Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138322e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3138322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 1cCEqlOZ6IqFoNillqFs7PnkQHuxOZlidTTZiPXbfiM=
Subject key identifier: 7A:F5:CB:E9:AD:C8:E3:ED:62:4C:2E:29:CF:F8:9C:61:C8:AE:3A:AF
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 06186E56B05DD31FB71F8260C49C0B5D5A6CF217
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138322e302f32342d3234203d3e20383334.roa
Signing time: Fri 17 Jul 2026 05:48:10 +0000
ROA not before: Fri 17 Jul 2026 05:43:10 +0000
ROA not after: Fri 16 Jul 2027 05:48:10 +0000
asID: 834
IP address blocks: 147.125.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:18:6e:56:b0:5d:d3:1f:b7:1f:82:60:c4:9c:0b:5d:5a:6c:f2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jul 17 05:43:10 2026 GMT
Not After : Jul 16 05:48:10 2027 GMT
Subject: CN=7AF5CBE9ADC8E3ED624C2E29CFF89C61C8AE3AAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:e1:73:52:3f:25:b8:14:60:e3:b3:ae:9c:
28:10:66:d7:ec:06:7b:d7:ef:6f:e5:04:39:ac:ba:
6d:7b:a6:c2:10:48:16:36:0f:31:94:d1:5b:74:76:
e2:66:fe:43:da:ee:83:6f:31:24:57:7b:19:9d:29:
73:55:20:14:92:98:68:ea:be:c0:49:07:2d:f4:18:
99:e9:2b:8e:15:17:b9:ea:e5:33:6b:0b:5b:6f:db:
c9:b8:f2:eb:e5:29:78:1d:a2:12:0e:56:16:98:46:
ea:26:56:80:73:42:9c:e0:79:9c:f2:ca:74:ed:b5:
36:9a:06:64:c7:10:09:6d:b4:6d:e5:81:ee:be:8e:
c7:39:30:8a:ec:b7:63:4f:49:1f:ee:00:cf:4b:12:
6f:d0:0d:13:46:99:d4:c6:c9:88:01:eb:02:60:93:
d5:53:f8:6d:04:62:7c:32:66:10:d6:8b:63:4f:5f:
78:3b:76:3f:eb:cc:70:a5:85:3a:ee:35:a7:d4:3d:
25:00:5e:9d:44:5a:25:c4:ab:7e:00:69:d1:49:13:
6b:0f:ff:28:73:75:cc:e4:35:83:92:02:6b:6f:5d:
43:28:9d:bd:4a:e7:e2:96:62:40:4a:ec:5d:30:7c:
9c:fa:d6:2c:3b:47:fe:2b:b1:98:ac:c6:2d:1d:46:
5a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F5:CB:E9:AD:C8:E3:ED:62:4C:2E:29:CF:F8:9C:61:C8:AE:3A:AF
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.182.0/24
Signature Algorithm: sha256WithRSAEncryption
18:cd:75:95:6c:5b:f0:07:1e:34:32:de:a6:29:27:c7:16:f8:
73:b8:4d:5c:69:4c:59:c9:0e:6f:df:29:93:d1:66:f1:1a:62:
bf:18:d0:1f:95:c3:70:8c:9b:62:0f:9a:ef:71:92:a0:af:1f:
cb:cd:fc:6b:f5:87:23:5e:e9:1a:af:30:f2:04:6a:68:d3:d5:
e3:5f:97:9f:00:82:2a:e4:fc:79:47:07:f6:ed:ff:84:ed:a8:
d5:73:f4:f8:a1:e3:91:e9:35:af:df:26:f6:8e:96:8f:f7:ac:
41:46:94:0a:4d:9c:45:12:1b:71:7b:62:e1:02:49:b9:2a:57:
60:f0:f1:37:23:af:69:22:b2:d2:cb:90:ee:04:a4:8a:a7:5a:
53:6b:b9:9b:c1:55:7f:08:8a:e8:97:1c:ad:c8:4d:40:f2:5f:
9b:27:29:c5:cb:b9:1b:12:c3:01:fc:2a:f4:84:74:9f:f0:88:
43:0c:ba:c3:fb:a7:3b:67:e9:18:cd:c1:f0:ce:6d:eb:6e:c4:
1c:e9:05:f4:2d:b8:7b:ef:e3:f3:0f:c7:60:62:27:23:e6:05:
c7:a9:bb:50:8e:af:21:bb:ab:f2:b0:8d:bb:e6:06:b3:5f:df:
29:1d:2f:40:cf:5b:ce:e2:c0:ff:6a:94:a7:48:25:9d:ba:d1:
9f:7e:23:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:32 2026 by rpki-client