Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136392e302f32342d3234203d3e20323139333734.roa
File: 3134372e3132352e3136392e302f32342d3234203d3e20323139333734.roa (raw, json)
Hash identifier: zsSDezMOHqX/3xm83QvQVanT02trYbxtqrN0GtpgA4s=
Subject key identifier: 3F:36:47:B3:4B:DC:CB:13:68:98:16:CC:36:38:2C:38:E8:85:16:40
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 31173CC136399165BF091190D8809BE45034F787
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136392e302f32342d3234203d3e20323139333734.roa
Signing time: Mon 13 Jul 2026 05:37:41 +0000
ROA not before: Mon 13 Jul 2026 05:32:41 +0000
ROA not after: Mon 12 Jul 2027 05:37:41 +0000
asID: 219374
IP address blocks: 147.125.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:17:3c:c1:36:39:91:65:bf:09:11:90:d8:80:9b:e4:50:34:f7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jul 13 05:32:41 2026 GMT
Not After : Jul 12 05:37:41 2027 GMT
Subject: CN=3F3647B34BDCCB13689816CC36382C38E8851640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ac:ee:3c:ce:8d:cf:c0:e8:63:b0:ca:49:97:
cc:c4:be:e0:c5:70:54:39:b8:fc:ab:19:8b:55:c4:
8e:fd:e3:a6:01:75:3c:03:ea:d6:8e:b0:04:95:25:
af:be:9c:0a:6e:2c:5f:e0:f4:e3:be:aa:e9:c8:52:
c1:38:2b:ee:18:f2:95:9e:b6:d6:2c:2b:fb:7a:15:
02:b2:f8:11:d1:8b:fa:21:c9:83:81:37:c8:bf:5a:
af:c0:a7:98:5f:f0:d9:56:55:63:42:4e:1b:ef:11:
46:ec:0a:b7:0d:75:7d:f1:43:31:f6:61:a0:2f:00:
8f:cf:2b:02:3c:b7:26:a9:8c:4d:18:29:07:e1:f0:
60:89:f3:d9:7f:f9:72:30:87:8b:cb:66:31:ab:5a:
00:85:aa:ae:0e:2b:80:15:35:19:77:62:f6:c9:83:
af:8b:69:a1:80:24:84:bf:cd:3c:92:0f:53:0d:e1:
86:de:3c:a2:f6:84:73:ea:d7:46:d1:69:cf:65:2e:
16:f0:37:72:96:fe:c1:c9:9f:13:1c:93:f4:65:92:
01:6d:e4:64:24:2d:75:fc:c0:a9:d2:45:56:6a:1b:
f0:5e:8c:dd:ba:6d:b5:20:87:86:86:5e:93:bb:bf:
87:ec:fa:73:ec:91:fa:02:73:88:93:bb:e9:7c:a8:
3b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:36:47:B3:4B:DC:CB:13:68:98:16:CC:36:38:2C:38:E8:85:16:40
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136392e302f32342d3234203d3e20323139333734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.169.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:8b:64:2f:1b:53:1f:43:6e:90:89:2d:ba:14:8e:0d:05:6e:
f8:98:f9:3d:61:8f:d8:1d:c5:55:64:66:85:6c:a9:d0:7e:fc:
ba:06:7f:e2:be:a5:1f:d6:4d:b3:ac:41:cd:10:ac:fa:a9:a1:
dd:08:4c:1e:3e:f1:6f:93:72:de:06:25:de:5b:6c:3d:7c:c5:
cd:76:1e:5f:b0:a7:df:45:37:18:8a:6d:6e:a1:d1:8a:86:e1:
01:69:e6:65:ac:ac:61:8a:60:c7:7e:c6:04:69:3f:1f:16:e0:
a5:bd:07:76:72:93:a4:26:f8:26:62:f6:7d:56:17:2e:42:3f:
eb:a0:32:98:a2:d4:15:01:92:4e:1c:d6:3a:bb:4f:4b:33:6d:
d6:4a:9e:b2:01:95:b6:f8:83:35:e3:0a:a7:ac:a0:03:ba:1c:
ba:54:90:a0:e3:23:35:f0:3e:0d:bb:4b:fa:ac:0d:41:0f:97:
05:98:41:c2:2f:c3:63:b8:30:bb:3f:34:08:83:98:be:d6:f1:
0f:34:40:1f:d9:95:1f:78:b7:19:32:bb:a0:50:c0:4c:77:b8:
dd:4a:b6:ad:cb:51:69:83:a5:a7:c3:c2:bf:a1:2c:c2:68:72:
26:e1:96:99:59:e7:9d:5a:ee:ae:c7:3a:9b:48:ce:da:f9:8a:
0f:5e:4d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:38:22 2026 by rpki-client