Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137392e302f32342d3234203d3e20323139333734.roa
File: 3134372e3132352e3137392e302f32342d3234203d3e20323139333734.roa (raw, json)
Hash identifier: tru6ZLnChcZxx3BD/GtedzbUm/HGxzDKtPcGNPlGy3U=
Subject key identifier: 1C:DA:6E:4C:65:E6:70:CC:6A:75:F0:C6:93:39:A6:2F:CA:09:50:ED
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 7E2F4E41BB762CEA9FD043DD6B64F6901949D4FB
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137392e302f32342d3234203d3e20323139333734.roa
Signing time: Fri 17 Jul 2026 05:47:21 +0000
ROA not before: Fri 17 Jul 2026 05:42:21 +0000
ROA not after: Fri 16 Jul 2027 05:47:21 +0000
asID: 219374
IP address blocks: 147.125.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:2f:4e:41:bb:76:2c:ea:9f:d0:43:dd:6b:64:f6:90:19:49:d4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jul 17 05:42:21 2026 GMT
Not After : Jul 16 05:47:21 2027 GMT
Subject: CN=1CDA6E4C65E670CC6A75F0C69339A62FCA0950ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:02:7a:3a:8c:20:7d:e3:73:9c:ea:9d:2c:e0:
14:ba:ef:12:30:a5:c4:c5:7b:63:49:c4:76:6e:9a:
a9:a9:b9:2f:e3:68:2e:e4:a2:c9:23:de:d0:8a:23:
f9:da:6e:4d:aa:f4:33:0d:f1:0e:16:38:f8:19:ca:
ce:0e:70:80:6f:5e:90:6b:0e:46:c3:f5:a2:31:55:
ed:a5:75:2c:e9:07:9a:47:ad:c0:11:bc:ad:be:f5:
fb:0e:dc:10:a5:02:60:de:01:d7:7b:84:28:80:ac:
d4:3c:a3:40:4e:60:3b:fe:17:91:66:66:ce:92:d0:
9e:d1:5d:78:6f:8f:53:a8:27:16:1f:41:f4:4e:0f:
48:98:b2:22:45:b2:60:5f:ca:69:28:f6:0a:32:ca:
11:8f:68:8a:4d:47:c0:8b:3f:0d:71:79:22:90:0f:
dd:74:18:d1:36:70:7b:f1:32:3b:e4:cd:e2:cb:f7:
5f:c5:09:df:8c:10:50:1f:bd:98:0c:2f:f5:7c:ca:
6c:50:2c:d1:31:5c:7d:f9:e2:53:37:5c:1c:46:c9:
c2:35:de:1f:c3:ac:21:7a:d0:ec:86:10:2e:a2:ee:
01:01:b0:53:a0:67:b5:c5:6c:a5:97:ca:66:80:10:
9a:4f:b0:74:da:5c:0c:76:9a:a2:7f:00:4f:77:5f:
59:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DA:6E:4C:65:E6:70:CC:6A:75:F0:C6:93:39:A6:2F:CA:09:50:ED
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137392e302f32342d3234203d3e20323139333734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.179.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:70:cc:f6:27:f2:87:44:5a:ec:af:b0:ce:19:1c:e2:82:43:
49:9f:91:94:56:79:2e:32:cd:cc:5a:e5:9a:53:3a:65:68:2a:
65:69:d7:28:a7:ae:4e:0f:5f:f9:e4:88:2d:40:ed:ce:de:0d:
8b:7d:0c:19:de:09:e1:04:95:c0:6a:47:78:24:c0:13:fa:d5:
61:ae:f2:73:8b:e1:fc:54:64:fc:14:a2:45:d1:c5:a4:f4:13:
02:ce:d6:6c:c7:ec:7b:7c:ee:2f:02:78:59:ff:b8:fb:84:47:
a7:f6:55:1c:c8:e3:37:63:7d:9d:ca:2b:24:d4:1f:74:48:99:
bd:be:90:38:d7:91:bc:1a:72:c7:32:cf:90:8e:fe:07:b7:88:
12:ff:bc:dd:3b:ad:c1:69:cf:4c:30:97:af:da:2e:b9:dc:6e:
df:d9:f7:4b:92:e2:b2:d4:be:cc:95:66:82:37:39:33:2a:7b:
24:68:f0:f2:b8:03:de:11:cf:46:e2:b6:d4:79:9f:94:94:2c:
e1:06:cc:b7:bf:4b:1e:67:71:7f:a6:76:c4:74:5c:be:2f:9b:
4c:5a:0c:0c:99:c9:0a:8e:d0:ae:bd:40:f7:66:d9:c9:bf:f3:
f7:2b:c4:ee:ed:a0:6d:c4:25:bd:4c:8d:08:ac:98:3e:c8:46:
e6:52:88:30
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUfi9OQbt2LOqf0EPda2T2kBlJ1PswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNjA3MTcwNTQyMjFaFw0yNzA3MTYwNTQ3MjFaMDMxMTAvBgNV
BAMTKDFDREE2RTRDNjVFNjcwQ0M2QTc1RjBDNjkzMzlBNjJGQ0EwOTUwRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzAno6jCB943Oc6p0s4BS67xIw
pcTFe2NJxHZumqmpuS/jaC7koskj3tCKI/nabk2q9DMN8Q4WOPgZys4OcIBvXpBr
DkbD9aIxVe2ldSzpB5pHrcARvK2+9fsO3BClAmDeAdd7hCiArNQ8o0BOYDv+F5Fm
Zs6S0J7RXXhvj1OoJxYfQfROD0iYsiJFsmBfymko9goyyhGPaIpNR8CLPw1xeSKQ
D910GNE2cHvxMjvkzeLL91/FCd+MEFAfvZgML/V8ymxQLNExXH354lM3XBxGycI1
3h/DrCF60OyGEC6i7gEBsFOgZ7XFbKWXymaAEJpPsHTaXAx2mqJ/AE93X1ldAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUHNpuTGXmcMxqdfDGkzmmL8oJUO0wHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx
MzczOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzOTMzMzczNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAJN9szANBgkqhkiG9w0BAQsFAAOCAQEASnDM9ifyh0Ra7K+wzhkc4oJDSZ+R
lFZ5LjLNzFrlmlM6ZWgqZWnXKKeuTg9f+eSILUDtzt4Ni30MGd4J4QSVwGpHeCTA
E/rVYa7yc4vh/FRk/BSiRdHFpPQTAs7WbMfse3zuLwJ4Wf+4+4RHp/ZVHMjjN2N9
ncorJNQfdEiZvb6QONeRvBpyxzLPkI7+B7eIEv+83TutwWnPTDCXr9ouudxu39n3
S5ListS+zJVmgjc5Myp7JGjw8rgD3hHPRuK21HmflJQs4QbMt79LHmdxf6Z2xHRc
vi+bTFoMDJnJCo7Qrr1A92bZyb/z9yvE7u2gbcQlvUyNCKyYPshG5lKIMA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:20:59 2026 by rpki-client