f5:43:74:07:59:67:54:1e:2d:5a:bc:65:4b:
43:a3:98:81:a4:b2:c6:28:16:5b:fb:cb:1f:2e:e4:36:3f:49:
10:32:19:03:e8:c5:8f:13:1a:db:12:5c:76:4d:4e:a9:67:e3:
e0:0d:d8:f4:c8:63:1f:87:b8:1d:1b:40:2d:d3:e3:cc:1e:e3:
f3:9c:92:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:55:42 2026 by rpki-client