Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231332e302f32342d3234203d3e20343032333433.roa
File: 3134372e3132352e3231332e302f32342d3234203d3e20343032333433.roa (raw, json)
Hash identifier: 6zNPenA7F+AxH2iCVVoMrdMitzhyIIFYMreqLD28WkA=
Subject key identifier: E0:0C:15:2F:6A:50:9E:98:B2:2D:B6:D7:80:B0:A4:4C:52:1E:12:E3
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 069F34B358A2003EBD646DDE9A06D22EA642CB88
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231332e302f32342d3234203d3e20343032333433.roa
Signing time: Sun 28 Jun 2026 19:28:08 +0000
ROA not before: Sun 28 Jun 2026 19:23:08 +0000
ROA not after: Sun 27 Jun 2027 19:28:08 +0000
asID: 402343
IP address blocks: 147.125.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:9f:34:b3:58:a2:00:3e:bd:64:6d:de:9a:06:d2:2e:a6:42:cb:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jun 28 19:23:08 2026 GMT
Not After : Jun 27 19:28:08 2027 GMT
Subject: CN=E00C152F6A509E98B22DB6D780B0A44C521E12E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:59:54:eb:46:36:83:38:3c:9c:6f:05:df:e3:
b0:f1:2f:fe:1e:8c:6f:b9:bf:e8:e9:3b:bf:a6:26:
42:d4:3b:a2:46:79:b3:9b:63:b7:be:19:3b:b2:6d:
41:1c:41:27:d5:5a:21:66:90:10:89:6d:24:0a:42:
b0:32:c6:99:f6:52:82:b2:46:d2:f3:4a:b2:31:c3:
e1:f7:2c:81:70:11:b8:9c:91:62:a3:6f:ae:06:87:
a8:ef:a5:47:83:a3:19:c7:aa:0b:e8:b3:73:63:82:
70:c3:24:80:c5:7e:36:60:f5:61:dc:83:40:cd:c3:
aa:7a:fd:11:08:1a:c4:69:e0:c3:20:45:0a:83:fa:
24:82:8e:e3:72:90:aa:e4:fa:68:f2:ff:93:56:35:
37:51:c0:27:d7:be:45:23:d6:f8:4c:d2:61:53:ce:
c8:ef:f8:4d:4d:41:97:8b:a6:48:ce:2c:e4:aa:ef:
7c:e3:b9:22:02:06:62:3a:e9:c6:ff:ba:93:81:03:
e9:a5:33:12:2e:78:62:5a:08:9d:4d:95:14:17:58:
92:b3:01:c7:ed:d5:1b:ae:73:af:c6:84:16:5f:7b:
47:d1:72:16:57:e1:93:81:c6:38:14:c5:a1:0d:90:
30:21:84:5f:de:8f:da:5f:91:8e:ec:a0:25:d1:90:
92:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0C:15:2F:6A:50:9E:98:B2:2D:B6:D7:80:B0:A4:4C:52:1E:12:E3
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231332e302f32342d3234203d3e20343032333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.213.0/24
Signature Algorithm: sha256WithRSAEncryption
71:60:c2:51:0b:bd:c3:58:5b:f2:7f:4b:80:44:a7:6c:a2:62:
dc:65:ef:1d:16:c5:d4:2b:43:9d:31:84:c9:a4:11:a5:fb:6e:
c3:de:22:0f:ac:e9:bb:c5:06:63:e7:9f:4e:04:e9:7b:7a:4c:
ac:b7:8e:5d:8d:c8:87:75:eb:8b:3c:54:13:78:f6:d8:12:a6:
a7:a1:27:df:d0:20:36:4b:ce:a3:45:49:b0:69:f5:e9:c1:a4:
bc:bd:06:bc:06:44:ee:e7:53:d3:52:fa:e4:57:c4:2d:82:df:
86:7f:bb:5d:be:d0:42:37:db:bb:97:c3:36:c2:d0:58:26:67:
e7:ec:02:ed:20:b6:bf:96:43:00:15:a5:97:42:ab:c3:26:23:
46:24:f8:e8:8f:3b:6a:52:b0:5e:a4:37:02:2f:24:58:39:12:
a9:b6:fc:e8:06:09:25:d3:df:3f:ff:73:38:c5:93:58:23:e9:
c0:d2:59:e7:dc:34:da:92:18:0e:aa:d0:ae:4c:2e:01:9d:7a:
51:af:1c:38:ee:56:5a:9c:4b:04:c8:78:59:0a:84:d8:5d:eb:
8f:56:c5:04:d2:a6:c8:a4:b0:08:11:90:22:3a:5d:1b:d2:80:
b9:6b:59:b3:30:41:27:0f:23:e3:91:7c:82:03:86:9c:47:01:
a9:6b:17:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:18:05 2026 by rpki-client