Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136332e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3136332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: YlHCzTEBTF7DXO0vQBGuqbCQz+4xeEvyYWscDdnPJjY=
Subject key identifier: C9:3F:5D:8E:D2:D1:F0:66:B9:72:CC:38:6A:FD:7B:9C:72:47:97:4C
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 7B51CBD675CAD4F428C37527C22D7902B9ADA7E7
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136332e302f32342d3234203d3e20383334.roa
Signing time: Wed 08 Jul 2026 10:42:26 +0000
ROA not before: Wed 08 Jul 2026 10:37:26 +0000
ROA not after: Wed 07 Jul 2027 10:42:26 +0000
asID: 834
IP address blocks: 147.125.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:51:cb:d6:75:ca:d4:f4:28:c3:75:27:c2:2d:79:02:b9:ad:a7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jul 8 10:37:26 2026 GMT
Not After : Jul 7 10:42:26 2027 GMT
Subject: CN=C93F5D8ED2D1F066B972CC386AFD7B9C7247974C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9a:f3:c7:b2:cc:80:8f:44:50:0e:ea:78:7e:
13:ae:b5:dc:e0:8b:6b:d4:b7:fd:1a:c4:f0:87:45:
00:a4:fc:b9:22:e1:7f:ba:c3:67:78:6f:34:2f:21:
0e:5a:30:63:1c:28:72:f2:0c:d4:ca:4e:f2:fd:9d:
35:9c:b2:a8:5d:90:6c:de:b6:ab:c0:6b:23:b1:3e:
cb:8b:fe:83:c8:5e:f6:31:cb:87:19:7f:c8:d2:66:
52:07:e0:14:c2:31:32:8d:a2:61:36:a5:51:48:cf:
82:8c:23:cd:03:de:7d:73:d7:d2:64:9c:b4:24:19:
da:73:e5:3b:9d:9e:6d:ca:ff:e6:4d:ad:25:0b:f4:
01:16:ba:33:bf:cd:3c:8b:95:51:3a:1c:19:5e:23:
ef:3e:a8:59:bf:75:49:6f:a1:28:02:9e:80:94:ae:
bd:be:39:12:ef:82:d8:02:64:ff:74:d1:35:4c:97:
cf:4d:a7:53:a1:80:3b:f7:57:aa:db:0f:f4:1b:75:
e4:c1:db:88:7e:40:cd:ab:4e:7b:35:12:45:0b:ad:
c2:61:4d:21:f6:f1:cc:84:39:92:98:77:58:53:ac:
ad:95:d7:db:58:4b:03:4e:6d:fe:b0:95:a8:15:11:
6b:d3:44:08:8b:3e:29:27:a6:c9:68:24:c7:55:23:
a3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3F:5D:8E:D2:D1:F0:66:B9:72:CC:38:6A:FD:7B:9C:72:47:97:4C
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.163.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:19:91:48:f5:16:fb:df:25:03:d9:52:49:a3:c4:c6:cb:0c:
f1:68:14:71:c6:f1:78:62:43:1b:78:4c:78:0b:b8:71:76:b3:
db:0f:ae:85:5e:8b:f6:6c:64:2d:fe:5a:c3:cf:f8:05:2d:7d:
a8:44:5a:6d:b0:47:c2:3a:df:f2:62:3d:0b:51:be:d8:80:57:
bf:55:09:00:37:4c:78:9b:29:3e:90:6b:d1:c5:07:99:00:cd:
65:b0:78:8c:89:ef:53:48:66:be:49:4e:cd:d8:3a:be:5b:25:
76:29:19:dd:30:55:be:d9:40:94:71:f3:13:d1:f9:2d:61:b1:
f1:f8:3f:fc:b1:60:4d:64:2d:77:05:ca:92:a2:f5:b0:b4:ab:
a8:86:55:cb:5b:25:a7:18:93:ab:35:59:bc:cc:c6:95:32:30:
5f:8d:63:93:05:98:fa:00:9a:f2:ce:36:25:66:c2:0f:c0:99:
30:f6:50:7e:e9:a7:68:b6:33:d3:82:0a:d0:4d:7c:a8:8a:70:
c6:89:41:73:66:36:b3:fa:8a:4d:4d:77:04:8b:39:a6:4a:e4:
61:a1:aa:36:25:26:ae:14:0a:16:b3:01:68:e4:ef:24:83:90:
db:08:5f:5f:8a:ad:68:6b:cd:05:ea:4a:6b:c8:64:15:87:68:
2c:1f:51:41
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUe1HL1nXK1PQow3Unwi15Armtp+cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNjA3MDgxMDM3MjZaFw0yNzA3MDcxMDQyMjZaMDMxMTAvBgNV
BAMTKEM5M0Y1RDhFRDJEMUYwNjZCOTcyQ0MzODZBRkQ3QjlDNzI0Nzk3NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGmvPHssyAj0RQDup4fhOutdzg
i2vUt/0axPCHRQCk/Lki4X+6w2d4bzQvIQ5aMGMcKHLyDNTKTvL9nTWcsqhdkGze
tqvAayOxPsuL/oPIXvYxy4cZf8jSZlIH4BTCMTKNomE2pVFIz4KMI80D3n1z19Jk
nLQkGdpz5Tudnm3K/+ZNrSUL9AEWujO/zTyLlVE6HBleI+8+qFm/dUlvoSgCnoCU
rr2+ORLvgtgCZP900TVMl89Np1OhgDv3V6rbD/QbdeTB24h+QM2rTns1EkULrcJh
TSH28cyEOZKYd1hTrK2V19tYSwNObf6wlagVEWvTRAiLPiknpsloJMdVI6PBAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUyT9djtLR8Ga5csw4av17nHJHl0wwHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx
MzYzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9
ozANBgkqhkiG9w0BAQsFAAOCAQEAnBmRSPUW+98lA9lSSaPExssM8WgUccbxeGJD
G3hMeAu4cXaz2w+uhV6L9mxkLf5aw8/4BS19qERabbBHwjrf8mI9C1G+2IBXv1UJ
ADdMeJspPpBr0cUHmQDNZbB4jInvU0hmvklOzdg6vlsldikZ3TBVvtlAlHHzE9H5
LWGx8fg//LFgTWQtdwXKkqL1sLSrqIZVy1slpxiTqzVZvMzGlTIwX41jkwWY+gCa
8s42JWbCD8CZMPZQfumnaLYz04IK0E18qIpwxolBc2Y2s/qKTU13BIs5pkrkYaGq
NiUmrhQKFrMBaOTvJIOQ2whfX4qtaGvNBepKa8hkFYdoLB9RQQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:51 2026 by rpki-client