Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134322e302f32342d3234203d3e20333938373034.roa
File: 3134372e3132352e3134322e302f32342d3234203d3e20333938373034.roa (raw, json)
Hash identifier: n3DHp52sFG2qDRF0gELWTSxpu0zV5wfdqLnHL3GmT8A=
Subject key identifier: 74:E4:7C:E5:CC:3B:EA:18:E2:E5:0E:E3:E7:8B:5D:1C:DE:67:FA:CE
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 3B42341D6BA58AF93BFF5DD521C8F6BE35A6B979
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134322e302f32342d3234203d3e20333938373034.roa
Signing time: Tue 21 Apr 2026 09:09:11 +0000
ROA not before: Tue 21 Apr 2026 09:04:11 +0000
ROA not after: Tue 20 Apr 2027 09:09:11 +0000
asID: 398704
IP address blocks: 147.125.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:42:34:1d:6b:a5:8a:f9:3b:ff:5d:d5:21:c8:f6:be:35:a6:b9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Apr 21 09:04:11 2026 GMT
Not After : Apr 20 09:09:11 2027 GMT
Subject: CN=74E47CE5CC3BEA18E2E50EE3E78B5D1CDE67FACE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c0:f9:51:72:7b:d8:0b:af:f7:df:58:6d:6c:
91:83:a6:1e:4d:50:89:c0:9c:36:c9:a0:44:d3:58:
e4:a7:71:bf:97:62:9d:d0:2d:06:59:8d:3c:f5:e0:
70:95:7e:4d:47:68:82:2c:5f:d1:82:5e:27:95:a6:
ff:dc:14:9c:ea:e4:a8:b2:d2:8a:bf:85:3a:7f:59:
11:cd:ae:f7:5b:31:8c:c2:df:58:31:17:ec:bc:fa:
a1:19:4d:b5:78:1b:f7:52:04:ba:f7:e2:24:ad:b7:
a1:ba:1d:44:04:16:e1:40:26:77:90:7e:6a:41:dd:
9f:eb:ff:12:18:a8:30:1f:2d:cd:1b:d4:44:af:b4:
cd:a9:cd:50:e8:5c:52:54:26:fd:12:0b:a8:f6:e8:
ed:21:08:0d:f6:ba:7d:b3:2a:ca:fb:fd:06:d0:b7:
24:82:85:7f:90:c2:dc:f5:e8:cc:cd:57:07:21:3a:
a1:d9:b4:ad:76:ed:1d:aa:9c:48:ef:9d:91:f7:5e:
55:fd:84:02:82:10:90:f0:5d:55:44:28:43:01:6c:
18:d3:28:2f:e5:81:2a:5f:f3:1f:da:e7:1f:6a:a8:
0e:85:bf:8b:d8:95:bb:b1:62:e3:17:be:9b:02:d1:
47:ee:5a:41:44:de:77:ee:27:57:0a:b3:60:2c:f5:
38:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E4:7C:E5:CC:3B:EA:18:E2:E5:0E:E3:E7:8B:5D:1C:DE:67:FA:CE
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134322e302f32342d3234203d3e20333938373034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.142.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:6e:76:10:4c:8d:55:bf:c8:8d:8b:ed:1b:06:b0:1f:6a:eb:
7f:48:47:1e:19:d3:4f:bc:59:26:6c:bd:15:86:74:f9:27:0c:
ea:17:ec:e2:5a:5e:e6:12:91:da:f7:9d:55:31:48:d5:34:20:
59:84:e1:c8:0a:a9:b3:d6:e6:9b:a6:a6:9e:25:c0:63:fa:0a:
06:59:b5:17:df:76:2e:90:35:16:23:dd:4c:11:7d:e9:0c:16:
0e:aa:dd:73:a8:8c:f9:fe:a5:4a:0a:80:e3:5c:21:dc:b9:27:
0f:96:3a:d6:51:57:f7:ea:5c:85:0e:88:66:6b:93:71:14:57:
6b:6f:2c:38:b0:4b:29:c9:6f:7b:9b:24:1c:50:07:91:28:6e:
82:e2:60:f4:c4:c1:41:38:c4:15:71:30:e2:fe:5e:3b:c4:01:
7a:7f:77:d1:17:a7:a4:07:3e:40:9c:a4:f6:e0:ec:3b:11:0f:
3e:60:b2:6c:a4:f6:c4:63:73:fd:a5:08:29:f5:17:21:e3:34:
07:fb:b8:77:43:8b:54:d0:f7:80:62:49:3a:50:be:b6:ec:94:
d6:9b:9b:83:ca:e4:f4:95:ac:1d:e3:57:4c:e0:a1:d4:af:a7:
02:e3:e6:cb:2f:df:12:64:61:94:fc:c2:16:63:6a:1b:71:c4:
ba:d1:f3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:40:36 2026 by rpki-client