Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139302e302f32332d3234203d3e20383334.roa
File: 3134372e3132352e3139302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: rh4wuIbOjMAOEAtyKotDO8gocGq6URi5WLOXR5QefnY=
Subject key identifier: D7:22:4D:FA:F7:CC:6A:94:A6:8A:FF:57:A1:C3:E1:33:EB:9E:1E:B1
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 716F24C555F19E03C9C78E3E7388D75F382F0B29
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139302e302f32332d3234203d3e20383334.roa
Signing time: Fri 17 Jul 2026 05:48:10 +0000
ROA not before: Fri 17 Jul 2026 05:43:10 +0000
ROA not after: Fri 16 Jul 2027 05:48:10 +0000
asID: 834
IP address blocks: 147.125.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:6f:24:c5:55:f1:9e:03:c9:c7:8e:3e:73:88:d7:5f:38:2f:0b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jul 17 05:43:10 2026 GMT
Not After : Jul 16 05:48:10 2027 GMT
Subject: CN=D7224DFAF7CC6A94A68AFF57A1C3E133EB9E1EB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:42:19:8b:77:fb:cb:ab:1a:bf:56:ac:42:71:
be:0c:6d:7a:67:cb:de:e0:c7:92:98:e4:6c:7f:35:
1a:d3:22:44:03:13:c4:e5:af:d0:b3:29:29:0d:1f:
d2:18:60:77:69:ba:46:e7:25:48:b1:3f:11:3a:2b:
36:59:f5:29:90:9d:58:68:ca:f2:84:0f:ca:4e:01:
7e:13:be:5a:a5:75:72:7b:ee:6e:c6:ec:a8:38:bd:
dc:81:bc:b1:97:d5:3f:c3:a2:f9:11:0c:89:97:56:
0a:5e:47:7d:58:a1:a9:67:9f:80:ea:c5:13:8d:ff:
c8:58:06:94:29:30:5c:ed:43:c8:23:36:c4:4e:aa:
5a:8b:b7:5c:69:50:af:67:db:5c:da:73:31:fe:23:
7b:ca:9d:17:f6:8e:03:4a:bd:9a:df:76:db:2a:1c:
71:33:81:85:b2:ef:fb:59:e9:1c:16:ee:d9:eb:38:
6d:d2:d5:6c:15:d7:a0:eb:48:65:51:10:c4:98:a3:
64:ff:86:0d:25:d1:f9:64:83:d3:0f:48:e9:dd:93:
a4:e4:d1:b4:81:d9:4d:b1:aa:76:6d:eb:24:96:e4:
eb:7f:b0:1c:47:03:9a:63:42:03:07:dc:8e:7c:94:
fa:b2:aa:db:e3:b1:a6:f6:ed:53:48:04:cc:b1:3a:
99:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:22:4D:FA:F7:CC:6A:94:A6:8A:FF:57:A1:C3:E1:33:EB:9E:1E:B1
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.190.0/23
Signature Algorithm: sha256WithRSAEncryption
44:22:e1:46:fa:da:be:a4:17:f6:c5:82:6c:44:d0:dd:7e:a0:
39:13:1f:11:6d:ae:86:d2:65:01:a0:78:89:b1:c4:00:0b:af:
7c:97:87:cc:a0:d5:0e:ee:e9:70:c2:e7:6e:70:e8:ee:07:5d:
c9:0a:b2:35:73:29:3b:7e:04:95:b5:d7:fe:b4:51:40:76:a2:
39:09:d0:68:e1:c6:de:45:ec:af:34:2b:49:22:8d:69:10:a5:
bb:af:61:80:af:60:df:23:48:e5:35:30:4d:87:f7:3b:de:6e:
5b:7c:5d:26:de:89:cb:22:23:e4:c6:f2:cf:7e:52:e1:58:aa:
d8:60:5f:36:ae:3c:d1:01:8c:57:4c:7d:92:6d:c7:3a:dc:6d:
3d:eb:b3:40:09:a4:0e:4f:8b:44:bc:a0:46:a8:9d:b6:84:20:
89:88:2d:03:84:61:f2:75:c2:92:54:02:55:af:9b:fa:94:97:
20:15:f2:e8:1a:88:6f:b9:f7:35:22:39:07:84:09:21:5c:ef:
9f:54:a7:90:95:a9:cb:39:9a:5a:31:de:04:00:0f:c0:98:4f:
e3:ec:98:f5:fb:a6:a9:0f:ab:e8:f3:fb:54:04:a0:3e:c3:87:
8d:18:37:05:8e:fc:10:99:46:c9:74:32:54:fe:ff:b2:76:7a:
29:0c:ba:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:53 2026 by rpki-client