Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138342e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3138342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: tVNeIq6ELGnLFssd5LpQHfLvRq7CZ+vYDPy54eb43EM=
Subject key identifier: 30:23:CD:AC:59:7D:D6:34:DC:82:27:D2:AF:F7:BA:5D:FD:91:56:B5
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 42BAF16BAAD81860F8CC5A9E96D619E1ADBCFE0C
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138342e302f32342d3234203d3e20383334.roa
Signing time: Thu 03 Sep 2026 18:52:37 +0000
ROA not before: Thu 03 Sep 2026 18:47:37 +0000
ROA not after: Thu 02 Sep 2027 18:52:37 +0000
asID: 834
IP address blocks: 147.125.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 13:47:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:ba:f1:6b:aa:d8:18:60:f8:cc:5a:9e:96:d6:19:e1:ad:bc:fe:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 3 18:47:37 2026 GMT
Not After : Sep 2 18:52:37 2027 GMT
Subject: CN=3023CDAC597DD634DC8227D2AFF7BA5DFD9156B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ae:58:a3:7d:38:4b:f1:2c:f8:75:59:79:15:
d1:3c:67:33:10:fa:12:7f:40:18:6d:af:18:db:10:
1f:91:c9:02:f7:18:66:da:ad:a6:b8:6b:00:df:33:
d3:bf:04:82:b4:63:f0:14:3f:59:f2:87:b1:d3:cb:
51:7d:2b:d5:a5:e6:4b:e4:dc:da:00:27:59:41:2c:
ba:00:4a:8b:f5:24:25:76:cc:be:6a:92:a9:66:2f:
21:bb:26:da:a0:01:ee:07:6d:c6:47:7f:93:26:d9:
ce:fc:8f:1f:20:06:4b:c9:f9:fc:d2:3a:e8:24:9b:
13:6e:21:c5:54:27:cf:1e:f1:ac:2e:fe:32:3a:36:
3a:32:b9:e4:96:7c:a5:b5:70:24:2e:d0:e6:f0:76:
f3:52:29:f7:79:93:fd:40:14:27:c2:f3:cd:58:37:
ba:4e:fa:60:38:f7:fc:ce:5c:f1:fd:4a:19:bc:e9:
fa:d6:1d:6c:2b:da:19:f1:26:b3:14:5e:53:59:f1:
26:e8:58:fa:8e:18:f9:1c:84:76:26:54:69:06:f6:
0e:b4:e8:a5:9b:7f:82:0c:d4:9b:d9:c5:76:a0:ca:
cd:96:41:37:a4:de:2a:29:d1:b5:ea:8c:52:b6:6a:
b5:bb:c1:03:95:52:05:cf:58:6a:79:52:ff:42:fd:
dc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:23:CD:AC:59:7D:D6:34:DC:82:27:D2:AF:F7:BA:5D:FD:91:56:B5
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.184.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:99:2c:2b:72:6e:3f:f5:3d:87:8f:f3:9b:b6:66:07:19:f1:
c3:e3:5c:6a:c1:73:06:67:88:0b:51:e3:4e:b9:ab:66:fa:24:
0f:27:6e:05:49:dc:12:06:48:80:13:5d:95:d7:8e:2a:db:55:
db:87:14:dc:0e:ed:4f:5a:e4:10:76:eb:43:70:8c:a4:bd:41:
73:db:cf:c5:a4:40:ec:5d:de:8e:fb:ba:2e:43:51:2f:3d:1c:
78:f6:12:ac:e4:54:25:8b:50:a8:e5:91:10:3c:3a:57:02:ea:
a4:ef:f4:19:4d:84:53:dc:b9:fb:27:0a:09:1e:d6:47:73:38:
d3:d2:53:47:ca:36:33:11:3e:59:a5:c1:bd:6d:ea:dc:56:a1:
20:a4:f4:03:9a:e9:5c:a3:1f:91:fa:f3:54:8e:1d:a1:9d:b1:
50:8c:38:71:60:19:4f:a3:59:70:20:b5:f7:86:91:3b:52:9e:
87:84:df:4e:54:00:96:2e:5f:a4:a9:7c:09:5a:81:1b:a0:1b:
28:81:d1:39:f2:c8:11:82:d6:cc:6d:1e:7a:a4:eb:c4:ee:75:
0a:20:c3:34:b5:05:bf:5b:ca:58:d8:43:b0:00:37:b8:a3:53:
a1:5a:de:2e:5e:9e:da:3a:15:3c:27:19:c8:22:21:ee:c3:77:
cd:0f:26:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:07:30 2026 by rpki-client