Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232342e302f32322d3234203d3e2039333034.roa
File: 3134372e3132352e3232342e302f32322d3234203d3e2039333034.roa (raw, json)
Hash identifier: 8Z3LBjCByz8UmwQIsv3CpEH0tNat1d4UiO1DzKSClUE=
Subject key identifier: 64:10:D3:BF:9D:52:1B:8A:9A:15:B4:51:31:33:D5:09:A8:A8:D9:47
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 22787473DBFB6FB26ECB3BAB8BA0AEE6B18A45C0
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232342e302f32322d3234203d3e2039333034.roa
Signing time: Tue 23 Sep 2025 05:42:13 +0000
ROA not before: Tue 23 Sep 2025 05:37:13 +0000
ROA not after: Tue 22 Sep 2026 05:42:13 +0000
asID: 9304
IP address blocks: 147.125.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Oct 2025 22:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:78:74:73:db:fb:6f:b2:6e:cb:3b:ab:8b:a0:ae:e6:b1:8a:45:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 23 05:37:13 2025 GMT
Not After : Sep 22 05:42:13 2026 GMT
Subject: CN=6410D3BF9D521B8A9A15B4513133D509A8A8D947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e8:6e:6e:00:c5:26:53:57:9a:56:4f:42:be:
1d:25:ac:f5:9f:90:10:6b:c7:1a:6c:7a:c3:e7:9d:
56:a0:00:93:27:89:c4:3b:fd:0c:49:8f:c3:67:2e:
1d:14:ea:40:b5:8b:82:d3:6a:09:8e:88:03:14:f8:
3a:55:39:0c:69:97:a4:30:05:5e:c5:69:f2:8a:5a:
46:b0:d2:60:37:ff:3d:a8:dc:1f:5d:0e:7f:d2:94:
06:45:6c:b5:71:38:e0:52:9b:a2:d7:2c:a0:06:d7:
5f:bd:db:4c:be:50:de:27:70:63:57:56:fa:52:3e:
9f:cd:59:72:ef:64:29:bc:2d:c3:6a:6b:fd:b1:2d:
c4:39:f2:95:9a:1c:09:db:7f:f2:18:c8:85:fd:df:
ea:db:7b:ce:ad:3d:d0:f3:02:e5:ae:ab:f9:53:f8:
1e:32:8e:db:97:4a:3f:c4:28:35:14:a3:19:9d:ee:
e2:f1:a7:93:ed:dc:a4:2e:05:db:15:26:32:2c:6e:
c8:cd:5d:2a:b1:b4:d4:e0:b2:22:6b:4a:10:2f:a7:
01:28:ab:43:18:53:90:aa:2a:6b:91:2a:1c:e4:23:
e9:96:8d:5f:19:c8:e1:58:39:03:fd:04:bb:52:04:
06:bc:db:05:d5:86:4c:5b:e0:51:e6:f8:cc:fa:51:
4a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:10:D3:BF:9D:52:1B:8A:9A:15:B4:51:31:33:D5:09:A8:A8:D9:47
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232342e302f32322d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.224.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:8c:c4:0d:3c:12:a2:08:10:e4:9a:2f:51:d5:8e:ea:96:dc:
a4:ce:91:e6:f0:c2:3c:e5:2e:8b:a1:95:b0:ee:2d:8c:a7:a8:
17:4f:80:93:e3:43:7c:85:01:e6:9b:49:21:5a:67:40:84:77:
83:14:df:cd:0e:22:c2:ee:4d:f9:37:cd:5e:a6:dd:d0:a6:df:
1f:8e:5c:b0:d8:a9:ef:07:57:59:44:f7:a7:2a:54:7e:0b:c3:
db:bd:fe:ac:e8:88:e2:47:11:0a:c8:20:9a:dc:0c:f4:f6:28:
6a:14:96:a3:37:ae:6a:16:12:11:cf:93:eb:e6:07:bb:54:48:
4c:fd:95:6c:b7:6b:22:67:eb:b5:d5:cf:3a:6c:1c:70:a1:76:
b2:4b:a6:8b:6f:32:bb:6a:c2:ed:a4:d8:ea:2d:98:b8:0c:b3:
81:0c:db:35:5e:11:95:89:c8:76:5f:7f:26:ae:30:62:f0:1d:
9b:3e:61:72:41:1c:99:6c:ea:6c:6a:a8:d0:45:09:0a:7e:6e:
b0:ad:17:aa:f1:95:66:ca:6f:31:33:91:23:44:d7:a3:3f:48:
3c:a8:46:14:91:33:15:14:71:47:61:dd:57:f8:d0:2e:24:42:
49:f4:22:10:4e:29:11:47:2a:14:3b:e4:a1:ad:10:33:6f:b2:
98:41:ca:1a
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUInh0c9v7b7Juyzuri6Cu5rGKRcAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNTA5MjMwNTM3MTNaFw0yNjA5MjIwNTQyMTNaMDMxMTAvBgNV
BAMTKDY0MTBEM0JGOUQ1MjFCOEE5QTE1QjQ1MTMxMzNENTA5QThBOEQ5NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH6G5uAMUmU1eaVk9Cvh0lrPWf
kBBrxxpsesPnnVagAJMnicQ7/QxJj8NnLh0U6kC1i4LTagmOiAMU+DpVOQxpl6Qw
BV7FafKKWkaw0mA3/z2o3B9dDn/SlAZFbLVxOOBSm6LXLKAG11+920y+UN4ncGNX
VvpSPp/NWXLvZCm8LcNqa/2xLcQ58pWaHAnbf/IYyIX93+rbe86tPdDzAuWuq/lT
+B4yjtuXSj/EKDUUoxmd7uLxp5Pt3KQuBdsVJjIsbsjNXSqxtNTgsiJrShAvpwEo
q0MYU5CqKmuRKhzkI+mWjV8ZyOFYOQP9BLtSBAa82wXVhkxb4FHm+Mz6UUpZAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUZBDTv51SG4qaFbRRMTPVCaio2UcwHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy
MzIzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
k33gMA0GCSqGSIb3DQEBCwUAA4IBAQALjMQNPBKiCBDkmi9R1Y7qltykzpHm8MI8
5S6LoZWw7i2Mp6gXT4CT40N8hQHmm0khWmdAhHeDFN/NDiLC7k35N81ept3Qpt8f
jlyw2KnvB1dZRPenKlR+C8Pbvf6s6IjiRxEKyCCa3Az09ihqFJajN65qFhIRz5Pr
5ge7VEhM/ZVst2siZ+u11c86bBxwoXayS6aLbzK7asLtpNjqLZi4DLOBDNs1XhGV
ich2X38mrjBi8B2bPmFyQRyZbOpsaqjQRQkKfm6wrReq8ZVmym8xM5EjRNejP0g8
qEYUkTMVFHFHYd1X+NAuJEJJ9CIQTikRRyoUO+ShrRAzb7KYQcoa
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:24:02 2025 by rpki-client