Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3132382e302f31382d3234203d3e20383334.roa
File: 3134372e3132352e3132382e302f31382d3234203d3e20383334.roa (raw, json)
Hash identifier: MXQQAdZ8/q0SSX+7EZEMmeULL4t51ObUNh0wwFo4T1Y=
Subject key identifier: 51:68:74:F8:2B:5A:0F:8E:90:A1:F3:52:95:BF:38:B0:C7:1E:5C:65
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 20530B60D9FE2ED378E69BD5FF95556F7F76E0BA
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3132382e302f31382d3234203d3e20383334.roa
Signing time: Mon 01 Sep 2025 17:00:03 +0000
ROA not before: Mon 01 Sep 2025 16:55:03 +0000
ROA not after: Mon 31 Aug 2026 17:00:03 +0000
asID: 834
IP address blocks: 147.125.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 15:34:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:53:0b:60:d9:fe:2e:d3:78:e6:9b:d5:ff:95:55:6f:7f:76:e0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 1 16:55:03 2025 GMT
Not After : Aug 31 17:00:03 2026 GMT
Subject: CN=516874F82B5A0F8E90A1F35295BF38B0C71E5C65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fd:ae:ab:8d:96:1a:4f:c8:4a:02:61:d3:06:
09:62:20:c6:4d:cd:b9:72:72:1a:81:61:63:64:b9:
32:57:8c:07:1e:85:6e:fd:54:d5:92:43:0b:18:48:
8f:e3:ef:40:bb:87:f0:ae:d1:75:e3:46:f0:00:e4:
5d:30:d5:2e:65:88:97:5e:82:71:f0:d5:38:d1:25:
40:e7:f4:33:3f:d9:25:2e:db:1a:50:f3:c1:05:a5:
85:85:c7:b6:72:52:7a:db:0d:09:2e:f5:42:f7:7e:
50:69:ad:3b:63:34:16:a2:86:7d:16:0b:05:ed:75:
f2:a7:9c:fc:22:b0:64:00:55:e8:6e:2c:50:6d:60:
2d:0c:8a:e9:3e:19:90:f0:08:c9:95:dc:1c:a9:4b:
cb:10:20:d5:50:1d:26:67:7c:1b:28:5b:94:70:78:
ee:e2:35:da:33:8b:b9:7c:d1:90:df:fc:a7:2a:6b:
df:32:77:ca:58:00:dc:85:fb:0c:d7:b5:66:dc:ca:
ab:da:5e:78:cf:5d:ce:cd:8d:e8:65:d5:87:d3:10:
26:a0:f7:2e:81:f0:c7:1d:9e:ef:2c:44:07:ca:40:
5f:39:c7:40:c2:cc:81:92:11:ec:c1:9a:67:b2:4b:
37:7a:42:eb:78:71:45:3b:41:a8:64:a5:9b:1f:ad:
a3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:68:74:F8:2B:5A:0F:8E:90:A1:F3:52:95:BF:38:B0:C7:1E:5C:65
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3132382e302f31382d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.128.0/18
Signature Algorithm: sha256WithRSAEncryption
5e:fa:ee:6d:cd:31:a0:c1:a3:14:7e:2e:0c:32:57:67:08:9b:
30:32:18:92:38:e9:a8:be:c5:58:10:cf:4d:a5:14:e2:4f:11:
e6:50:34:c6:0d:da:e4:4e:cb:8e:08:ea:cc:b2:fa:56:ac:f5:
eb:79:12:fb:a7:40:02:a3:8c:b8:1c:46:06:2f:52:b3:90:37:
4e:60:f0:41:14:b4:11:00:d2:a1:c4:9b:18:bd:69:bd:38:f6:
f8:7a:ce:38:fd:c1:0c:b7:fb:9f:38:17:3c:57:36:0a:b0:3a:
83:e8:1e:f1:4b:84:ae:bc:6a:42:95:7f:f0:d9:a7:1c:bb:0e:
4e:d7:eb:8d:f3:eb:e6:5f:55:06:4d:67:9d:0b:cf:b4:35:9f:
50:6a:cb:69:ff:d3:01:6b:36:63:8e:46:c0:4a:4c:e1:ed:e6:
74:70:66:46:c9:6f:bb:24:be:06:c9:e9:84:5e:16:3c:c8:02:
ec:b4:7c:16:d8:14:38:36:7c:fb:72:97:0e:95:e3:7d:2a:13:
21:da:4d:ab:b7:09:78:79:84:88:83:ec:97:44:f4:19:89:1f:
8c:df:b1:46:64:92:1b:f5:f7:fd:97:6f:42:58:1d:48:ec:07:
7e:d4:a8:64:32:a5:f8:aa:2e:f1:05:11:76:a6:6b:3d:53:4e:
a9:e7:de:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:18:13 2025 by rpki-client