Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138352e302f32342d3234203d3e20323139333734.roa
File: 3134372e3132352e3138352e302f32342d3234203d3e20323139333734.roa (raw, json)
Hash identifier: hdWcsHS0MOz6vGX3CA0MFVEj9Rk/xhxnBWDrkk35omc=
Subject key identifier: 04:9E:E0:60:3D:93:6F:1B:A8:54:E9:A8:13:E9:CB:7C:B1:CE:D6:B8
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 5A899272F0BC078D790882B796B4B49BA9F4CA29
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138352e302f32342d3234203d3e20323139333734.roa
Signing time: Fri 17 Jul 2026 05:47:23 +0000
ROA not before: Fri 17 Jul 2026 05:42:23 +0000
ROA not after: Fri 16 Jul 2027 05:47:23 +0000
asID: 219374
IP address blocks: 147.125.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:89:92:72:f0:bc:07:8d:79:08:82:b7:96:b4:b4:9b:a9:f4:ca:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jul 17 05:42:23 2026 GMT
Not After : Jul 16 05:47:23 2027 GMT
Subject: CN=049EE0603D936F1BA854E9A813E9CB7CB1CED6B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0a:75:6e:51:04:be:56:d5:b9:02:b7:6c:85:
19:38:ea:c8:e5:86:96:d1:55:e7:ea:39:f7:9c:04:
60:e3:29:b6:b2:be:93:c6:90:a7:e1:91:c1:fd:62:
dc:28:d2:0d:03:59:58:17:93:24:a6:7a:5b:5c:4a:
bb:43:28:8e:57:2f:7d:43:3b:69:07:d5:0c:77:cf:
c5:14:b5:30:22:43:39:25:f5:06:b0:d9:c5:5f:68:
d7:93:a9:3f:1e:b3:62:8a:64:1f:92:be:2e:b8:59:
ad:24:65:26:75:f9:e4:03:b4:b5:88:6e:97:b8:d8:
1b:36:42:1f:c2:54:ba:ed:ea:93:ae:09:a0:fa:d9:
6e:bc:46:0f:b1:2f:fe:69:31:38:b8:b8:13:97:34:
92:6d:9e:de:81:51:70:ba:58:a6:f6:71:ad:0d:a2:
06:cc:45:57:c6:5d:96:e0:4b:7b:ca:cc:0d:99:42:
1a:a2:31:0f:bf:6c:56:29:8a:b3:83:85:8d:7c:2d:
d2:b5:72:53:b6:40:ad:ce:77:e5:b9:f6:b2:32:0f:
9f:43:4d:e3:46:6d:6a:82:58:50:9e:c7:ef:67:c9:
d2:91:ce:d8:ae:34:63:57:b2:08:47:bd:60:3f:14:
e5:ba:2e:7d:3d:59:56:f7:d4:fe:8d:fd:43:e2:cf:
85:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9E:E0:60:3D:93:6F:1B:A8:54:E9:A8:13:E9:CB:7C:B1:CE:D6:B8
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138352e302f32342d3234203d3e20323139333734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.185.0/24
Signature Algorithm: sha256WithRSAEncryption
13:70:9a:bc:e2:cf:d9:2e:b0:9b:95:6b:2e:8c:85:a7:4f:28:
a2:13:2a:9f:0f:05:fa:48:d3:20:08:56:89:64:0b:18:b2:c5:
00:07:cd:b5:87:ba:ef:51:62:b7:f8:80:4a:a3:9f:b7:65:8f:
94:f6:2d:5d:a1:de:8c:fb:f8:47:17:db:bf:27:10:4d:6b:0f:
97:24:21:ae:de:2b:cb:5f:f4:23:3a:1c:ed:1f:22:49:5e:45:
10:7e:fe:e6:7b:35:3b:b2:f7:f3:68:4e:c6:07:c4:a6:7e:b9:
02:c6:6c:06:53:01:0d:e0:2c:21:1a:40:14:8d:08:84:eb:75:
b2:17:20:e4:7d:60:4d:38:28:28:85:fd:29:08:97:36:d8:f5:
75:07:4f:3b:0b:c5:d7:03:23:3e:b9:82:ec:e8:1c:e9:78:2e:
f2:5a:de:c9:d2:55:d6:9b:01:39:c6:48:0e:6a:1a:5a:85:ba:
ae:55:35:51:a7:00:9d:42:14:0e:65:36:a4:68:cd:5c:47:d2:
94:a1:37:17:94:f8:50:b4:e0:b7:0a:ab:88:c6:f6:c1:c7:65:
79:00:75:21:d5:59:17:84:e7:b7:14:02:3e:ce:1b:c5:40:b4:
53:5f:67:fc:67:27:3e:5b:e5:70:55:a0:19:1b:ae:0c:ee:10:
31:e8:53:a5
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUWomScvC8B415CIK3lrS0m6n0yikwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNjA3MTcwNTQyMjNaFw0yNzA3MTYwNTQ3MjNaMDMxMTAvBgNV
BAMTKDA0OUVFMDYwM0Q5MzZGMUJBODU0RTlBODEzRTlDQjdDQjFDRUQ2QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtCnVuUQS+VtW5ArdshRk46sjl
hpbRVefqOfecBGDjKbayvpPGkKfhkcH9Ytwo0g0DWVgXkySmeltcSrtDKI5XL31D
O2kH1Qx3z8UUtTAiQzkl9Qaw2cVfaNeTqT8es2KKZB+Svi64Wa0kZSZ1+eQDtLWI
bpe42Bs2Qh/CVLrt6pOuCaD62W68Rg+xL/5pMTi4uBOXNJJtnt6BUXC6WKb2ca0N
ogbMRVfGXZbgS3vKzA2ZQhqiMQ+/bFYpirODhY18LdK1clO2QK3Od+W59rIyD59D
TeNGbWqCWFCex+9nydKRztiuNGNXsghHvWA/FOW6Ln09WVb31P6N/UPiz4VvAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUBJ7gYD2TbxuoVOmoE+nLfLHO1rgwHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx
MzgzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzOTMzMzczNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAJN9uTANBgkqhkiG9w0BAQsFAAOCAQEAE3CavOLP2S6wm5VrLoyFp08oohMq
nw8F+kjTIAhWiWQLGLLFAAfNtYe671Fit/iASqOft2WPlPYtXaHejPv4RxfbvycQ
TWsPlyQhrt4ry1/0Izoc7R8iSV5FEH7+5ns1O7L382hOxgfEpn65AsZsBlMBDeAs
IRpAFI0IhOt1shcg5H1gTTgoKIX9KQiXNtj1dQdPOwvF1wMjPrmC7Ogc6Xgu8lre
ydJV1psBOcZIDmoaWoW6rlU1UacAnUIUDmU2pGjNXEfSlKE3F5T4ULTgtwqriMb2
wcdleQB1IdVZF4TntxQCPs4bxUC0U19n/GcnPlvlcFWgGRuuDO4QMehTpQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:26:24 2026 by rpki-client