Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e302e302f31372d3137203d3e2032343838.roa
File: 3134372e3132352e302e302f31372d3137203d3e2032343838.roa (raw, json)
Hash identifier: EoI+/sdnscPf0nnBKFSXR5qMiqWVqm1nNdIQnTkhnSs=
Subject key identifier: 55:A6:74:9F:8E:01:C7:CB:84:3A:0F:61:E6:9D:DE:8A:4D:63:42:1B
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 2E26096AD669243E7D86431326B7D60C96D0FB56
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e302e302f31372d3137203d3e2032343838.roa
Signing time: Tue 26 Aug 2025 07:36:40 +0000
ROA not before: Tue 26 Aug 2025 07:31:40 +0000
ROA not after: Tue 25 Aug 2026 07:36:40 +0000
asID: 2488
IP address blocks: 147.125.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 15:34:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:26:09:6a:d6:69:24:3e:7d:86:43:13:26:b7:d6:0c:96:d0:fb:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Aug 26 07:31:40 2025 GMT
Not After : Aug 25 07:36:40 2026 GMT
Subject: CN=55A6749F8E01C7CB843A0F61E69DDE8A4D63421B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:96:13:ed:db:a8:87:8d:4f:67:99:b0:3d:
3b:30:62:75:3e:43:ec:be:c7:75:54:38:41:a3:fa:
56:c1:36:77:2c:29:de:28:37:fe:9a:60:af:6c:a9:
13:30:39:24:7c:1c:a9:01:46:65:78:77:2f:d0:ef:
44:3d:26:1a:a0:94:74:6e:6c:40:0d:7a:cf:5f:c2:
f1:29:e4:04:95:fc:db:83:e5:d4:a9:42:bb:a5:8e:
af:81:e0:c2:c0:54:0d:3e:7a:fc:29:06:89:57:18:
62:2d:5c:54:d5:e0:01:d9:7a:37:52:d1:c3:3e:41:
b4:ca:b9:0d:a1:67:f7:b0:01:f2:da:b2:9e:3d:5d:
44:05:7a:af:1a:1c:f7:74:8a:48:e1:de:c4:5c:46:
73:81:d7:9b:29:83:08:25:16:d0:96:96:ea:b8:cd:
7b:ba:98:a9:99:de:f0:b9:4b:6a:84:25:2e:fc:ad:
e9:a4:1f:9f:23:0c:b1:4d:f7:6a:a9:13:ff:29:f2:
09:6c:e8:c3:ac:ad:a4:82:30:b7:59:fd:65:a8:e2:
64:30:b8:1b:44:33:6f:ad:70:c2:f8:08:14:d0:e3:
c9:af:dd:e3:8d:7d:8f:1d:ec:4a:89:a4:93:d3:3d:
38:ea:1c:f6:2f:2e:3d:4c:df:3f:08:fd:aa:28:4b:
2a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A6:74:9F:8E:01:C7:CB:84:3A:0F:61:E6:9D:DE:8A:4D:63:42:1B
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e302e302f31372d3137203d3e2032343838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.0.0/17
Signature Algorithm: sha256WithRSAEncryption
46:69:4e:b0:38:5b:28:80:aa:1b:09:9f:17:b8:bc:87:17:ad:
fc:75:ae:7a:d6:83:64:af:5e:f6:7d:f4:41:f2:b1:54:de:13:
9e:19:bd:c1:8e:6b:d7:bd:39:0b:7b:12:2b:83:2e:31:6a:3e:
25:21:8c:00:db:60:89:ab:24:ee:c4:57:47:da:9c:92:5d:32:
f0:f6:6f:61:2a:94:e9:98:54:9d:2d:fd:ab:72:f0:ad:7e:81:
09:a8:f3:d4:c1:91:32:1b:2e:4a:52:0b:57:81:fc:a4:7b:ec:
85:90:89:a6:10:a3:d6:01:a7:13:3b:83:b6:01:cd:9d:f6:ad:
c2:96:32:cb:74:63:4f:3a:39:da:de:98:c8:5e:6b:47:37:4b:
d3:93:6d:16:d2:8c:ca:86:04:25:44:c0:ac:09:d3:9b:b5:67:
fb:7a:29:98:85:60:23:30:cb:d6:22:d6:a8:1e:6d:f5:03:10:
51:4d:b8:ea:40:8d:53:fb:0c:2e:19:5f:88:37:ca:d0:c6:35:
d2:3b:a9:e0:0c:bb:87:0e:07:30:68:e6:05:c1:e6:23:63:f1:
f5:a6:bd:64:55:00:63:35:87:4b:b1:fa:55:a4:8b:b4:36:a0:
6f:bd:99:05:4e:be:cf:41:cc:e9:36:6c:77:ab:8b:ac:36:e0:
31:23:16:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:18:13 2025 by rpki-client