Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138382e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3138382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: VODpS1+d5Z3NYtuHAUZeaMRbwLlrmTPVBn0Z2ONZ+jc=
Subject key identifier: 2C:20:56:AE:67:19:3B:FC:C9:61:A3:FC:8C:9C:4E:83:99:F5:3B:22
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 6C7AECA88531C9A36DC91C84CDE764360F7DCFDF
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138382e302f32342d3234203d3e20383334.roa
Signing time: Fri 17 Jul 2026 05:48:10 +0000
ROA not before: Fri 17 Jul 2026 05:43:10 +0000
ROA not after: Fri 16 Jul 2027 05:48:10 +0000
asID: 834
IP address blocks: 147.125.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:7a:ec:a8:85:31:c9:a3:6d:c9:1c:84:cd:e7:64:36:0f:7d:cf:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jul 17 05:43:10 2026 GMT
Not After : Jul 16 05:48:10 2027 GMT
Subject: CN=2C2056AE67193BFCC961A3FC8C9C4E8399F53B22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5e:80:32:46:ad:1f:7b:c9:df:14:f5:a6:ba:
a0:9c:14:87:9d:79:47:10:ea:fc:83:0f:c7:07:12:
cb:10:11:a9:77:3a:8e:68:49:df:9e:b9:16:9c:70:
f2:cf:ea:51:c9:d7:d1:29:0f:6a:cc:e6:75:88:7d:
df:26:88:b9:d6:0a:03:24:18:7b:f5:7f:f5:05:c0:
67:a7:9d:65:62:64:48:d6:c2:18:07:39:42:d6:39:
43:a3:58:60:68:f7:78:f7:ea:64:ed:7b:9e:84:f1:
57:71:dd:53:66:4e:bf:36:19:3b:e6:8e:56:26:14:
a6:37:b2:31:19:9a:07:ab:45:80:75:08:ea:34:f2:
a9:65:16:96:80:ee:0a:a3:8d:7f:c7:27:4c:10:06:
4f:1d:a0:7d:3d:31:a5:56:06:cf:cf:61:59:d8:1a:
c9:6a:8a:0d:34:cf:37:3e:6a:a0:0d:d8:66:ab:38:
13:59:8b:3d:fc:f9:57:30:f8:6b:bf:c2:f4:90:40:
0f:74:34:23:5b:50:f5:de:d1:00:f6:6f:62:a5:e9:
bd:45:2a:85:a4:26:fb:4f:e0:a1:71:fe:07:53:09:
d9:a2:14:b0:20:a8:c5:7c:df:3b:fa:6b:59:54:35:
8c:de:4e:e2:3c:23:c5:e6:d8:1c:bf:cb:85:fb:c5:
69:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:20:56:AE:67:19:3B:FC:C9:61:A3:FC:8C:9C:4E:83:99:F5:3B:22
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.188.0/24
Signature Algorithm: sha256WithRSAEncryption
04:dd:71:88:4e:04:7b:84:d3:26:1d:51:0c:61:86:8e:1b:23:
7b:8f:fd:e9:c8:5f:d1:7c:d0:b3:3e:94:a6:8e:a4:38:33:49:
ae:ec:a9:88:3e:4e:66:32:f0:b6:28:05:c9:9d:1f:8c:af:65:
f4:cb:a1:9a:65:2f:b0:5f:7e:ec:5d:3e:f9:92:5b:06:3a:aa:
68:2e:d8:f8:df:5f:7a:0c:f3:76:67:b8:93:e9:60:c6:3a:ea:
65:bd:c6:33:e0:5f:df:84:aa:9c:20:81:cb:0a:d1:e2:ca:6f:
5a:e4:55:78:ae:ef:ec:d8:bc:d2:0e:68:77:4a:2d:6d:f3:2c:
16:71:73:2d:77:cb:3a:35:3c:61:eb:5a:ea:1e:6d:63:10:43:
a7:53:7a:f6:c5:de:f2:c1:98:bc:18:1c:fa:0b:55:55:09:b4:
5d:c7:6b:2a:ef:2d:a1:b5:cb:80:43:be:04:dc:ec:04:3f:f1:
0e:52:2b:7b:ae:ad:91:ab:af:d9:5b:e9:3f:3d:66:7a:f9:00:
38:cb:cb:95:a5:53:2f:55:cf:0c:36:16:c9:2c:e6:56:6d:4d:
ff:ef:fe:01:96:8b:64:85:6c:bf:de:02:33:9c:f1:01:61:b9:
b9:05:86:1a:e9:b4:bb:26:10:1b:b1:34:0e:f2:66:aa:d1:f3:
b2:88:e8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:55:23 2026 by rpki-client