Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136342e302f32322d3234203d3e20383334.roa
File: 3134372e3132352e3136342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: kPaicq7L9SsMbDX2p125R+3xL/yy4VA/sT+vmIZRuR0=
Subject key identifier: B6:94:C6:BB:88:0C:AC:D4:0C:38:C0:1D:7B:EF:7B:C2:F9:F2:07:89
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 392B56A4692FC971D8C0856DD5364A7F07510329
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136342e302f32322d3234203d3e20383334.roa
Signing time: Thu 16 Jul 2026 03:45:43 +0000
ROA not before: Thu 16 Jul 2026 03:40:43 +0000
ROA not after: Thu 15 Jul 2027 03:45:43 +0000
asID: 834
IP address blocks: 147.125.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:2b:56:a4:69:2f:c9:71:d8:c0:85:6d:d5:36:4a:7f:07:51:03:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jul 16 03:40:43 2026 GMT
Not After : Jul 15 03:45:43 2027 GMT
Subject: CN=B694C6BB880CACD40C38C01D7BEF7BC2F9F20789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:55:24:f6:1b:19:13:b0:05:62:79:bb:00:f6:
60:2a:c5:57:c6:ea:84:7b:b1:96:ec:fb:6d:e3:28:
c1:3f:e7:59:69:bc:4f:84:b0:31:7e:85:be:3a:48:
a8:84:c8:0a:ac:4a:2f:a0:84:23:8a:e0:87:cf:19:
91:4c:d0:10:fc:3d:6a:19:e3:a0:c1:cb:65:38:88:
28:f8:58:a9:e8:50:cb:82:e4:c9:60:00:ec:20:68:
9e:1d:39:c0:0d:4f:e9:a0:23:ad:ef:32:c2:02:ea:
9c:87:07:61:86:af:e6:bc:11:d9:5d:99:85:fa:81:
a9:2e:d7:c0:ca:9d:60:c1:bb:e0:d4:c9:95:a7:12:
79:df:27:19:b5:f1:e6:3f:c8:2a:cc:de:99:80:25:
fe:ff:27:90:d0:f1:fe:dd:22:74:d6:77:cf:01:90:
d4:9f:47:33:e9:aa:27:38:eb:ba:d7:6d:de:b9:82:
af:e2:1b:c0:de:b2:7f:70:f1:23:41:34:60:07:31:
95:41:1b:fe:2b:78:95:04:04:2a:26:70:29:44:a3:
52:65:30:4e:25:65:cf:49:d8:b4:35:94:82:86:4a:
0f:d9:6b:42:5c:70:e6:9c:d9:fa:7b:11:ea:b7:13:
9f:71:c6:3c:15:50:b8:2f:3c:f4:2c:95:de:15:fc:
f4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:94:C6:BB:88:0C:AC:D4:0C:38:C0:1D:7B:EF:7B:C2:F9:F2:07:89
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136342e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.164.0/22
Signature Algorithm: sha256WithRSAEncryption
27:1a:35:7a:82:ac:87:cc:2e:72:31:9a:e9:6e:fc:68:e4:15:
ba:fd:8b:7b:7c:06:07:3a:d8:41:28:33:51:22:7c:38:e6:2d:
ad:cf:57:67:e0:26:73:f0:d8:c5:60:73:2e:84:0c:87:73:02:
b6:49:78:8d:af:62:8e:b9:b0:89:6b:9a:54:7a:ca:0f:0a:84:
16:34:d0:4e:26:47:2f:0c:72:06:b2:e8:85:ea:3b:2c:73:7c:
48:51:25:49:88:80:ed:81:5b:c2:55:88:fb:35:d2:63:6e:21:
41:d5:2b:5b:db:2c:92:02:47:e0:6e:65:5e:e7:04:05:25:06:
05:6a:e4:66:b7:73:d1:8e:5e:3e:04:43:a6:dc:45:2f:d0:d0:
ff:f7:fa:1f:97:43:c5:31:47:fe:2f:22:a1:cc:21:2a:b4:18:
1c:69:64:23:6e:35:79:c5:7e:c3:34:af:a4:ed:43:c7:f8:7f:
07:d4:5f:ee:cb:4e:a1:87:86:1a:6c:0a:7f:28:62:98:1c:1c:
93:50:70:f1:0c:df:1c:b5:d3:ab:31:1c:86:1b:a2:19:a7:42:
ae:8c:ce:2f:32:a1:49:c8:16:d6:de:f8:6e:12:20:6e:fc:8f:
34:bb:39:d0:7b:72:a5:de:6a:7d:14:08:50:d8:ce:11:fe:19:
13:85:fd:30
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUOStWpGkvyXHYwIVt1TZKfwdRAykwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNjA3MTYwMzQwNDNaFw0yNzA3MTUwMzQ1NDNaMDMxMTAvBgNV
BAMTKEI2OTRDNkJCODgwQ0FDRDQwQzM4QzAxRDdCRUY3QkMyRjlGMjA3ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOVST2GxkTsAViebsA9mAqxVfG
6oR7sZbs+23jKME/51lpvE+EsDF+hb46SKiEyAqsSi+ghCOK4IfPGZFM0BD8PWoZ
46DBy2U4iCj4WKnoUMuC5MlgAOwgaJ4dOcANT+mgI63vMsIC6pyHB2GGr+a8Edld
mYX6gaku18DKnWDBu+DUyZWnEnnfJxm18eY/yCrM3pmAJf7/J5DQ8f7dInTWd88B
kNSfRzPpqic467rXbd65gq/iG8Desn9w8SNBNGAHMZVBG/4reJUEBComcClEo1Jl
ME4lZc9J2LQ1lIKGSg/Za0JccOac2fp7Eeq3E59xxjwVULgvPPQsld4V/PT9AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUtpTGu4gMrNQMOMAde+97wvnyB4kwHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx
MzYzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEApN9
pDANBgkqhkiG9w0BAQsFAAOCAQEAJxo1eoKsh8wucjGa6W78aOQVuv2Le3wGBzrY
QSgzUSJ8OOYtrc9XZ+Amc/DYxWBzLoQMh3MCtkl4ja9ijrmwiWuaVHrKDwqEFjTQ
TiZHLwxyBrLoheo7LHN8SFElSYiA7YFbwlWI+zXSY24hQdUrW9sskgJH4G5lXucE
BSUGBWrkZrdz0Y5ePgRDptxFL9DQ//f6H5dDxTFH/i8iocwhKrQYHGlkI241ecV+
wzSvpO1Dx/h/B9Rf7stOoYeGGmwKfyhimBwck1Bw8QzfHLXTqzEchhuiGadCrozO
LzKhScgW1t74bhIgbvyPNLs50Htypd5qfRQIUNjOEf4ZE4X9MA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:48:48 2026 by rpki-client