Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137362e302f32332d3234203d3e20383334.roa
File: 3134372e3132352e3137362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: g5uAJEOToxOYlk3HvttXtPjvHPGZQFTyQuZMXRheA3o=
Subject key identifier: 9A:CF:E9:C9:FB:E6:96:28:53:1E:17:DE:51:9F:60:FF:D9:0E:00:0B
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 19A35412DF6D091EB04E551BA76836C6A75C8E6D
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137362e302f32332d3234203d3e20383334.roa
Signing time: Fri 17 Jul 2026 05:42:03 +0000
ROA not before: Fri 17 Jul 2026 05:37:03 +0000
ROA not after: Fri 16 Jul 2027 05:42:03 +0000
asID: 834
IP address blocks: 147.125.176.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:a3:54:12:df:6d:09:1e:b0:4e:55:1b:a7:68:36:c6:a7:5c:8e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jul 17 05:37:03 2026 GMT
Not After : Jul 16 05:42:03 2027 GMT
Subject: CN=9ACFE9C9FBE69628531E17DE519F60FFD90E000B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:dc:76:84:e5:74:33:61:89:21:34:b7:a7:79:
a7:b4:36:ea:0a:3e:a6:2a:f7:0c:f7:60:6c:21:81:
b2:05:01:6f:e6:8e:ee:c9:15:71:1c:aa:a0:2a:f5:
86:a6:7f:b6:17:27:68:52:f0:55:c3:e0:a8:49:f6:
aa:2f:90:9c:40:92:78:5e:0a:3f:94:c3:79:f7:95:
08:3b:a8:4c:cc:53:48:b3:09:94:b9:81:ef:b1:9d:
e5:e1:72:46:4c:65:73:4b:18:2f:8a:88:a2:81:25:
cd:31:0f:fb:23:f6:5e:d3:0b:a9:7e:93:6c:18:f6:
83:c2:6b:91:86:df:ee:f0:6e:56:69:03:91:3e:00:
a2:2a:ef:c3:b9:e2:c7:e9:17:c6:7c:fa:65:f8:66:
af:8b:03:e2:16:1c:56:58:b2:b0:59:80:11:04:25:
f2:95:83:ac:ae:f4:73:c5:14:09:46:f1:97:50:b3:
12:8a:0f:61:b8:ef:c3:7d:fc:ac:0f:c0:b6:51:52:
b3:47:fe:d0:4a:b8:cd:b9:03:c0:3e:1d:04:14:84:
3c:ad:64:ae:04:d2:b2:94:a6:07:69:87:28:ce:cb:
5e:cd:c0:f9:5e:cb:81:13:4c:04:4d:89:2c:88:a5:
17:c0:f2:89:b3:98:1d:99:f5:b1:be:1d:8e:95:ee:
f5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CF:E9:C9:FB:E6:96:28:53:1E:17:DE:51:9F:60:FF:D9:0E:00:0B
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.176.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:5c:80:06:88:80:09:22:a9:51:98:27:5c:71:ca:44:c9:cc:
e9:24:6c:8e:92:2b:42:0b:40:3e:e2:0f:89:ee:8a:5f:dd:2c:
42:5d:55:4e:4b:56:e8:d0:65:fd:53:bc:b7:0b:6a:05:ae:f3:
e9:72:ed:f8:3f:2a:4e:83:5e:f8:6d:57:b2:4c:65:8c:c0:36:
ed:67:cf:76:42:1b:b9:7f:94:d3:c4:37:c5:31:f1:d3:3f:15:
81:6a:68:f0:cc:80:99:24:b8:5f:68:0a:53:14:51:5a:5d:32:
a8:9c:38:34:a0:e5:ee:e7:ea:53:fc:d9:91:ea:22:c9:b1:40:
39:7f:0e:a9:f4:1d:99:52:be:0d:cf:dd:db:df:52:02:23:40:
33:bb:7a:97:07:ac:c7:6c:12:ad:bd:73:55:71:50:11:d7:6c:
cf:7d:e1:b5:23:b2:39:27:5f:d5:ff:57:b8:08:b1:11:85:a8:
af:99:38:14:83:5a:b7:86:a5:93:2d:c4:0b:12:ef:ec:b8:22:
8a:e3:a3:57:b5:89:81:a9:ee:52:a5:8f:89:9d:3b:c7:d4:33:
93:48:81:0d:fa:76:84:ad:09:d0:43:64:6b:d5:d2:51:65:9e:
ca:c4:49:fb:79:4f:72:ef:d6:f1:96:fa:47:52:95:4e:96:21:
83:c2:19:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:26:37 2026 by rpki-client