Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133342e302f32342d3234203d3e203332343138.roa
File: 3134372e3132352e3133342e302f32342d3234203d3e203332343138.roa (raw, json)
Hash identifier: a+VvXVeNEW8RTfottLJSc4JqcBWRcFwXQfVq9nkoBw8=
Subject key identifier: B4:E7:1C:E4:50:59:2A:D5:98:E1:93:84:B2:FB:7D:06:D5:92:85:6B
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 63F5D286C632BBCFBB162EB669EDBBC85C10BBF3
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133342e302f32342d3234203d3e203332343138.roa
Signing time: Wed 29 Apr 2026 13:19:53 +0000
ROA not before: Wed 29 Apr 2026 13:14:53 +0000
ROA not after: Wed 28 Apr 2027 13:19:53 +0000
asID: 32418
IP address blocks: 147.125.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 10:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:f5:d2:86:c6:32:bb:cf:bb:16:2e:b6:69:ed:bb:c8:5c:10:bb:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Apr 29 13:14:53 2026 GMT
Not After : Apr 28 13:19:53 2027 GMT
Subject: CN=B4E71CE450592AD598E19384B2FB7D06D592856B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:43:53:61:dd:8f:a5:b2:6e:cd:95:70:e9:
33:68:80:d6:e1:3a:59:ed:2d:44:15:4e:41:e1:d1:
9c:80:84:1a:1e:63:f7:c7:8f:e8:ad:d5:55:25:66:
a3:a8:80:96:6e:ad:68:47:b5:3b:d2:99:85:70:e0:
96:25:33:43:20:60:c0:bc:ec:86:4c:68:11:91:54:
94:40:11:ff:43:aa:6b:0a:36:a4:92:6e:66:dd:bc:
f8:da:85:45:9d:44:27:5b:87:b4:e1:70:0f:2e:42:
c0:18:15:b6:d0:cc:99:a0:a8:88:b9:b8:b0:83:55:
29:c2:44:1f:d4:dd:ee:61:a0:d3:cc:ea:cc:3d:a5:
4d:12:36:9d:07:2c:22:bc:fe:96:53:77:e2:36:73:
3c:71:35:61:48:45:22:fc:92:45:5e:14:4e:b2:17:
84:6c:ea:8d:b6:06:75:e0:77:89:ad:90:7e:13:ce:
bc:9a:b6:24:e0:f2:4f:98:44:fe:2a:d3:94:42:a9:
3b:64:7e:27:01:98:c1:50:03:14:b7:ce:ea:13:bd:
ca:01:d4:6a:65:a8:16:a3:1d:72:6e:b7:5f:a9:7e:
fb:95:f6:c1:bd:14:6e:0b:bd:bc:23:0d:9b:27:0d:
31:0c:ac:60:e4:96:b5:52:9e:8d:8b:ac:9b:c3:2b:
6d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E7:1C:E4:50:59:2A:D5:98:E1:93:84:B2:FB:7D:06:D5:92:85:6B
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133342e302f32342d3234203d3e203332343138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.134.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:fd:27:42:c5:72:a2:f2:f5:31:1b:aa:6e:9d:e8:5c:00:e4:
be:cc:d2:b6:25:34:18:81:03:f8:92:7c:d1:45:63:99:6d:29:
5d:76:44:16:b9:06:98:12:5d:51:11:2b:a7:f3:d2:62:95:ef:
8d:4b:51:f7:fd:48:12:7a:9c:f1:f5:26:1c:0c:36:f8:81:91:
fb:56:20:e3:00:de:bb:9d:87:4b:33:3e:54:ad:4a:36:28:b8:
d3:5f:02:66:9e:9d:f0:80:c0:ac:2f:b4:65:2a:5b:3c:a6:58:
f6:54:00:d1:29:77:f1:53:25:a6:b2:a3:87:44:a5:2e:1c:d6:
37:d9:72:ce:bd:67:31:a4:5a:9e:c7:d6:b4:b0:64:25:a9:18:
1b:48:2d:28:a9:ba:06:a7:d9:b5:21:13:3d:b6:c6:fd:77:40:
81:1f:ed:31:ce:23:4d:32:e8:6f:2d:a6:f2:ab:e2:ba:bc:e8:
ef:53:e0:61:fa:54:0c:5c:8d:e9:c8:44:79:a3:bf:be:a4:b3:
be:6e:bb:6e:1e:07:c7:13:16:32:de:0e:33:5c:22:52:e1:72:
0f:2c:27:25:b9:05:c8:48:ad:d6:34:7e:d8:2d:81:1b:53:d4:
05:a4:43:20:6a:b8:c7:51:81:4c:95:fb:7e:47:1c:57:34:54:
de:bd:a4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 17:32:14 2026 by rpki-client