
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234302e302f32312d3234203d3e20383334.roa
File: 3134372e3132352e3234302e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: OoUWHK5xvCABOaBvM6HEbEVMz9pa7+erl9UsCKdOsbg=
Subject key identifier: D2:95:13:58:1C:99:B1:1E:9F:87:55:2D:45:CC:63:96:54:E1:CE:68
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 542432AD61FDABBDC3DE5050ED569297D884A6CE
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234302e302f32312d3234203d3e20383334.roa
Signing time: Tue 23 Sep 2025 05:43:06 +0000
ROA not before: Tue 23 Sep 2025 05:38:06 +0000
ROA not after: Tue 22 Sep 2026 05:43:06 +0000
asID: 834
IP address blocks: 147.125.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Oct 2025 22:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:24:32:ad:61:fd:ab:bd:c3:de:50:50:ed:56:92:97:d8:84:a6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 23 05:38:06 2025 GMT
Not After : Sep 22 05:43:06 2026 GMT
Subject: CN=D29513581C99B11E9F87552D45CC639654E1CE68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bb:b7:2b:e3:07:40:1a:4c:32:e3:a8:06:f3:
2f:0a:81:be:56:b9:18:25:d6:80:d7:4c:d0:4f:cc:
2a:ce:a4:2f:84:4d:77:29:44:f8:75:55:73:9f:fc:
0c:24:3b:bb:47:91:08:dd:68:3d:b9:03:4b:85:9c:
51:5e:9a:07:21:98:ad:04:fe:40:bd:30:5a:a7:d7:
d2:40:a8:68:fa:a3:38:b9:04:0b:94:d0:ae:71:59:
f5:70:9e:38:ef:df:12:9e:98:60:b6:14:fb:dd:c2:
79:cd:e7:23:23:53:78:10:47:7f:ba:39:77:66:d1:
e8:37:53:8f:f9:aa:92:41:9e:c4:39:54:9d:37:ec:
db:f2:fe:85:8d:6d:21:38:b3:d3:92:37:f7:93:dc:
ce:99:f1:3c:f4:8f:6d:91:4c:45:44:45:3a:b1:a7:
03:64:e4:a5:58:a8:af:40:8a:27:82:93:40:ba:74:
a5:b0:87:47:09:01:07:b6:41:68:86:d8:da:3c:c0:
54:07:b5:fc:f7:c4:fa:01:dc:ca:63:ab:df:a9:19:
77:b1:b0:62:6c:8b:5e:a9:13:ae:9a:32:80:4e:02:
d5:ff:c3:b0:2b:17:41:c7:8c:90:bf:93:2a:65:60:
26:9f:ec:1f:cb:76:0c:73:16:d0:55:bc:84:a7:c7:
e7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:95:13:58:1C:99:B1:1E:9F:87:55:2D:45:CC:63:96:54:E1:CE:68
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234302e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.240.0/21
Signature Algorithm: sha256WithRSAEncryption
19:83:ec:1c:e5:a0:f0:42:92:a9:4d:0b:31:57:a1:15:bf:47:
78:97:b5:5b:f1:c4:2e:0c:7e:27:a1:52:ef:ea:97:f7:9c:58:
ee:b9:c1:18:fd:65:8d:d4:13:4d:f5:b3:be:c8:a4:dc:f6:16:
c1:a8:39:38:e4:a5:2a:f6:ce:1b:c1:89:8d:31:18:b8:b9:14:
88:31:63:bc:7d:e5:de:26:12:18:c5:96:4f:7a:c7:71:13:0e:
df:81:7a:53:58:51:00:48:1d:1c:eb:d1:24:ab:33:38:58:b1:
0b:53:c8:8d:69:a2:47:f8:b6:28:2b:54:cf:33:74:80:41:2a:
a9:d6:6f:4f:b6:d8:ba:2a:64:fa:38:6a:a5:85:85:4e:25:0a:
37:9c:00:0f:18:37:73:0f:26:3f:99:27:b2:a2:ca:41:3f:9b:
7a:f2:aa:17:53:c6:c8:82:11:10:95:4f:7a:34:f2:20:06:a4:
98:f2:ba:34:b0:bf:95:7f:15:31:ea:33:b5:3b:65:c3:04:a3:
95:66:7b:c4:c1:c3:1f:f8:bc:c7:3b:68:5e:d0:7b:74:aa:4d:
36:65:84:7c:2f:0b:a5:1b:c7:07:76:a9:80:17:18:ec:6f:43:
8c:65:7b:35:09:7f:e6:b0:b0:b0:72:89:dc:be:59:88:d4:67:
44:a7:3e:da
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUVCQyrWH9q73D3lBQ7VaSl9iEps4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNTA5MjMwNTM4MDZaFw0yNjA5MjIwNTQzMDZaMDMxMTAvBgNV
BAMTKEQyOTUxMzU4MUM5OUIxMUU5Rjg3NTUyRDQ1Q0M2Mzk2NTRFMUNFNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyu7cr4wdAGkwy46gG8y8Kgb5W
uRgl1oDXTNBPzCrOpC+ETXcpRPh1VXOf/AwkO7tHkQjdaD25A0uFnFFemgchmK0E
/kC9MFqn19JAqGj6ozi5BAuU0K5xWfVwnjjv3xKemGC2FPvdwnnN5yMjU3gQR3+6
OXdm0eg3U4/5qpJBnsQ5VJ037Nvy/oWNbSE4s9OSN/eT3M6Z8Tz0j22RTEVERTqx
pwNk5KVYqK9AiieCk0C6dKWwh0cJAQe2QWiG2No8wFQHtfz3xPoB3Mpjq9+pGXex
sGJsi16pE66aMoBOAtX/w7ArF0HHjJC/kyplYCaf7B/LdgxzFtBVvISnx+dhAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU0pUTWByZsR6fh1UtRcxjllThzmgwHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy
MzQzMDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA5N9
8DANBgkqhkiG9w0BAQsFAAOCAQEAGYPsHOWg8EKSqU0LMVehFb9HeJe1W/HELgx+
J6FS7+qX95xY7rnBGP1ljdQTTfWzvsik3PYWwag5OOSlKvbOG8GJjTEYuLkUiDFj
vH3l3iYSGMWWT3rHcRMO34F6U1hRAEgdHOvRJKszOFixC1PIjWmiR/i2KCtUzzN0
gEEqqdZvT7bYuipk+jhqpYWFTiUKN5wADxg3cw8mP5knsqLKQT+bevKqF1PGyIIR
EJVPejTyIAakmPK6NLC/lX8VMeoztTtlwwSjlWZ7xMHDH/i8xztoXtB7dKpNNmWE
fC8LpRvHB3apgBcY7G9DjGV7NQl/5rCwsHKJ3L5ZiNRnRKc+2g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:46 2025 by rpki-client