Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3132392e302f32342d3234203d3e20343032323135.roa
File: 3134372e3132352e3132392e302f32342d3234203d3e20343032323135.roa (raw, json)
Hash identifier: lS808vcaDHJv9YIhtwf4LE2w/cCRH16ejtKp55ek4UY=
Subject key identifier: 58:20:8C:FB:18:2E:C3:FC:CB:06:EE:3F:58:F0:CF:8A:11:96:D1:4E
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 41AF350F06BFCCA3768334ED3D5CA06C9F04275E
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3132392e302f32342d3234203d3e20343032323135.roa
Signing time: Thu 02 Jul 2026 06:38:33 +0000
ROA not before: Thu 02 Jul 2026 06:33:33 +0000
ROA not after: Thu 01 Jul 2027 06:38:33 +0000
asID: 402215
IP address blocks: 147.125.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 08:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:af:35:0f:06:bf:cc:a3:76:83:34:ed:3d:5c:a0:6c:9f:04:27:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jul 2 06:33:33 2026 GMT
Not After : Jul 1 06:38:33 2027 GMT
Subject: CN=58208CFB182EC3FCCB06EE3F58F0CF8A1196D14E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:83:64:1d:bd:06:4b:e0:f8:22:58:28:3a:f7:
72:55:98:71:1b:ee:5d:24:84:b2:e9:35:12:e2:c6:
8f:f2:11:64:d8:c1:6f:b7:f3:16:a3:9d:17:06:4f:
12:9f:5a:3f:e0:f9:fc:97:95:f1:0a:75:4e:29:bb:
6a:d8:f6:96:a4:0b:4f:3d:2b:e3:0f:dc:95:45:19:
1d:68:8f:45:24:ca:17:ac:5d:de:2a:a5:21:84:df:
59:70:39:eb:ce:ec:40:25:e6:1e:3d:ad:14:b3:b8:
48:0f:68:e0:3d:30:0d:28:d0:8f:fb:34:2e:77:3c:
8a:05:37:e6:25:73:7d:16:37:c8:b3:b4:71:d5:ac:
43:f6:a2:d5:6c:3a:7e:08:05:d2:ca:16:d2:73:ce:
04:e4:38:77:01:14:b5:2a:5e:10:9a:44:16:12:8f:
58:73:a1:8f:c4:6a:e4:9d:0a:60:a8:cb:56:9f:b3:
eb:aa:d5:ae:c1:49:01:fc:10:c9:09:17:47:72:66:
0e:14:90:5b:b4:7f:3c:51:c0:9b:79:b6:09:06:0c:
cb:2c:4a:0e:01:4b:80:5b:93:08:19:12:e9:bb:a5:
a7:61:de:df:93:c2:5a:2f:ba:5c:1f:a0:33:85:ea:
4f:9e:c8:2b:82:20:4f:51:6c:2d:50:87:de:d3:d9:
9d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:20:8C:FB:18:2E:C3:FC:CB:06:EE:3F:58:F0:CF:8A:11:96:D1:4E
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3132392e302f32342d3234203d3e20343032323135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.129.0/24
Signature Algorithm: sha256WithRSAEncryption
09:af:65:34:aa:75:d5:05:68:15:38:49:36:95:83:ba:c0:75:
54:fb:63:88:7c:79:f8:62:b1:07:a6:48:d4:62:ab:49:2f:6e:
a6:1b:d4:c7:1c:1a:1a:d3:50:bb:3c:89:c3:4f:e4:8e:d4:30:
f7:02:cc:78:e2:f8:84:f7:e1:ef:ef:3d:b2:ff:45:be:83:5e:
3f:23:0d:8f:df:c1:ac:09:d4:3d:ca:5c:b6:17:e4:7c:56:0b:
5b:56:b7:d3:78:e7:ed:ee:58:b2:58:1c:48:0a:13:bd:70:63:
f6:fa:33:c7:3c:d7:57:af:96:45:32:cd:ab:c8:85:a9:79:a7:
51:47:2c:b1:e5:ca:9c:28:65:7d:5d:25:91:84:81:35:db:23:
49:0c:ff:b8:30:66:a0:67:2f:79:1e:02:8a:89:27:a7:0a:86:
57:59:d3:4d:99:3f:be:7e:f6:e4:45:98:c2:37:f5:29:7a:d4:
0f:de:49:88:4c:df:0b:c6:74:b1:16:07:d5:30:9f:f2:b6:9f:
33:e8:89:70:9b:08:dd:6d:25:1e:a0:44:28:26:d2:80:ee:f0:
1f:2a:b1:b0:d1:50:75:e5:25:dd:3b:a2:38:ff:ac:06:6e:d4:
6c:5d:8b:be:74:b2:6f:3f:38:4a:8e:25:83:e4:e1:3f:1e:13:
6c:c8:9b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:22 2026 by rpki-client