Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138342e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3138342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: DmVPc6GZnklybSNLmTB+pjW0d/WIzrBnyOyf1BY2Yxk=
Subject key identifier: 6F:9B:39:52:FD:19:AD:36:51:7E:A3:95:52:6D:37:52:06:A8:51:26
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 7833B888B2E90681B94743830D090E3055C8B931
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138342e302f32342d3234203d3e20383334.roa
Signing time: Fri 17 Jul 2026 05:48:10 +0000
ROA not before: Fri 17 Jul 2026 05:43:10 +0000
ROA not after: Fri 16 Jul 2027 05:48:10 +0000
asID: 834
IP address blocks: 147.125.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:33:b8:88:b2:e9:06:81:b9:47:43:83:0d:09:0e:30:55:c8:b9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jul 17 05:43:10 2026 GMT
Not After : Jul 16 05:48:10 2027 GMT
Subject: CN=6F9B3952FD19AD36517EA395526D375206A85126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ee:15:06:8b:8d:ec:13:d2:2c:19:65:0d:2c:
4b:36:d9:a6:27:a5:12:38:15:f5:c8:3d:a7:93:f0:
41:6a:7d:74:e9:7e:fc:ed:50:e9:ab:22:6c:70:88:
02:8a:5d:00:cf:e6:64:9a:34:4c:83:fe:e2:78:9a:
84:1e:b1:98:44:78:eb:ae:b2:93:20:02:3d:34:16:
db:23:9b:f4:f0:0d:2f:55:73:e1:13:1a:65:5f:19:
31:68:b4:9d:10:48:fb:84:f3:7b:c7:45:f4:9d:01:
d1:ca:d9:79:fb:1f:ee:f6:03:83:99:03:8d:32:d2:
42:6d:24:55:7c:fd:0b:dd:2c:a6:3d:f6:f0:ec:03:
f5:2d:40:5d:33:87:67:d4:b0:1b:56:43:55:a4:d8:
fc:89:b9:83:58:19:17:a1:c4:87:45:e9:01:85:3d:
3b:46:99:2d:59:25:cb:a7:79:09:70:bd:55:d0:db:
99:2a:bc:b8:3d:ed:c3:23:09:a9:10:b3:e3:13:ed:
a3:d7:ce:6d:c9:cc:72:f0:45:08:eb:16:1d:b8:4b:
4f:6c:92:63:d8:2e:7b:a6:b0:71:f0:80:fd:48:4f:
8a:d7:f7:e4:47:95:67:62:d9:80:ff:39:e5:7a:65:
24:1a:ee:52:9f:06:46:78:58:19:73:a2:ae:e2:62:
80:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9B:39:52:FD:19:AD:36:51:7E:A3:95:52:6D:37:52:06:A8:51:26
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.184.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:8d:0a:6b:d1:93:16:08:59:3b:b8:d5:0f:6d:fa:c4:5f:88:
c5:7e:65:0a:ef:8d:76:dd:e9:b1:c4:90:e1:4b:9c:97:dc:da:
d2:d8:ad:ae:d4:8f:d4:61:70:48:12:c6:b3:2f:61:3c:47:2b:
10:b5:e3:14:b8:88:13:ca:87:21:3f:4c:a7:af:18:96:6f:e1:
4a:5f:56:1f:0b:24:bc:87:48:08:dc:f0:e1:dd:eb:37:bc:c7:
6d:18:1a:69:08:9a:9b:69:b8:22:d0:36:43:f3:70:8e:62:b3:
7e:2f:a1:cc:f7:f7:11:3c:9e:60:e3:c4:b4:8f:30:73:df:9e:
17:2a:cf:29:ba:8b:9b:05:e5:bc:1b:9b:b7:d3:02:15:8e:dd:
ff:39:03:67:b8:06:68:7c:08:ee:d1:fa:4c:6a:51:51:4c:b6:
43:0a:b9:07:44:29:39:73:b5:7a:de:08:92:98:84:dd:87:47:
c4:7c:2b:fa:73:9b:85:5b:c9:1d:22:2f:1a:8a:7c:d2:d7:3d:
5b:ad:74:05:1f:80:b7:59:39:51:f8:01:7d:19:89:da:47:14:
67:80:16:fb:50:a8:b4:ee:e2:bd:7b:4f:0e:a0:cd:57:58:ef:
2b:a8:ff:d4:01:75:62:e8:9e:29:cf:06:c1:c2:b4:32:46:f0:
9b:81:d0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:01:53 2026 by rpki-client