Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138362e302f32332d3234203d3e20383334.roa
File: 3134372e3132352e3138362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: OSU8JnBlUqWuNI6524vBJswzgTXKWpJPFaHjVy+mdQQ=
Subject key identifier: 23:68:57:9C:28:AA:E9:28:CC:63:D3:ED:F1:24:BB:4B:3F:BE:64:B5
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 5909747C917DCC2C87F3E6060D1AD54AAF45CAD6
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138362e302f32332d3234203d3e20383334.roa
Signing time: Fri 17 Jul 2026 05:48:10 +0000
ROA not before: Fri 17 Jul 2026 05:43:10 +0000
ROA not after: Fri 16 Jul 2027 05:48:10 +0000
asID: 834
IP address blocks: 147.125.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:09:74:7c:91:7d:cc:2c:87:f3:e6:06:0d:1a:d5:4a:af:45:ca:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jul 17 05:43:10 2026 GMT
Not After : Jul 16 05:48:10 2027 GMT
Subject: CN=2368579C28AAE928CC63D3EDF124BB4B3FBE64B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:f8:30:46:93:95:2b:60:f0:e6:6a:bf:5d:
82:89:da:04:b7:52:28:49:86:16:97:2a:41:77:8d:
b9:d7:f1:34:01:dd:43:b8:34:99:a9:b0:f9:c4:b4:
23:3c:3e:37:94:8f:97:2e:80:7b:81:c4:87:a0:48:
95:54:c2:ba:d1:f0:26:98:ba:41:69:e3:59:2d:b7:
41:11:3a:6c:b4:1b:c3:76:81:f6:46:33:14:68:65:
ae:08:0b:a6:b7:f7:d6:eb:c9:56:4a:41:0d:96:1a:
86:3c:97:f6:1d:bb:23:1c:f8:05:16:6a:32:0b:93:
c4:27:92:1a:7c:52:10:c2:1d:6f:41:3d:d9:79:96:
e4:dd:53:ec:7a:15:6b:6a:de:ea:1e:87:bc:a5:5c:
e3:bc:52:9b:f4:2f:ac:4e:45:5c:d7:e1:8b:a0:5e:
4a:c1:5e:43:08:fd:ae:3a:29:03:99:f6:f9:64:e6:
39:d4:60:77:6f:d4:b2:14:2c:85:82:09:f8:c7:99:
78:9d:d1:83:9a:62:7f:58:7d:92:30:9b:9f:88:19:
c1:db:d7:4a:b5:ae:d2:aa:1d:8b:ae:44:6c:73:4e:
d8:6c:f3:44:e1:ca:fd:6f:1c:82:23:02:5c:2a:2f:
dd:2d:3a:74:db:86:49:18:5c:3f:6c:3a:58:55:9f:
82:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:68:57:9C:28:AA:E9:28:CC:63:D3:ED:F1:24:BB:4B:3F:BE:64:B5
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.186.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:4e:f8:93:96:0f:b1:78:4d:d0:f9:d5:eb:7a:a1:d8:93:0c:
be:ad:cc:c0:d5:97:52:b1:09:9c:b1:bd:68:f4:d2:d5:e8:7b:
7e:20:1d:62:b8:f2:0a:dd:09:84:c5:29:3d:56:f0:9a:7f:b2:
f9:95:35:aa:a2:57:ca:eb:66:44:7b:b1:ba:63:5e:a5:e2:a1:
bf:50:7a:c5:e5:89:3c:14:38:5a:cb:47:11:21:a3:12:0d:ed:
4d:65:3b:4e:82:a7:0f:94:99:34:22:58:5d:f7:42:4e:d0:cd:
93:63:93:37:29:1d:eb:21:80:6a:0b:8b:70:38:43:c9:92:c5:
15:a4:12:4b:ee:04:dd:c6:95:f5:25:b6:fe:19:b1:c0:57:70:
a4:0e:3a:80:a7:15:f1:52:48:07:b7:13:fe:f8:e2:15:1c:f9:
42:93:f0:90:4d:a6:bf:cd:18:dc:81:8c:45:b9:4e:fd:2d:8d:
75:aa:dd:28:5f:4b:9e:c6:58:a5:32:f3:10:a3:fb:9a:dd:83:
67:5d:25:1a:96:90:30:8c:5c:d1:8c:ce:e4:4c:86:4e:9f:3c:
a1:19:31:40:8a:22:33:ef:35:ba:07:0d:5d:26:4c:f8:0f:1a:
a2:fe:8d:14:5f:fb:96:2d:b2:13:91:57:5f:03:83:d2:3d:65:
16:db:88:2d
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUWQl0fJF9zCyH8+YGDRrVSq9FytYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNjA3MTcwNTQzMTBaFw0yNzA3MTYwNTQ4MTBaMDMxMTAvBgNV
BAMTKDIzNjg1NzlDMjhBQUU5MjhDQzYzRDNFREYxMjRCQjRCM0ZCRTY0QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzB/gwRpOVK2Dw5mq/XYKJ2gS3
UihJhhaXKkF3jbnX8TQB3UO4NJmpsPnEtCM8PjeUj5cugHuBxIegSJVUwrrR8CaY
ukFp41ktt0EROmy0G8N2gfZGMxRoZa4IC6a399bryVZKQQ2WGoY8l/YduyMc+AUW
ajILk8Qnkhp8UhDCHW9BPdl5luTdU+x6FWtq3uoeh7ylXOO8Upv0L6xORVzX4Yug
XkrBXkMI/a46KQOZ9vlk5jnUYHdv1LIULIWCCfjHmXid0YOaYn9YfZIwm5+IGcHb
10q1rtKqHYuuRGxzTths80Thyv1vHIIjAlwqL90tOnTbhkkYXD9sOlhVn4KVAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUI2hXnCiq6SjMY9Pt8SS7Sz++ZLUwHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx
MzgzNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZN9
ujANBgkqhkiG9w0BAQsFAAOCAQEAT074k5YPsXhN0PnV63qh2JMMvq3MwNWXUrEJ
nLG9aPTS1eh7fiAdYrjyCt0JhMUpPVbwmn+y+ZU1qqJXyutmRHuxumNepeKhv1B6
xeWJPBQ4WstHESGjEg3tTWU7ToKnD5SZNCJYXfdCTtDNk2OTNykd6yGAaguLcDhD
yZLFFaQSS+4E3caV9SW2/hmxwFdwpA46gKcV8VJIB7cT/vjiFRz5QpPwkE2mv80Y
3IGMRblO/S2NdardKF9LnsZYpTLzEKP7mt2DZ10lGpaQMIxc0YzO5EyGTp88oRkx
QIoiM+81ugcNXSZM+A8aov6NFF/7li2yE5FXXwOD0j1lFtuILQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:02:20 2026 by rpki-client