Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134342e302f32322d3234203d3e20383334.roa
File: 3134372e3132352e3134342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: KHxqvjiFrF/R9mPv7cJCIOTuBbR+77VyERX6a+Y+E8o=
Subject key identifier: 87:9C:27:D2:8C:05:CD:26:D7:4F:50:48:C0:68:CA:41:E0:D3:71:76
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 7C8FE34C23C43B98FE7F6BBC224F331F5A48D153
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134342e302f32322d3234203d3e20383334.roa
Signing time: Tue 21 Apr 2026 10:45:31 +0000
ROA not before: Tue 21 Apr 2026 10:40:31 +0000
ROA not after: Tue 20 Apr 2027 10:45:31 +0000
asID: 834
IP address blocks: 147.125.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:8f:e3:4c:23:c4:3b:98:fe:7f:6b:bc:22:4f:33:1f:5a:48:d1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Apr 21 10:40:31 2026 GMT
Not After : Apr 20 10:45:31 2027 GMT
Subject: CN=879C27D28C05CD26D74F5048C068CA41E0D37176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fc:61:08:28:96:0d:e0:a0:50:75:c5:c5:c0:
ad:4f:04:63:11:7b:a2:5a:10:35:b9:c7:29:71:18:
72:8b:02:76:07:80:c8:c5:2d:50:d0:d6:f4:84:ba:
7a:f1:ad:c8:d9:28:6d:e9:20:67:06:50:33:0d:95:
ff:8b:58:68:92:50:c2:cb:71:4e:52:1c:dc:1f:bf:
0a:7a:83:f7:c0:98:da:ba:1a:2d:f6:e5:f8:ec:d0:
8a:8f:de:fe:5d:f5:5e:b8:e8:f8:67:b3:cb:c6:8b:
91:50:49:7e:45:e3:af:69:8e:04:c4:1c:7a:ae:5c:
bc:c2:18:7f:31:7c:ef:3d:7a:db:90:7a:7a:13:25:
fe:7a:87:68:0b:13:5c:fe:b6:80:46:1c:dc:47:ad:
40:5c:9c:09:a1:d0:45:9d:37:ba:8d:75:c3:3e:e6:
43:ee:49:d3:78:cb:8d:51:86:75:69:8e:74:da:47:
b6:d5:06:5f:e7:09:b4:c4:e3:6d:d3:11:cc:16:14:
d8:51:39:56:2e:89:f1:35:e6:e5:de:fb:b0:95:9f:
e4:e0:0b:8a:4c:b3:99:f6:a1:8e:a9:6c:a9:48:db:
a5:a5:87:d6:58:5b:c3:4a:f8:0d:50:ae:71:85:34:
6f:68:51:d0:a3:d1:2d:e5:6d:60:ef:37:84:d1:9b:
52:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9C:27:D2:8C:05:CD:26:D7:4F:50:48:C0:68:CA:41:E0:D3:71:76
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134342e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.144.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:ab:d1:77:fa:4d:59:2c:91:94:6d:60:e2:24:64:dd:60:2c:
f4:45:97:89:30:16:31:71:9c:d2:a7:41:a6:5d:27:ee:c4:56:
63:b0:a3:ad:fa:71:de:48:cf:16:84:59:40:53:c1:7e:e6:2e:
15:fe:72:87:d4:e0:19:98:6c:5b:b2:e7:0c:e9:42:bd:f3:e6:
44:00:a5:09:29:18:89:dd:76:52:09:80:bb:7e:46:f8:8e:9d:
58:40:0b:74:83:05:13:60:7a:22:30:b5:ed:56:c4:39:a3:e7:
8e:b3:f3:1e:59:8c:81:84:c6:24:0f:4b:52:3c:a3:99:d8:8b:
01:d6:fd:c0:f6:c6:df:6a:ef:bf:d7:bb:ca:25:fa:52:94:a0:
ac:db:23:3f:ac:51:a5:40:a0:d8:61:81:41:b0:20:96:f3:a4:
08:87:f3:ed:7c:90:29:6c:aa:67:ba:10:bc:8a:36:24:4b:13:
7f:a4:e3:80:10:11:57:8f:2a:40:a0:d3:94:c8:fa:7f:ce:98:
e5:3a:42:b3:b6:e4:ab:63:c6:1e:aa:76:38:e3:11:6e:f0:09:
0c:ff:86:cd:5d:87:ce:82:36:23:d0:ce:65:59:f2:7f:3a:df:
a7:c3:e6:f6:cb:6e:0e:47:01:af:b9:12:7e:5e:28:e7:2b:b2:
07:c7:2b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:40:44 2026 by rpki-client