Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136342e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3136342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: lK3JcYX+e+nq4JG6/PvKG0pdnMH1k6579jA1oInB6Wc=
Subject key identifier: 25:8D:18:6B:EE:0F:A0:69:31:CF:0F:30:48:69:63:37:BE:06:EF:76
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 48C8137EE2C94DF2780B276FBE366961E4F3A4AE
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136342e302f32342d3234203d3e20383334.roa
Signing time: Tue 16 Jun 2026 03:45:18 +0000
ROA not before: Tue 16 Jun 2026 03:40:18 +0000
ROA not after: Tue 15 Jun 2027 03:45:18 +0000
asID: 834
IP address blocks: 147.125.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 11:39:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:c8:13:7e:e2:c9:4d:f2:78:0b:27:6f:be:36:69:61:e4:f3:a4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jun 16 03:40:18 2026 GMT
Not After : Jun 15 03:45:18 2027 GMT
Subject: CN=258D186BEE0FA06931CF0F3048696337BE06EF76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c9:06:6d:26:d4:39:df:7a:e3:1c:5d:64:82:
5b:4c:9f:d3:f4:b5:31:21:27:36:6d:eb:7a:33:2a:
6a:ba:62:45:25:3c:1e:d9:06:7b:e9:45:11:35:f1:
0c:9c:fc:5e:f4:4a:98:90:3d:c3:90:90:47:b9:5d:
81:67:ac:34:a0:49:21:8d:54:f5:be:dd:cd:8a:2a:
1c:ad:bd:ae:26:5c:2b:10:97:8f:f6:d8:81:1c:e9:
74:37:e5:df:b0:18:b4:5e:cd:d3:64:fe:78:6d:93:
c6:9e:c7:f9:89:d6:c7:de:99:d7:d0:10:42:ab:93:
69:37:02:02:68:10:53:0a:ef:8e:82:c1:b0:fb:24:
66:c1:14:0b:0a:ba:a8:1d:b9:c3:e1:39:eb:2f:be:
ba:df:4c:45:48:cb:2e:97:81:6d:77:d6:04:8c:f0:
bb:de:07:cd:03:b6:fc:d9:2f:ee:c5:f3:75:b7:1a:
ad:90:be:7c:d6:0b:af:c5:9f:c7:02:e6:d2:54:87:
9f:47:63:52:93:f0:72:30:5f:d8:52:8c:53:79:88:
82:7e:4e:0b:38:64:e4:c1:80:03:4e:26:cb:a9:8f:
2b:d7:28:6a:60:18:c1:d8:64:83:1d:c7:65:b8:b1:
79:d4:81:2c:b4:3c:23:ef:ec:11:b6:8e:6d:b5:d5:
c3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8D:18:6B:EE:0F:A0:69:31:CF:0F:30:48:69:63:37:BE:06:EF:76
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.164.0/24
Signature Algorithm: sha256WithRSAEncryption
13:76:50:a2:49:63:11:e1:35:0a:30:11:48:a0:12:61:57:7a:
71:fe:54:f4:1a:f6:08:87:3b:83:fd:ed:14:bf:a6:1a:d6:54:
a4:23:8c:8c:1e:f3:13:b5:cc:9e:5e:40:54:16:02:e8:1d:10:
d1:ca:d0:c9:28:3c:c9:83:6a:b6:88:4c:7e:c7:ad:55:e6:ea:
af:98:9d:a9:54:ea:48:92:91:75:5f:57:22:06:96:5c:68:f0:
e5:07:ab:c4:b4:b8:75:46:a4:a7:3e:f9:1b:d8:6e:53:4f:cb:
c9:db:ad:37:7f:e8:98:90:ed:ad:e7:44:3a:f3:3c:31:a9:fb:
54:b9:d7:ca:6d:14:82:72:0c:39:1c:d7:1c:02:8b:35:3f:17:
84:3e:bc:0d:b7:97:26:cf:c8:12:23:46:6d:64:2b:e2:af:60:
aa:67:c8:da:e2:6c:25:3c:b9:97:0b:5a:fe:2e:16:dc:94:62:
e9:45:cd:f0:25:4f:30:27:32:0e:35:06:f2:49:11:0a:c2:88:
36:9e:c7:c9:01:a4:3f:17:3d:d8:9a:0d:8d:36:47:67:1f:0d:
fd:64:8b:fe:ea:23:00:2c:d7:4a:7c:d0:a7:ad:19:e8:e8:83:
bb:2e:ed:f8:46:62:f4:ed:c6:b6:e1:f8:fc:03:59:9b:a8:68:
5a:22:0b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 00:42:23 2026 by rpki-client