Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133302e302f32332d3234203d3e20383334.roa
File: 3134372e3132352e3133302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: 1u8VxuOAF905ikFEsoKliFQelcu0IWzt15CV02dWues=
Subject key identifier: 60:08:43:6F:54:FA:3E:11:80:84:BA:1A:86:2D:BD:14:D9:97:B8:B2
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 2E3A1CE68D19ECD7E292BA72D8824B2E5A18A04B
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133302e302f32332d3234203d3e20383334.roa
Signing time: Thu 07 May 2026 08:13:02 +0000
ROA not before: Thu 07 May 2026 08:08:02 +0000
ROA not after: Thu 06 May 2027 08:13:02 +0000
asID: 834
IP address blocks: 147.125.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:3a:1c:e6:8d:19:ec:d7:e2:92:ba:72:d8:82:4b:2e:5a:18:a0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: May 7 08:08:02 2026 GMT
Not After : May 6 08:13:02 2027 GMT
Subject: CN=6008436F54FA3E118084BA1A862DBD14D997B8B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5c:6c:3f:b3:b5:49:c7:90:f4:2b:c6:07:16:
a8:d4:16:6e:1a:df:60:d8:01:c7:c2:d8:aa:d9:eb:
33:2a:fb:68:47:6b:78:60:df:69:61:fa:0c:c4:ac:
1a:01:6c:58:d3:fe:2f:b4:1f:75:22:08:b0:3a:1b:
7d:98:98:e6:61:93:db:35:02:d7:87:70:ad:6f:f1:
af:c0:08:3f:79:b5:c4:03:f9:4f:fd:ce:ba:32:ad:
86:d8:91:82:88:9e:3f:88:d9:b6:7a:26:63:23:35:
96:55:18:70:30:1e:8d:c5:b0:bd:55:5b:84:93:64:
b7:14:6b:4a:6c:14:48:20:1b:41:ae:16:bc:fd:b6:
58:b0:73:e9:06:ee:f2:a3:e7:fa:e9:7d:23:34:c6:
5b:6e:91:45:1d:20:62:53:b3:fa:9b:02:f9:88:a1:
dc:59:87:81:b1:d1:80:96:da:0c:df:ea:7c:ac:cd:
4b:f0:a0:65:1f:b0:a6:94:f0:85:46:be:b1:cd:6e:
dd:d7:ee:a1:72:d2:cc:67:5f:25:cf:72:ac:02:c2:
73:0c:ed:a1:8d:04:5b:76:61:33:d3:34:0e:9e:c4:
34:e0:d8:0e:2d:a5:56:49:fe:5f:60:69:fa:08:a0:
f6:12:18:89:cd:9b:8a:2e:67:35:2e:a9:17:d9:f8:
1f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:08:43:6F:54:FA:3E:11:80:84:BA:1A:86:2D:BD:14:D9:97:B8:B2
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.130.0/23
Signature Algorithm: sha256WithRSAEncryption
02:79:45:f6:32:9b:1d:94:db:17:9a:ab:53:36:40:91:4e:6f:
d0:0c:59:54:6b:e1:0b:40:e5:c0:aa:dc:4a:fe:98:cc:8d:7f:
56:ac:cd:bf:9b:a4:af:1d:3a:c6:bf:25:e6:ec:80:3b:b3:fa:
bb:19:d4:2b:c6:07:e1:09:6f:69:83:1e:12:21:7e:22:4e:e8:
bc:8b:f8:c4:56:6a:5a:ef:68:86:e4:a9:d0:eb:d7:ed:2d:2e:
06:f9:72:05:59:5a:2c:ca:f4:6b:3f:14:1c:75:46:50:98:9b:
f7:b6:85:48:f8:42:dc:92:0b:2f:3e:bd:63:b3:e9:96:ef:66:
46:5a:0f:a6:1c:4e:f1:74:31:cb:d1:99:a0:35:89:84:b5:1c:
64:24:78:ff:86:7d:8f:de:8a:d0:b9:87:fd:e9:a4:c4:64:b6:
c6:bb:e2:6d:19:18:ea:8a:14:29:7d:10:fa:26:4d:7b:99:94:
38:0c:36:2e:03:0d:95:e9:64:7e:81:bd:ea:f3:a5:ab:15:e0:
e7:93:1f:7e:50:d5:5b:97:c8:85:fb:51:68:6b:e1:9e:b6:54:
c5:b7:98:15:75:6f:ac:f2:15:9e:ec:ea:67:a0:9a:4f:16:5d:
58:7c:cc:6e:67:66:67:c3:15:1f:64:df:ce:20:74:64:58:63:
1c:34:f8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:34:31 2026 by rpki-client