Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134332e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3134332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Qdxs/H9Z1Jsx7sHmyvRKA/Vs+mYvVr4nGd7ursLyEoU=
Subject key identifier: 1A:7A:CB:9F:19:1F:9A:28:DF:85:A6:01:35:03:78:01:89:2B:77:DD
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 3A97F948D9EA0290A2EDAC01ED5343D489193F89
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134332e302f32342d3234203d3e20383334.roa
Signing time: Tue 21 Apr 2026 10:45:31 +0000
ROA not before: Tue 21 Apr 2026 10:40:31 +0000
ROA not after: Tue 20 Apr 2027 10:45:31 +0000
asID: 834
IP address blocks: 147.125.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:97:f9:48:d9:ea:02:90:a2:ed:ac:01:ed:53:43:d4:89:19:3f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Apr 21 10:40:31 2026 GMT
Not After : Apr 20 10:45:31 2027 GMT
Subject: CN=1A7ACB9F191F9A28DF85A60135037801892B77DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:81:29:64:99:2c:35:05:d4:52:d4:6a:2b:5e:
87:cc:ce:7b:53:0d:9d:2d:45:dc:0d:11:00:52:2f:
57:72:46:54:f3:55:41:c6:dd:80:ea:4b:da:2f:63:
ab:d5:d7:a2:33:5b:7f:64:4a:82:28:e1:c2:db:af:
37:86:a5:ef:06:d2:9b:e7:c5:f6:f1:e6:27:2f:02:
26:3a:82:5a:69:1c:57:1e:c2:51:b8:cb:a3:1e:69:
87:04:44:e9:3d:96:b9:d3:49:40:ad:aa:0c:19:27:
29:d6:ac:a4:4e:50:a0:8a:13:e1:b3:f7:1c:33:fb:
c5:2d:08:67:ae:dd:7a:82:8b:76:3d:08:f2:b6:63:
9e:1a:03:d4:0c:b8:8e:82:b1:76:29:e3:46:bd:91:
ed:c0:77:87:37:7d:fd:82:04:67:9a:a9:5f:66:b1:
18:58:76:13:2e:3a:94:92:c1:d7:03:6f:07:4c:b2:
36:9a:2d:ec:d2:5d:3c:13:74:be:9b:b2:1c:86:11:
aa:a3:21:5e:ec:93:a6:80:29:df:50:da:da:8b:2e:
28:fe:0d:bf:b7:f9:d8:a4:ce:08:49:39:0b:74:1a:
c6:20:05:88:c0:5c:a4:ec:8d:75:bf:a2:01:9b:65:
b6:66:08:92:23:2e:88:6d:ee:2f:aa:59:b5:63:de:
a7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7A:CB:9F:19:1F:9A:28:DF:85:A6:01:35:03:78:01:89:2B:77:DD
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.143.0/24
Signature Algorithm: sha256WithRSAEncryption
00:2c:77:f8:7a:37:f8:3c:72:96:72:64:3d:f4:bf:54:96:15:
3e:a8:e9:66:28:f9:46:ed:7b:56:e3:b5:5f:96:30:e9:e4:14:
f9:e6:8a:a0:18:94:96:8b:41:9c:14:66:f1:8a:b2:2c:26:f5:
9c:06:64:9c:b2:ab:93:ac:87:b3:98:99:5f:37:b1:ef:72:04:
2e:49:d5:00:3b:36:11:ca:b7:1b:54:98:01:e2:44:fb:2d:d0:
69:33:6b:fd:4c:4e:49:84:e8:e1:a7:95:d3:c9:eb:19:7e:b1:
b4:f5:18:3e:89:e2:45:90:54:91:81:9f:c6:b7:f7:af:0a:c9:
7a:dd:f8:a2:50:75:18:82:f3:5c:ed:3b:3b:03:67:83:97:d3:
86:e0:02:e7:8f:ba:8b:3e:10:7e:63:4b:8a:32:a1:50:11:09:
9d:46:fc:44:86:4b:11:df:7f:84:23:81:a1:e9:71:04:52:cb:
66:97:f1:1d:e3:8b:fa:b5:dc:55:d2:2c:f3:7a:d4:af:4e:92:
15:f2:73:d5:2d:d7:01:45:c8:0d:c7:d6:12:6a:3e:4c:23:5f:
cc:74:c5:90:a4:03:03:7f:4a:27:9c:ac:fd:bf:71:4e:84:16:
71:e1:dd:4d:d5:de:c0:1c:43:62:c1:2f:4b:12:42:be:22:9f:
13:8f:cb:b1
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUOpf5SNnqApCi7awB7VND1IkZP4kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNjA0MjExMDQwMzFaFw0yNzA0MjAxMDQ1MzFaMDMxMTAvBgNV
BAMTKDFBN0FDQjlGMTkxRjlBMjhERjg1QTYwMTM1MDM3ODAxODkyQjc3REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkgSlkmSw1BdRS1GorXofMzntT
DZ0tRdwNEQBSL1dyRlTzVUHG3YDqS9ovY6vV16IzW39kSoIo4cLbrzeGpe8G0pvn
xfbx5icvAiY6glppHFcewlG4y6MeaYcEROk9lrnTSUCtqgwZJynWrKROUKCKE+Gz
9xwz+8UtCGeu3XqCi3Y9CPK2Y54aA9QMuI6CsXYp40a9ke3Ad4c3ff2CBGeaqV9m
sRhYdhMuOpSSwdcDbwdMsjaaLezSXTwTdL6bshyGEaqjIV7sk6aAKd9Q2tqLLij+
Db+3+dikzghJOQt0GsYgBYjAXKTsjXW/ogGbZbZmCJIjLoht7i+qWbVj3qcfAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUGnrLnxkfmijfhaYBNQN4AYkrd90wHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx
MzQzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9
jzANBgkqhkiG9w0BAQsFAAOCAQEAACx3+Ho3+DxylnJkPfS/VJYVPqjpZij5Ru17
VuO1X5Yw6eQU+eaKoBiUlotBnBRm8YqyLCb1nAZknLKrk6yHs5iZXzex73IELknV
ADs2Ecq3G1SYAeJE+y3QaTNr/UxOSYTo4aeV08nrGX6xtPUYPoniRZBUkYGfxrf3
rwrJet34olB1GILzXO07OwNng5fThuAC54+6iz4QfmNLijKhUBEJnUb8RIZLEd9/
hCOBoelxBFLLZpfxHeOL+rXcVdIs83rUr06SFfJz1S3XAUXIDcfWEmo+TCNfzHTF
kKQDA39KJ5ys/b9xToQWceHdTdXewBxDYsEvSxJCviKfE4/LsQ==
-----END CERTIFICATE-----
Generated at Wed May 13 09:40:46 2026 by rpki-client