Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138312e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3138312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 7M56Ha/jSk0SwR1Oa5ML5J9AwiLLwtKOqr+boj7k0f4=
Subject key identifier: AD:C7:06:45:1F:76:6D:E7:1C:49:47:CF:1F:D0:2B:89:5B:59:D3:F1
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 5C428C40C22CA8DC2A92B023CCC52364A200E4C0
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138312e302f32342d3234203d3e20383334.roa
Signing time: Fri 17 Jul 2026 05:42:03 +0000
ROA not before: Fri 17 Jul 2026 05:37:03 +0000
ROA not after: Fri 16 Jul 2027 05:42:03 +0000
asID: 834
IP address blocks: 147.125.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:42:8c:40:c2:2c:a8:dc:2a:92:b0:23:cc:c5:23:64:a2:00:e4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jul 17 05:37:03 2026 GMT
Not After : Jul 16 05:42:03 2027 GMT
Subject: CN=ADC706451F766DE71C4947CF1FD02B895B59D3F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e5:65:3a:d2:85:eb:1f:67:08:9e:b1:1a:c3:
8c:6a:87:ab:25:78:1c:06:77:b7:0a:7d:da:9a:f9:
4e:02:c7:1b:7b:6f:62:83:1c:0f:a0:40:52:17:a5:
82:4c:f4:e6:83:c6:80:86:bc:9c:59:14:67:10:20:
04:7f:18:31:55:a0:1d:9f:55:a2:5d:6d:8e:ad:b6:
1d:1d:95:07:44:8a:6e:d9:1f:65:31:ff:dd:62:0d:
f9:09:6d:ce:fc:3d:78:0d:52:e6:3e:5c:24:61:09:
ab:b8:4b:97:67:87:03:6b:d4:19:cc:45:79:94:cc:
d4:a1:66:40:75:ec:09:91:48:4c:ca:6b:40:6b:95:
f9:42:b1:ad:fe:b9:ea:81:f4:11:e3:b9:0d:c9:fc:
62:a5:19:bb:25:3b:f4:d9:ac:7c:ab:ab:0a:3e:be:
76:d7:26:f3:c5:26:c3:a9:0d:18:4c:98:dc:84:0e:
c0:d8:4c:61:e3:36:0f:98:1b:d0:af:99:3c:87:23:
14:ab:6b:e2:cc:f0:20:1c:0c:6e:b4:73:32:ba:e3:
1f:4f:ee:e0:4e:a8:8f:06:e9:92:5b:fd:85:e7:dd:
37:8a:4f:53:a3:fa:18:7e:0c:39:ff:61:aa:fb:9e:
70:78:0e:8f:b4:b3:6d:d3:c5:7f:84:38:e2:c2:a3:
5e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C7:06:45:1F:76:6D:E7:1C:49:47:CF:1F:D0:2B:89:5B:59:D3:F1
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.181.0/24
Signature Algorithm: sha256WithRSAEncryption
13:a9:0a:b4:21:01:4b:21:41:a1:82:42:58:73:ec:17:6a:3e:
27:f3:57:d9:db:64:fa:fa:31:14:99:93:ca:ef:ba:3c:f0:dd:
75:b6:c2:78:43:01:03:eb:80:d2:c3:58:f7:00:86:3c:53:d3:
94:3f:2e:f6:3f:75:f3:b8:62:0c:59:77:2a:16:89:6f:02:d6:
a8:bb:fd:53:1d:0b:4c:51:bb:aa:47:c8:59:25:ab:b9:59:61:
23:33:69:ae:80:da:c5:f4:20:81:44:4e:13:24:fc:ad:1f:d2:
5c:92:56:7c:0e:fd:5a:56:94:96:6a:d9:9d:b3:76:98:5d:68:
ea:d5:a1:f5:ee:75:02:e3:6d:1d:76:f4:13:00:ff:ba:c3:53:
52:22:82:2b:d1:39:cf:1b:29:05:a7:e6:73:a6:95:79:ef:63:
15:72:dc:ea:13:a5:48:7d:60:53:f5:f3:92:52:02:3d:f9:a5:
ce:46:d4:e4:80:7d:0d:51:12:65:37:13:3f:07:02:5d:41:85:
2a:75:54:27:57:33:b0:7e:1e:54:df:73:27:8b:0a:75:e8:7a:
8b:df:be:e3:af:9f:72:67:88:06:c9:86:6e:07:b0:3e:1e:f2:
17:c6:7e:ba:24:9f:5e:b0:d2:d1:90:bb:d4:f6:31:8c:04:df:
d2:98:78:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:16 2026 by rpki-client