Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137352e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3137352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: RY7aMQMtd+Bb4BdvPGettKihu6vFjrX0qbfHYyhASDc=
Subject key identifier: C8:9E:99:CE:A1:4A:80:3F:56:2E:8C:0C:87:2E:F5:4D:66:1F:72:93
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 697423F9EA5FC7819F05D5E7C63EDAB8EC4B9ED6
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137352e302f32342d3234203d3e20383334.roa
Signing time: Mon 20 Jul 2026 13:57:12 +0000
ROA not before: Mon 20 Jul 2026 13:52:12 +0000
ROA not after: Mon 19 Jul 2027 13:57:12 +0000
asID: 834
IP address blocks: 147.125.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:74:23:f9:ea:5f:c7:81:9f:05:d5:e7:c6:3e:da:b8:ec:4b:9e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jul 20 13:52:12 2026 GMT
Not After : Jul 19 13:57:12 2027 GMT
Subject: CN=C89E99CEA14A803F562E8C0C872EF54D661F7293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9c:e6:f2:e1:ec:18:ae:f6:fa:79:89:ec:08:
d8:f7:7b:b8:d9:d4:e4:4c:12:ba:53:40:f0:57:26:
40:12:6c:08:fa:00:6f:22:7c:f4:50:63:8a:ac:05:
65:1d:57:f4:a5:5d:1e:f3:88:6c:b9:32:a7:dd:68:
df:8d:36:57:7c:1d:21:15:93:85:a5:8e:9a:9a:80:
fb:4c:62:a5:ce:96:e7:fa:13:28:20:a1:b4:cc:82:
3a:bd:d1:31:9e:d8:ff:dd:e2:c7:f9:3e:e8:8c:bb:
f8:5b:ca:34:52:46:b3:8e:06:cd:96:01:0f:af:66:
e5:52:3a:17:37:41:94:3f:30:84:8b:1c:05:07:4c:
41:3b:99:e0:d2:33:dd:c4:d4:81:fc:b7:cc:8d:78:
bf:24:76:cf:1d:de:c7:62:52:12:b1:e8:df:80:55:
bc:b8:a7:ce:55:22:c9:8a:06:11:f6:87:c1:a3:af:
38:aa:fc:e5:28:82:6d:a5:6b:92:cc:b4:79:68:eb:
2b:d9:92:e6:fe:a4:57:48:80:4a:a5:d2:b7:4d:81:
c6:7e:13:4f:ff:56:f3:5e:98:50:8b:20:fe:cb:c3:
7b:b9:22:71:21:4a:27:67:b6:ec:8b:cb:5e:24:ba:
54:0c:a7:f5:0f:52:79:fb:8a:a6:2c:e7:d6:6c:1f:
3e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9E:99:CE:A1:4A:80:3F:56:2E:8C:0C:87:2E:F5:4D:66:1F:72:93
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.175.0/24
Signature Algorithm: sha256WithRSAEncryption
57:1e:b5:be:6a:96:6c:21:f7:e0:87:96:f6:5b:7f:eb:df:5f:
6c:75:ce:a4:cc:eb:a7:1d:5e:da:b1:1c:a4:fd:fa:8f:50:ce:
bd:ee:89:5c:1b:13:6e:64:a9:19:8a:fd:c9:06:48:c7:c9:81:
57:da:52:ce:29:2f:49:34:97:4b:db:e3:3e:35:1a:0b:3d:46:
4f:9b:c7:5e:81:7c:5e:0a:25:90:0d:1c:34:1f:01:e3:60:86:
9d:ec:03:8c:1c:6d:91:72:55:cf:8f:e2:48:0c:b5:74:c1:cd:
54:3f:12:55:4f:ea:aa:1e:b9:b3:0b:39:d0:2d:ad:64:38:71:
ce:c5:7b:79:ce:f1:1c:9a:e8:51:a6:2b:d6:66:a7:27:5e:7c:
60:5b:10:77:db:75:96:28:f0:9f:49:a6:bb:81:2d:33:cc:9b:
3e:3f:52:f7:70:13:ca:09:10:6c:42:e2:63:ef:b9:f9:23:b0:
8c:07:23:b2:86:86:f1:0f:fa:37:6f:32:e1:3c:7f:96:e5:4e:
54:e8:ee:d5:85:a1:9c:3f:e4:7a:6c:d9:25:69:e8:bc:ae:dc:
68:e6:5c:08:98:f2:23:ea:00:c7:5e:2a:aa:e1:90:33:6c:d4:
85:a8:cb:83:2b:4f:73:f2:77:27:a6:38:7a:a3:d8:cd:c4:10:
79:4c:08:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:20:55 2026 by rpki-client