Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232382e302f32322d3234203d3e20383334.roa
File: 3134372e3132352e3232382e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: TuExzeGcwsytuNfaA0oGFR+CjImOd/H6W2gXJSJKO/8=
Subject key identifier: 67:65:D6:0A:CB:64:7C:E5:2D:9B:20:E4:08:C6:C6:C5:47:CD:6D:37
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 3F110AA8A3774598E355A89451BDC43F435AC5A9
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232382e302f32322d3234203d3e20383334.roa
Signing time: Wed 01 Jul 2026 16:55:58 +0000
ROA not before: Wed 01 Jul 2026 16:50:58 +0000
ROA not after: Wed 30 Jun 2027 16:55:58 +0000
asID: 834
IP address blocks: 147.125.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:11:0a:a8:a3:77:45:98:e3:55:a8:94:51:bd:c4:3f:43:5a:c5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jul 1 16:50:58 2026 GMT
Not After : Jun 30 16:55:58 2027 GMT
Subject: CN=6765D60ACB647CE52D9B20E408C6C6C547CD6D37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7c:b0:50:20:44:43:8e:ec:b2:27:f3:ab:bf:
3c:f8:ab:9e:0d:81:3b:ae:48:f1:48:d0:8f:18:cb:
4d:28:54:d8:54:7a:27:63:1d:33:26:d6:46:32:8e:
57:8a:3e:86:99:27:9c:9c:8f:68:e0:ad:03:bc:c6:
a1:fc:f5:ed:99:20:6a:ad:1d:a0:78:3b:38:6e:b1:
78:50:3d:72:3a:f7:1b:2d:7e:b5:68:b0:39:7f:76:
75:7a:5b:ed:aa:da:88:d8:8e:d9:a4:59:b9:a6:89:
d3:c9:5d:3b:91:6e:91:32:a5:b3:5a:1a:5e:fa:63:
52:35:bd:51:eb:95:3f:0e:75:c9:9b:34:0f:f4:43:
cf:80:6f:6e:92:02:87:c7:cc:fc:0b:5d:c6:47:02:
0c:c7:6f:45:0a:68:17:f7:40:9c:83:8c:52:aa:ff:
0e:60:2e:f3:67:b5:d9:74:8a:90:74:41:81:6c:ac:
38:1a:cd:97:1a:d5:94:a0:16:e7:6e:25:35:20:09:
be:0c:da:50:33:81:5a:e3:37:75:61:d3:68:b3:56:
4e:1a:52:7e:d9:1d:65:39:6b:07:44:b4:dd:09:da:
35:77:ab:83:0c:23:99:7b:8d:a9:9b:3f:c6:6c:7d:
fb:55:fe:f9:ed:db:a6:c2:be:fe:ea:9f:45:90:98:
a6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:65:D6:0A:CB:64:7C:E5:2D:9B:20:E4:08:C6:C6:C5:47:CD:6D:37
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232382e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.228.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:9c:38:a4:aa:58:80:a7:c5:ce:e0:5c:3f:fb:4b:d7:5d:c7:
e8:f2:e2:c9:eb:7f:9b:c5:ba:70:f5:e7:4a:3f:54:91:68:9f:
e6:eb:25:b8:0f:3f:cd:ad:91:6f:4c:43:c1:bc:6c:91:69:12:
44:58:43:73:7f:09:f8:5e:a0:58:71:09:dc:c0:f0:00:07:f1:
19:9e:17:9b:e4:b4:01:c9:a0:f8:fa:da:d1:eb:b8:b0:fe:13:
2a:3b:c5:6b:1a:65:0a:af:28:2a:41:47:44:3e:b0:b7:78:4e:
dd:52:c7:15:a8:e1:79:54:ab:e4:0f:56:b7:b7:1b:3f:f1:7c:
d6:ad:05:08:03:3b:89:4e:f6:21:5f:db:a3:30:06:84:a3:d9:
f7:42:a7:14:e9:b2:6c:ad:b2:56:3b:73:ff:8e:87:5a:5a:ec:
0c:a6:44:14:1e:07:8b:d0:b2:fa:ed:c1:95:82:21:32:da:32:
35:6d:87:6b:b1:7c:93:d6:0a:eb:8b:49:3c:5b:99:48:23:22:
1b:29:4d:a1:23:58:fd:e4:3d:c3:19:76:b9:aa:de:0d:91:7b:
a7:da:e9:35:d1:a0:75:e7:b6:78:30:b8:6e:75:cb:0e:42:01:
cf:f7:cf:61:b4:6a:a5:70:5f:87:a5:43:4f:88:dc:85:75:07:
cd:75:61:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:48:37 2026 by rpki-client