Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136322e302f32342d3234203d3e2037323839.roa
File: 3134372e3132352e3136322e302f32342d3234203d3e2037323839.roa (raw, json)
Hash identifier: 0V68167F2da6ixyr+oC4Ab2NI2gOcHdN2WV6QRoD2ZM=
Subject key identifier: EC:68:94:F6:BA:06:0E:3E:4C:84:34:B2:31:36:F7:A3:A6:6D:AC:1D
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 79EC83600796446F63BFB957F64272C2760B65C0
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136322e302f32342d3234203d3e2037323839.roa
Signing time: Wed 08 Jul 2026 10:41:08 +0000
ROA not before: Wed 08 Jul 2026 10:36:08 +0000
ROA not after: Wed 07 Jul 2027 10:41:08 +0000
asID: 7289
IP address blocks: 147.125.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:ec:83:60:07:96:44:6f:63:bf:b9:57:f6:42:72:c2:76:0b:65:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jul 8 10:36:08 2026 GMT
Not After : Jul 7 10:41:08 2027 GMT
Subject: CN=EC6894F6BA060E3E4C8434B23136F7A3A66DAC1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:b1:06:1f:5b:e4:ec:a1:48:d4:9d:dc:79:
5e:03:4c:7d:43:b7:b5:ca:0d:e0:6e:93:2e:d4:78:
39:e2:0d:2e:14:35:15:08:47:3c:6d:95:97:0a:21:
b3:1c:7c:b0:df:78:4c:b3:ef:b3:35:46:59:f6:53:
9b:59:ec:01:28:a5:79:df:10:8e:e5:32:27:86:96:
c7:d9:e9:f2:e2:fe:96:e5:7c:e0:2d:f9:ed:f4:c9:
a7:32:55:8e:e7:95:36:ab:ac:a4:43:ac:0e:24:b0:
b4:fa:62:2f:d5:e3:20:07:13:da:97:3d:f1:ef:1a:
c3:47:ac:88:2b:00:74:27:f4:c3:69:2d:d3:62:d9:
68:56:9d:f2:a9:0c:00:85:ed:08:93:e5:d5:af:b8:
4a:44:d6:1b:a5:83:78:be:96:32:84:95:ce:72:fe:
af:d2:d6:38:d6:27:25:e9:86:ef:53:fa:2a:09:e2:
8f:67:d8:d6:c5:c0:c0:d0:32:1b:57:4b:f0:99:0b:
65:69:0a:b9:a4:17:20:59:a5:e7:d3:83:b4:32:d1:
71:ea:1c:ad:4c:3d:ee:38:de:52:25:17:f5:4b:fa:
60:19:19:75:a7:e9:b4:e0:f8:3d:e2:10:ab:ef:12:
a8:6b:65:18:f8:cc:4f:3b:91:0e:13:cb:8e:91:54:
17:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:68:94:F6:BA:06:0E:3E:4C:84:34:B2:31:36:F7:A3:A6:6D:AC:1D
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136322e302f32342d3234203d3e2037323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.162.0/24
Signature Algorithm: sha256WithRSAEncryption
54:eb:b7:16:cd:df:86:47:91:a5:14:6d:1f:d3:7f:4c:1a:fe:
cf:48:33:ec:96:1d:a2:ce:19:5c:23:77:3b:be:8e:19:0c:6e:
78:87:2e:b8:67:30:78:26:35:13:5d:4f:24:57:89:19:8c:93:
15:27:1b:85:e2:12:05:1b:68:9b:c1:ca:98:03:df:0a:16:36:
d0:f7:ed:82:33:44:1a:e3:38:11:9e:c6:af:8a:4c:2b:22:09:
da:d0:13:b2:95:88:e3:36:3a:f0:bb:06:59:a8:b1:7b:f1:ac:
4b:2c:30:70:ca:d1:6e:a7:bd:6d:ee:65:09:bf:ed:61:53:5d:
52:13:69:d2:b0:10:67:35:27:2d:07:f9:7a:d4:05:4e:cc:fc:
49:cf:33:2a:3a:4a:44:bb:bc:3c:0f:e9:bd:66:8a:6b:2d:e2:
f8:b6:ea:6d:fe:46:27:65:65:68:eb:62:00:65:ac:ff:b1:66:
f5:c9:99:0a:7c:70:f6:80:df:30:0d:9a:e0:46:22:4b:fd:f0:
34:45:c3:a1:fa:94:15:99:a7:32:43:6e:06:5f:75:d5:c0:d2:
a5:9b:09:fa:be:f5:56:a1:f7:10:a2:e1:af:fb:dd:6f:60:18:
45:69:40:cd:63:b2:c5:cf:6d:4e:de:65:ff:9a:45:18:91:ce:
f8:ba:b3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:51:41 2026 by rpki-client