Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133392e302f32342d3234203d3e20323031333836.roa
File: 3134372e3132352e3133392e302f32342d3234203d3e20323031333836.roa (raw, json)
Hash identifier: zcIriRBo7sr/jpgLxV+rmPgk54f5z/O8lxzhv0U7v/U=
Subject key identifier: 87:67:11:BA:35:71:16:20:F3:A7:AA:BB:A2:39:51:9D:13:74:C1:96
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 44A38BB6CE17C698BE36FE1E4E2DE59A5DB467CA
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133392e302f32342d3234203d3e20323031333836.roa
Signing time: Wed 06 May 2026 08:16:17 +0000
ROA not before: Wed 06 May 2026 08:11:17 +0000
ROA not after: Wed 05 May 2027 08:16:17 +0000
asID: 201386
IP address blocks: 147.125.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:a3:8b:b6:ce:17:c6:98:be:36:fe:1e:4e:2d:e5:9a:5d:b4:67:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: May 6 08:11:17 2026 GMT
Not After : May 5 08:16:17 2027 GMT
Subject: CN=876711BA35711620F3A7AABBA239519D1374C196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0a:e4:62:53:ef:04:51:b4:25:e5:2d:e5:5c:
35:fb:1b:4d:c3:65:fd:37:2a:2c:c5:2f:90:e5:6e:
71:5d:14:b6:de:0d:58:94:cf:be:69:4b:19:bd:f2:
12:0e:b0:56:fe:42:56:78:80:3e:cd:cd:60:ac:ad:
3c:5e:82:93:dc:22:d2:7d:9e:18:a1:d2:92:e8:6a:
66:a3:ab:58:86:2d:56:58:f2:0c:71:d7:8e:20:2b:
62:0c:f7:11:9d:06:4e:52:82:a3:93:11:c7:0c:f6:
60:58:b1:ca:b2:87:69:d7:9f:04:94:99:4c:e3:7b:
43:34:0f:ae:47:73:dd:b7:e7:28:e1:3e:b2:4f:57:
eb:2d:fa:f5:45:46:f0:3e:d3:4c:18:c8:51:b0:a2:
63:d6:9e:be:67:ee:16:91:db:35:74:34:93:a2:5e:
ad:d9:5c:ea:54:a4:96:c8:9d:34:89:09:4c:f3:cc:
88:4e:4f:6e:82:79:f8:c4:6b:9f:f7:ef:bf:7a:28:
15:d6:95:5a:bb:6e:c1:a6:e9:86:36:12:8d:c8:40:
82:ee:9b:e9:bc:da:ac:09:f2:98:6f:28:dd:de:51:
1d:40:af:e0:91:e6:80:55:7e:4c:6b:66:59:e0:f6:
80:26:5b:95:4b:05:1a:1c:52:ce:38:16:b3:95:3b:
c9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:67:11:BA:35:71:16:20:F3:A7:AA:BB:A2:39:51:9D:13:74:C1:96
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133392e302f32342d3234203d3e20323031333836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.139.0/24
Signature Algorithm: sha256WithRSAEncryption
31:59:67:a1:8f:ff:e9:f2:78:a2:c6:fe:30:63:f6:6b:73:0e:
85:a6:df:5d:3d:18:ae:72:f9:ba:84:ce:a1:05:5a:a6:e1:ab:
f1:41:1b:c6:f0:ae:b7:d3:5b:93:6f:4d:cf:83:bc:39:ab:d0:
62:39:ff:c3:58:e5:0e:4d:43:dd:68:6c:6a:1e:b2:72:30:d2:
8f:22:8f:9b:5f:f1:84:e9:2d:55:64:93:98:98:d8:e4:92:3f:
43:21:a1:23:8a:91:98:b5:ca:09:c1:a6:69:a9:48:89:74:55:
31:f9:89:14:c0:5d:1f:bc:b4:36:03:db:64:c5:48:61:4b:26:
cc:29:78:55:48:7e:f5:79:9f:68:a9:10:e1:87:17:31:47:a6:
f1:4a:7c:d1:33:1d:ec:af:49:13:b5:e3:cd:5a:27:0a:be:18:
d7:37:b4:01:ec:dc:66:fe:f0:52:45:29:b2:e6:76:34:44:8d:
1d:a1:8a:f2:fa:e2:5f:d9:77:e8:7c:0d:df:c6:24:02:f2:62:
34:1d:90:45:f1:30:be:a0:8c:bf:74:23:94:ca:c0:0d:f6:88:
e7:1f:c2:a0:ab:07:59:fd:e3:20:da:4d:1f:56:59:af:74:ba:
b3:c2:fd:f2:87:68:51:fb:d7:8e:e5:f8:0b:c0:b9:9c:5d:1a:
f5:09:b6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:40:38 2026 by rpki-client