Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133352e302f32342d3234203d3e20333936333536.roa
File: 3134372e3132352e3133352e302f32342d3234203d3e20333936333536.roa (raw, json)
Hash identifier: 0TO4wbfFKX/gBURsThUVi35bLwP+6qgWrFF9QhPidmw=
Subject key identifier: D8:60:80:67:D4:2B:F8:C7:C1:99:54:4A:01:7C:1A:95:48:A5:66:64
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 1B22C7D19A4C9153FE882E42A225B3913EE4D243
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133352e302f32342d3234203d3e20333936333536.roa
Signing time: Tue 21 Apr 2026 09:09:11 +0000
ROA not before: Tue 21 Apr 2026 09:04:11 +0000
ROA not after: Tue 20 Apr 2027 09:09:11 +0000
asID: 396356
IP address blocks: 147.125.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:22:c7:d1:9a:4c:91:53:fe:88:2e:42:a2:25:b3:91:3e:e4:d2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Apr 21 09:04:11 2026 GMT
Not After : Apr 20 09:09:11 2027 GMT
Subject: CN=D8608067D42BF8C7C199544A017C1A9548A56664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:fd:9e:c0:7c:78:cd:d1:b5:40:87:f7:95:
3e:44:25:8a:6e:a1:b4:b5:a2:b9:85:3b:c4:d3:2a:
a9:84:18:91:fa:0a:49:56:a2:ec:45:7c:f5:48:6a:
79:d7:3e:b7:c9:d8:c5:f7:13:da:8c:87:de:e5:2d:
c8:ef:8b:f0:2d:2a:cb:3c:6a:21:82:03:2a:f6:20:
b5:b9:5b:0e:06:f1:49:3d:27:7c:0d:00:47:56:bb:
f1:79:a6:ee:b1:5a:7f:4b:01:27:b1:a9:85:c9:45:
3d:62:81:07:0d:fd:f6:2b:d6:ea:da:8b:46:e2:56:
6a:49:21:6f:2e:ed:1e:f5:b7:94:6b:63:84:0e:c5:
3e:e1:10:f3:be:ae:99:f2:d7:df:f0:fc:9b:20:53:
7a:92:d7:75:2b:6c:b3:2c:13:e3:54:5a:32:13:59:
d3:e7:ec:7b:23:66:fd:c9:74:57:71:4f:dc:1f:9f:
de:c7:bd:09:70:b0:1e:2c:bd:5f:7c:eb:81:a0:07:
2d:47:f3:99:d2:c3:55:d4:17:6c:b4:24:1c:c3:1b:
2d:dc:f2:4f:f7:33:0f:d6:2a:a3:a5:5c:6e:fe:6d:
84:fd:be:5d:ae:95:bf:23:18:e6:60:ed:4d:2d:c0:
89:39:a9:fe:b8:33:c7:30:c2:9d:a5:d1:38:ee:f5:
58:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:60:80:67:D4:2B:F8:C7:C1:99:54:4A:01:7C:1A:95:48:A5:66:64
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133352e302f32342d3234203d3e20333936333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.135.0/24
Signature Algorithm: sha256WithRSAEncryption
21:91:b9:18:4c:42:40:02:0a:ce:8b:97:14:53:e7:a0:3f:ee:
74:e8:63:c7:30:04:0a:d0:c4:ed:b7:66:a4:62:de:5e:56:dc:
06:98:1b:e6:f5:7f:93:98:d8:f4:74:ad:47:68:2a:f7:51:5d:
0f:34:61:8b:36:5b:64:83:20:b6:de:18:12:0c:5f:21:d4:54:
80:e4:0a:ef:b5:1e:db:54:70:e6:f3:ca:df:f8:18:0f:96:3b:
5e:d9:2a:48:83:2e:f6:f6:6f:68:8f:5e:9b:14:2c:f7:3d:1e:
dc:f6:cd:48:51:ec:ca:3f:ab:c6:70:ef:55:36:30:76:a2:35:
19:ed:3d:1f:34:3f:a9:db:3b:2f:45:05:52:d0:a8:5d:c6:6e:
4b:09:c4:8a:d1:f7:a2:0f:84:0d:19:17:bd:85:bd:ea:46:39:
f2:a2:40:3c:18:46:58:e9:1e:b6:aa:92:d0:9f:32:60:1d:21:
27:e7:10:e2:e2:ca:d6:48:54:c6:62:29:b7:b9:35:3e:a5:87:
39:3a:81:c1:d2:aa:8b:3b:33:fb:b2:4e:3c:87:d0:dd:63:fe:
04:c9:91:fe:57:c8:1a:f2:5b:93:8b:5f:3e:27:47:54:04:87:
79:28:e7:5c:d3:a8:d6:bc:07:23:0c:26:7a:80:00:45:e7:c0:
a9:eb:fc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:18:16 2026 by rpki-client