Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138392e302f32342d3234203d3e20323139333734.roa
File: 3134372e3132352e3138392e302f32342d3234203d3e20323139333734.roa (raw, json)
Hash identifier: eRSx7Ns2upXJ59Z7IoLzUpagbmGqPvDG/k9BxPYOqqI=
Subject key identifier: 28:B0:94:AC:97:86:88:C0:D1:8E:10:BF:22:A1:D5:E6:9A:DF:D2:57
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 028C4FA2259EBA91F911B8B7C2A25579C5D69780
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138392e302f32342d3234203d3e20323139333734.roa
Signing time: Fri 17 Jul 2026 05:47:25 +0000
ROA not before: Fri 17 Jul 2026 05:42:25 +0000
ROA not after: Fri 16 Jul 2027 05:47:25 +0000
asID: 219374
IP address blocks: 147.125.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:8c:4f:a2:25:9e:ba:91:f9:11:b8:b7:c2:a2:55:79:c5:d6:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jul 17 05:42:25 2026 GMT
Not After : Jul 16 05:47:25 2027 GMT
Subject: CN=28B094AC978688C0D18E10BF22A1D5E69ADFD257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0d:6f:2d:95:e6:c5:d5:77:d0:fe:66:31:48:
d9:e0:f9:02:a1:23:5a:00:b6:02:ee:92:a0:c9:7c:
6c:b5:99:35:e7:14:2e:6e:65:03:4d:46:a5:b0:02:
b8:1e:5d:75:f5:9f:20:30:e2:29:73:66:39:a1:e1:
7b:28:34:00:16:5e:8f:65:89:6a:13:cf:f6:de:74:
18:a1:75:5c:c1:35:89:a1:60:c4:c8:c5:bf:7b:ce:
0b:e4:54:66:d7:8d:f8:3e:e4:e6:46:9a:89:5a:64:
47:ee:4e:de:f8:e5:d0:02:36:bc:6f:c3:0e:17:20:
74:2b:83:71:47:f3:3f:f2:14:f9:f7:65:a7:92:32:
4e:42:2b:02:d8:c5:e7:f6:66:cb:da:0b:cf:a3:95:
ed:9c:53:b7:6e:f5:79:43:20:5a:3a:6d:88:97:42:
b1:c4:19:b9:87:55:c7:2d:1e:6f:6c:bb:bb:ef:68:
25:28:48:8e:ca:eb:1f:95:ff:c4:ef:9a:50:e5:20:
e6:81:2e:31:9c:3d:b1:e3:95:bd:e0:29:7e:c7:07:
ad:3e:cc:32:25:f1:51:80:36:25:06:39:74:53:0a:
e0:75:6e:4a:13:8f:d6:f6:4d:7b:e6:3e:32:3d:73:
1a:af:d0:82:11:b9:76:f7:a6:25:4f:8c:f5:d8:42:
43:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B0:94:AC:97:86:88:C0:D1:8E:10:BF:22:A1:D5:E6:9A:DF:D2:57
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138392e302f32342d3234203d3e20323139333734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.189.0/24
Signature Algorithm: sha256WithRSAEncryption
33:77:8c:90:8a:bb:10:ca:19:3c:9a:2c:15:b5:d2:10:6c:db:
b4:2a:63:a1:bc:de:a8:a9:c1:30:8b:ab:65:83:d9:b8:77:78:
44:28:d8:89:3b:da:18:a9:07:63:02:ad:ff:bd:45:72:82:98:
95:3f:e9:4b:96:70:13:f8:a8:cb:3b:ba:94:ad:fb:bb:f5:ce:
00:74:7d:b1:af:ec:b2:86:95:44:9e:2d:7e:bf:39:f2:fc:56:
4d:50:b4:88:49:3c:2e:48:db:14:67:eb:8b:49:fd:4a:48:81:
e0:6c:8d:24:f6:10:89:01:76:fc:f7:a9:b2:90:25:a1:65:ee:
a8:3d:35:e5:a1:a0:c5:c9:ee:ca:4c:9f:46:f0:29:a1:f8:03:
d1:70:5b:76:ef:87:01:75:9b:03:9b:73:a0:93:3d:69:cd:5a:
fb:72:83:19:e3:93:ad:02:25:dd:d9:5a:d5:c6:ac:da:c5:95:
c1:e9:bc:2f:84:63:38:74:e9:49:82:d2:80:6a:ba:cc:9f:bb:
42:94:ff:29:f2:ba:e0:a2:93:52:d9:72:ee:3d:47:8b:02:b9:
59:80:e1:1e:07:ad:bd:04:6b:fa:72:15:a2:fd:ff:7e:2f:6a:
05:a4:26:48:07:f9:31:fb:fb:53:da:7e:c3:e9:17:d6:86:de:
a7:e6:d6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:03:06 2026 by rpki-client