Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3233322e302f32312d3231203d3e2035363530.roa
File: 3134372e3132352e3233322e302f32312d3231203d3e2035363530.roa (raw, json)
Hash identifier: 7lVmW3ZWQqd6t1Z9kqc6J+NYlS439X3skp/vaG+EiGs=
Subject key identifier: 0F:36:32:E8:5A:3C:17:08:DB:C0:4B:38:2E:62:41:52:16:10:93:7D
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 5CC325B52B5473ACD5188C5BA5FBD00D898871D9
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3233322e302f32312d3231203d3e2035363530.roa
Signing time: Tue 21 Apr 2026 09:09:10 +0000
ROA not before: Tue 21 Apr 2026 09:04:10 +0000
ROA not after: Tue 20 Apr 2027 09:09:10 +0000
asID: 5650
IP address blocks: 147.125.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:c3:25:b5:2b:54:73:ac:d5:18:8c:5b:a5:fb:d0:0d:89:88:71:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Apr 21 09:04:10 2026 GMT
Not After : Apr 20 09:09:10 2027 GMT
Subject: CN=0F3632E85A3C1708DBC04B382E6241521610937D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5d:76:b3:d8:0c:c9:cc:7e:3c:a6:0c:58:fa:
d4:56:ad:13:89:e8:d7:bd:3a:12:fe:40:a0:79:c9:
64:c6:8c:7a:0b:93:20:4c:5f:e8:f2:8b:6a:0e:30:
2e:2f:c9:3b:42:0c:47:fa:1c:33:63:92:36:c4:d8:
ee:f3:93:d7:26:6b:fb:95:3b:3a:40:a0:28:5c:d7:
d9:a8:58:83:ce:be:a6:03:a7:47:65:26:98:14:17:
04:8c:37:4c:8d:15:6d:5e:d7:95:f4:ba:c7:88:6e:
c4:29:91:dd:8e:91:f5:aa:d6:78:6b:3a:ea:33:4e:
d8:ef:76:37:70:63:7f:c3:4b:72:10:15:d4:14:e4:
7a:7d:34:9e:44:15:c4:a9:4d:aa:dc:0d:5c:d7:cd:
96:6c:7e:cb:ff:a0:94:69:48:af:48:8e:91:b2:b8:
a6:70:8d:f0:6d:92:4e:94:0d:6f:c2:4c:b8:56:ef:
06:46:14:50:f2:2c:a4:a6:06:3b:d9:be:89:2c:c4:
7f:f4:ab:53:3b:d5:a7:e2:e9:b3:63:dc:9b:77:03:
57:7b:3c:49:78:f1:08:ca:bb:e3:69:66:ca:76:1d:
0f:de:7e:2a:76:24:cd:15:65:66:ee:8e:ba:e7:64:
e2:4b:c7:0f:2d:48:87:87:a8:b4:1c:7e:31:10:a4:
1b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:36:32:E8:5A:3C:17:08:DB:C0:4B:38:2E:62:41:52:16:10:93:7D
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3233322e302f32312d3231203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.232.0/21
Signature Algorithm: sha256WithRSAEncryption
1c:38:39:22:24:55:c6:bf:3e:e6:b1:6a:b3:92:aa:a2:aa:2e:
ac:4e:d5:da:15:d1:74:eb:66:d8:d3:22:96:8e:b9:3f:19:c9:
1a:b6:d2:64:b9:9f:40:c6:0b:ae:e3:a7:ad:e7:56:df:27:25:
ca:af:7a:29:ed:63:14:80:56:bb:49:7c:9f:9c:9e:e1:bf:f6:
49:3f:4a:d7:79:3f:55:93:58:e8:37:1e:ab:60:99:a8:42:08:
1b:40:0f:bc:88:d7:c9:47:5b:05:3b:23:2a:26:61:3f:db:71:
bb:91:ed:68:d1:e1:fd:9c:9f:50:2a:99:7e:4f:40:31:a2:aa:
db:65:cd:fb:b7:1c:39:83:37:25:db:fb:1d:3d:d1:6b:fd:b9:
39:74:1c:0a:63:3b:24:8f:35:59:0c:38:f1:d9:01:39:52:fe:
b2:4c:6c:e5:6b:d3:a8:99:95:e0:f1:19:20:ba:dc:15:da:b9:
62:fb:f8:cc:89:40:12:a2:0f:8f:56:36:1e:6f:92:1e:99:5c:
5d:92:da:d1:19:13:18:6e:e4:f4:bb:00:66:d0:85:e1:9a:8e:
2b:e0:5a:cb:aa:24:5c:dc:7f:61:66:20:91:55:01:04:80:a0:
c5:36:3d:d8:72:72:4f:c1:e3:0f:6f:f3:4b:9b:d5:01:4b:ee:
e9:c0:30:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:12:30 2026 by rpki-client