Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137302e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3137302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 9c/drL+w7BJPNtqB5adrhipMH0FLwSmcGzwc8Cy7eo8=
Subject key identifier: 63:35:03:2E:B6:17:3C:7D:8A:14:8D:FE:30:B4:E2:DA:70:81:C2:33
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 7BD1DB162CD858DACAD3241EC88D4FF6429A8FE6
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137302e302f32342d3234203d3e20383334.roa
Signing time: Fri 17 Jul 2026 05:42:02 +0000
ROA not before: Fri 17 Jul 2026 05:37:02 +0000
ROA not after: Fri 16 Jul 2027 05:42:02 +0000
asID: 834
IP address blocks: 147.125.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:d1:db:16:2c:d8:58:da:ca:d3:24:1e:c8:8d:4f:f6:42:9a:8f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jul 17 05:37:02 2026 GMT
Not After : Jul 16 05:42:02 2027 GMT
Subject: CN=6335032EB6173C7D8A148DFE30B4E2DA7081C233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8a:c8:76:87:9a:71:af:2f:8e:25:57:88:11:
05:75:ca:73:9a:3f:24:32:ab:3c:ff:77:1d:43:1a:
aa:2d:e8:0e:2b:0f:2b:d2:60:83:0b:dc:fe:f4:a9:
21:c5:08:4b:35:c6:b1:6d:79:43:49:bf:e4:b2:b1:
f4:de:25:af:3d:97:dc:30:c8:03:0c:23:df:e2:c2:
6b:c6:3f:8c:80:1c:91:0b:82:31:68:70:41:39:28:
ad:42:ed:fc:79:22:ef:68:8a:05:7e:93:6c:17:3a:
b4:63:a4:9d:87:0b:f8:2e:19:2d:94:ef:e3:4f:1f:
3b:84:33:11:b8:bf:7d:35:07:1d:bc:8c:9e:55:a3:
e5:89:75:31:38:0f:8b:8a:71:12:c7:a3:10:b8:36:
28:bd:95:38:b2:90:2f:21:d7:fb:37:c6:8e:79:4c:
07:cd:c1:3c:98:6a:92:47:7b:d8:b0:03:bd:78:38:
9a:0d:61:76:23:31:b0:27:9e:51:49:e9:1c:31:0a:
73:ce:38:ea:1c:bc:69:9b:83:f8:f5:26:10:b2:7b:
4a:f7:4d:70:dd:cd:90:59:43:b0:b8:2a:c9:38:9c:
73:88:c7:4d:9f:ad:4e:ae:a2:be:ca:da:e5:94:a3:
c8:74:b8:59:b3:01:97:3b:26:1c:88:79:06:6b:02:
22:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:35:03:2E:B6:17:3C:7D:8A:14:8D:FE:30:B4:E2:DA:70:81:C2:33
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.170.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:37:2b:fd:a3:dc:3b:74:17:a6:18:bf:60:b0:a5:94:20:f6:
38:b0:8a:6b:df:b5:57:d3:b4:b7:90:0b:9b:e8:83:c2:6e:b1:
ce:95:2d:58:1b:68:3b:a0:02:31:3b:a3:cc:11:2b:78:8b:f9:
39:ec:0e:a0:3e:f2:75:74:73:b8:88:f1:17:c5:05:41:05:91:
a8:a3:95:87:f9:8f:bb:ab:12:54:67:2b:ee:d0:ac:96:ce:22:
38:b2:80:97:f7:04:6e:1c:a8:d6:c5:4f:ad:15:da:4a:3a:4b:
0a:a8:bb:74:c5:7e:8d:42:96:6b:cd:4d:c0:05:af:79:65:0b:
06:5e:e2:2d:d9:4a:c0:d6:b6:4c:0c:45:9e:14:c4:53:61:9e:
ac:ab:29:d3:e1:2d:d8:09:6d:43:43:3c:b5:4d:eb:e8:1f:b0:
80:a8:71:50:53:e4:86:17:77:e3:e3:e5:f3:ba:55:b2:2d:cb:
1e:e1:06:a5:03:a4:14:c6:b3:a2:4e:49:5b:a3:68:ff:96:97:
d6:11:12:f1:e2:18:80:83:e3:3c:75:22:f5:8d:30:b0:67:b2:
e9:b3:ab:03:24:2f:cb:98:84:24:d6:f3:bd:53:8c:20:b6:9b:
87:f4:21:27:dc:b6:81:fa:06:36:2e:1b:45:23:ea:8c:88:ed:
ed:68:33:3d
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUe9HbFizYWNrK0yQeyI1P9kKaj+YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNjA3MTcwNTM3MDJaFw0yNzA3MTYwNTQyMDJaMDMxMTAvBgNV
BAMTKDYzMzUwMzJFQjYxNzNDN0Q4QTE0OERGRTMwQjRFMkRBNzA4MUMyMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfish2h5pxry+OJVeIEQV1ynOa
PyQyqzz/dx1DGqot6A4rDyvSYIML3P70qSHFCEs1xrFteUNJv+SysfTeJa89l9ww
yAMMI9/iwmvGP4yAHJELgjFocEE5KK1C7fx5Iu9oigV+k2wXOrRjpJ2HC/guGS2U
7+NPHzuEMxG4v301Bx28jJ5Vo+WJdTE4D4uKcRLHoxC4Nii9lTiykC8h1/s3xo55
TAfNwTyYapJHe9iwA714OJoNYXYjMbAnnlFJ6RwxCnPOOOocvGmbg/j1JhCye0r3
TXDdzZBZQ7C4Ksk4nHOIx02frU6uor7K2uWUo8h0uFmzAZc7JhyIeQZrAiIzAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUYzUDLrYXPH2KFI3+MLTi2nCBwjMwHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx
MzczMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9
qjANBgkqhkiG9w0BAQsFAAOCAQEAizcr/aPcO3QXphi/YLCllCD2OLCKa9+1V9O0
t5ALm+iDwm6xzpUtWBtoO6ACMTujzBEreIv5OewOoD7ydXRzuIjxF8UFQQWRqKOV
h/mPu6sSVGcr7tCsls4iOLKAl/cEbhyo1sVPrRXaSjpLCqi7dMV+jUKWa81NwAWv
eWULBl7iLdlKwNa2TAxFnhTEU2GerKsp0+Et2AltQ0M8tU3r6B+wgKhxUFPkhhd3
4+Pl87pVsi3LHuEGpQOkFMazok5JW6No/5aX1hES8eIYgIPjPHUi9Y0wsGey6bOr
AyQvy5iEJNbzvVOMILabh/QhJ9y2gfoGNi4bRSPqjIjt7WgzPQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:01:56 2026 by rpki-client