Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138332e302f32342d3234203d3e20323139333734.roa
File: 3134372e3132352e3138332e302f32342d3234203d3e20323139333734.roa (raw, json)
Hash identifier: ZC227BqQ7hJ8avCIX2Xo/uTX1rSDFdMVabjY+wRxGoo=
Subject key identifier: F6:B0:BA:98:4E:8C:31:4B:CA:FF:1B:B1:33:6E:79:D6:36:C5:F5:C2
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 254B678A59A2E27A938EA3D30E5E8084ADDACACE
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138332e302f32342d3234203d3e20323139333734.roa
Signing time: Fri 17 Jul 2026 05:47:24 +0000
ROA not before: Fri 17 Jul 2026 05:42:24 +0000
ROA not after: Fri 16 Jul 2027 05:47:24 +0000
asID: 219374
IP address blocks: 147.125.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:4b:67:8a:59:a2:e2:7a:93:8e:a3:d3:0e:5e:80:84:ad:da:ca:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jul 17 05:42:24 2026 GMT
Not After : Jul 16 05:47:24 2027 GMT
Subject: CN=F6B0BA984E8C314BCAFF1BB1336E79D636C5F5C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:da:90:47:15:68:3c:35:2e:8a:c2:08:da:
5d:2e:ab:4c:4c:2d:83:6c:c0:58:14:23:cc:d2:89:
3e:e8:e1:8a:0a:f8:b0:ed:74:94:55:5c:12:14:a5:
d4:3a:e8:74:2e:5b:62:a6:a5:50:88:13:76:01:0c:
15:fa:e0:15:dd:78:9c:dc:1c:6b:73:cd:64:32:b8:
ab:18:5c:dc:3a:0b:7f:78:89:54:95:8a:2a:e2:cf:
76:70:1d:6e:d8:6c:d2:43:2b:00:1a:37:05:ed:94:
f2:38:20:25:3a:04:6b:66:c9:b9:9b:8d:a7:f6:32:
d8:26:53:42:50:f4:e3:0d:d9:6d:87:d6:a4:7f:2e:
3f:b8:f0:f2:ae:1b:e4:a5:b5:47:25:d8:a8:ee:ba:
22:af:42:3b:b2:3b:bd:13:b6:e7:6a:7f:e3:6c:35:
df:73:ee:f8:37:0f:c1:91:04:15:b2:f2:e9:c4:e6:
cd:7d:99:aa:8b:f2:ea:60:77:40:f8:49:ec:52:84:
09:1a:09:0b:47:66:11:f0:9c:5d:af:6c:d4:78:0d:
1b:3d:f6:bb:b9:7a:3e:33:c4:80:f2:3e:c7:b5:4e:
7d:ac:45:f8:d3:40:27:22:ca:ef:7a:71:4c:da:50:
a9:0d:26:99:b5:84:0b:6c:9f:e2:fc:01:0a:99:a1:
91:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B0:BA:98:4E:8C:31:4B:CA:FF:1B:B1:33:6E:79:D6:36:C5:F5:C2
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138332e302f32342d3234203d3e20323139333734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.183.0/24
Signature Algorithm: sha256WithRSAEncryption
97:09:d1:16:60:38:cc:de:14:a8:44:41:52:f7:73:4f:bb:51:
48:84:be:a5:cf:b8:b0:a7:74:de:e4:09:ba:12:c3:ea:ce:6e:
dc:4b:6f:6a:ba:e0:4f:e3:74:4c:22:61:18:4f:85:b2:4e:73:
27:0f:bd:70:0c:3c:f1:cd:e6:1b:6f:f9:fc:6b:7a:f6:3e:8c:
a8:69:29:f9:c9:df:51:0a:ae:6f:44:53:c5:c2:72:cc:6a:3c:
70:2a:94:a0:99:2b:2a:58:05:4d:74:7f:48:45:55:9e:32:aa:
8b:5a:5a:47:29:d6:bb:40:62:01:9c:80:03:6c:69:96:30:95:
03:65:3c:3d:bf:fc:fc:e2:0b:79:bc:f3:4b:a7:36:df:6f:12:
1c:a5:15:80:26:b6:e7:36:10:a0:61:5f:0c:e7:6c:72:a2:05:
7b:89:ab:ae:8f:70:2b:95:27:ef:3d:33:bd:fa:e8:16:e6:c8:
81:52:07:0d:2e:06:40:48:c6:1b:2e:69:76:3b:5b:c6:9a:ce:
de:70:0f:57:aa:a9:64:09:66:e0:44:b0:0c:d9:a4:64:88:91:
f8:6c:ad:d2:83:35:88:e6:e6:25:47:2d:37:e6:5c:7d:60:d0:
fc:1a:fe:f8:62:ae:75:b2:26:a5:2b:ad:8e:fe:e2:5d:3a:36:
cc:2e:b1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:55:22 2026 by rpki-client