Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139342e302f32332d3234203d3e20383334.roa
File: 3134372e3132352e3139342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: 3ZPmYVeitcSuVuCJRMqgDNHbnKZjgFiBIuaMgnxz4gA=
Subject key identifier: 2E:4C:52:64:B2:34:9A:BF:03:B7:BA:BB:F4:CE:E7:70:9D:E6:0B:10
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 366941300F80D7EC6E3010C16B06B52A744AC153
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139342e302f32332d3234203d3e20383334.roa
Signing time: Fri 03 Jul 2026 12:38:28 +0000
ROA not before: Fri 03 Jul 2026 12:33:28 +0000
ROA not after: Fri 02 Jul 2027 12:38:28 +0000
asID: 834
IP address blocks: 147.125.194.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:69:41:30:0f:80:d7:ec:6e:30:10:c1:6b:06:b5:2a:74:4a:c1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jul 3 12:33:28 2026 GMT
Not After : Jul 2 12:38:28 2027 GMT
Subject: CN=2E4C5264B2349ABF03B7BABBF4CEE7709DE60B10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:71:a6:a6:40:00:26:c1:95:e4:0a:13:08:40:
8b:da:c6:81:23:71:ff:6e:c9:eb:72:93:76:59:63:
1f:72:24:b9:38:d5:83:3f:44:07:f3:a4:84:cb:f8:
ee:16:3f:c9:d5:d0:d0:75:f9:91:83:5a:a2:6f:c1:
0a:7a:bc:23:1a:99:de:19:6f:ea:23:b9:48:bd:22:
97:4f:ba:b8:0b:aa:5a:91:be:9c:da:72:47:de:fb:
c1:44:64:0f:8e:7a:d6:db:9b:62:90:21:26:d0:6d:
54:88:74:af:97:5b:df:fe:e9:5f:61:06:8f:97:0a:
5a:68:5d:44:15:b6:75:a7:7e:f1:77:d0:11:ff:56:
ab:dd:bd:d4:43:9c:3d:3f:fb:4b:c2:a7:02:2d:64:
09:9b:c7:67:2e:6c:6b:5a:76:7d:d8:a3:9a:ae:94:
ba:c4:10:7b:49:16:99:49:ee:fe:d3:a1:8e:50:09:
30:d5:be:ea:00:f9:80:6a:b0:fb:1e:bd:7a:fd:d2:
eb:68:96:03:1d:d5:5a:44:5e:7e:78:50:15:77:d9:
b5:2e:3a:00:54:bc:69:bd:0b:ab:07:a7:e3:43:a3:
27:ef:9f:0e:21:f1:44:f9:0e:8b:fa:87:e3:56:c0:
be:57:c2:dd:c2:cf:c1:e9:82:cc:9a:67:f5:c5:e6:
84:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4C:52:64:B2:34:9A:BF:03:B7:BA:BB:F4:CE:E7:70:9D:E6:0B:10
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139342e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.194.0/23
Signature Algorithm: sha256WithRSAEncryption
88:19:c9:25:8b:65:27:97:6d:57:d8:92:ff:9a:92:f2:a8:aa:
8b:e0:30:68:cb:76:9b:6e:67:6d:64:bb:b5:e4:b9:f7:5f:01:
7a:7c:e7:be:55:34:41:53:42:3f:bd:38:9e:27:e9:3d:6d:c7:
25:4c:ea:80:db:9d:2a:f2:c2:c7:d8:c5:6d:48:23:7c:79:d4:
48:a0:fc:34:dc:1c:1f:16:c7:72:bf:78:7b:64:4d:a9:d9:5c:
59:20:79:9d:4f:39:88:5e:8c:58:0e:92:ab:a1:c0:e6:00:f5:
df:92:cb:29:70:c2:8b:bb:fb:da:9e:92:27:22:00:b3:45:2f:
30:80:89:35:f3:15:c9:da:0b:8e:1a:97:4d:d7:6c:df:a8:07:
41:63:d7:ef:5e:c4:25:82:7e:22:45:51:44:06:e2:dd:e4:c6:
60:72:6b:8f:e9:8e:b2:17:a9:18:3e:21:b1:0a:40:75:83:4f:
41:c2:c7:8f:78:89:1e:0b:4d:d8:bb:ad:a8:a9:2e:d0:4a:b9:
cc:7d:f3:53:bf:bc:32:11:cb:89:5e:85:4b:91:0a:f1:41:ef:
55:ef:9c:a4:4d:50:93:1f:00:6f:c6:47:6c:7e:ab:86:fe:11:
ef:76:1a:da:a2:1c:fe:fb:8a:d1:9f:54:03:1f:e4:23:7b:e1:
9b:e5:0f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:02:19 2026 by rpki-client