Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139322e302f32342d3234203d3e20343032333433.roa
File: 3134372e3132352e3139322e302f32342d3234203d3e20343032333433.roa (raw, json)
Hash identifier: cQa7h6tLZV9DBlI4rPIkHnDTujY/97PiDYeRZJQa2NI=
Subject key identifier: 0D:C6:E9:1F:2B:AC:C1:5C:EB:97:91:BF:08:A1:D1:9D:9E:AE:CD:23
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 1E8EB96839DF7F83A4523E22EFAE0DD9DEAB7888
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139322e302f32342d3234203d3e20343032333433.roa
Signing time: Sun 28 Jun 2026 19:35:53 +0000
ROA not before: Sun 28 Jun 2026 19:30:53 +0000
ROA not after: Sun 27 Jun 2027 19:35:53 +0000
asID: 402343
IP address blocks: 147.125.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:8e:b9:68:39:df:7f:83:a4:52:3e:22:ef:ae:0d:d9:de:ab:78:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jun 28 19:30:53 2026 GMT
Not After : Jun 27 19:35:53 2027 GMT
Subject: CN=0DC6E91F2BACC15CEB9791BF08A1D19D9EAECD23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:45:c5:f0:cb:4b:a9:1d:f1:82:48:6c:00:68:
f9:8b:2a:00:3a:f9:98:7e:76:86:5b:f6:e3:db:1c:
76:bc:db:0e:d0:f0:50:6c:69:68:12:29:7e:f3:ff:
76:7a:51:d0:e0:5c:f5:40:a9:77:cc:47:c2:e5:73:
80:d3:35:7b:f8:d0:89:27:61:96:c7:bc:a8:b4:0b:
7a:38:28:ed:85:29:72:1d:02:f6:d0:14:ba:d1:06:
29:b6:0c:73:fb:19:e7:cb:aa:b0:89:26:9c:dc:da:
4e:3b:bb:52:4e:b7:b3:32:40:14:da:ad:4a:f0:ba:
0b:28:3a:5f:9a:e5:96:1a:ce:3f:9e:77:e3:65:84:
01:6e:27:76:cc:68:31:1b:b9:d1:6c:70:1c:9b:27:
68:d6:2f:e1:5b:6f:d9:c2:b9:9f:2d:3c:10:49:ef:
d4:da:ce:08:97:80:f6:34:2c:43:c2:6c:2a:cf:2c:
75:30:39:c0:52:71:c1:61:56:bf:c0:01:8b:6c:57:
ee:f2:c1:8e:7b:e3:0f:bd:da:f7:9e:bd:ca:09:ef:
12:33:33:0a:cf:ff:92:fa:56:2b:cc:08:20:ed:f0:
76:c1:20:ae:9b:95:49:09:77:8b:7f:87:a2:a2:b7:
ca:9f:92:8f:7d:3a:4c:23:b6:8b:40:94:98:3a:21:
e6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C6:E9:1F:2B:AC:C1:5C:EB:97:91:BF:08:A1:D1:9D:9E:AE:CD:23
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139322e302f32342d3234203d3e20343032333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.192.0/24
Signature Algorithm: sha256WithRSAEncryption
60:59:68:32:6c:cf:63:ab:15:af:06:aa:d8:16:38:b5:43:01:
da:a9:ad:02:eb:7b:af:e0:11:14:8d:2d:eb:e2:cf:fa:33:7c:
fc:d6:d7:16:34:3f:1c:ac:b6:ba:aa:d8:5e:a1:1d:33:ce:77:
57:7c:07:cf:10:93:27:70:98:e1:9e:2d:76:12:34:27:cb:da:
52:60:9e:6f:fa:81:e3:5d:63:d1:25:70:88:de:c2:ec:ff:97:
b9:07:64:bd:5d:39:d5:cf:99:94:33:62:06:70:d1:c3:a7:e6:
2b:1e:16:19:87:65:57:9e:b4:a7:9b:11:25:f0:22:71:32:f5:
e1:0a:cd:2c:61:cd:a8:45:6f:f5:5e:c0:e5:76:fc:94:0b:17:
b9:2d:b2:a5:52:8e:09:48:e6:01:25:2e:3a:79:b6:79:0b:64:
0f:9a:59:f5:51:d9:4e:9e:d3:9b:63:9e:fb:36:d9:4c:d1:00:
20:eb:18:fd:6e:d1:5a:45:d7:5f:ee:43:8b:4b:48:fa:b8:cd:
21:ce:3b:2a:8d:9e:ac:d8:7c:0c:6b:30:00:d5:22:2c:cd:dc:
4e:0d:cd:b2:3e:41:e3:b0:ed:b5:ae:76:83:74:09:11:66:09:
99:8f:ff:20:dd:26:ce:ae:b4:c1:ec:85:8f:9e:12:9e:bb:03:
77:87:9f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:42:25 2026 by rpki-client