Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136382e302f32342d3234203d3e2037323839.roa
File: 3134372e3132352e3136382e302f32342d3234203d3e2037323839.roa (raw, json)
Hash identifier: MYl3VHRZVho/Ut+zpLVHwCxXpHv8OVvrP3fsVrELe70=
Subject key identifier: 0E:B1:B8:05:0C:24:0C:58:4C:8E:D7:69:85:87:DD:23:F9:86:0D:E5
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 70AB5815854966C70A07AB2CCE1984199E2737A3
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136382e302f32342d3234203d3e2037323839.roa
Signing time: Wed 08 Jul 2026 10:41:10 +0000
ROA not before: Wed 08 Jul 2026 10:36:10 +0000
ROA not after: Wed 07 Jul 2027 10:41:10 +0000
asID: 7289
IP address blocks: 147.125.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:ab:58:15:85:49:66:c7:0a:07:ab:2c:ce:19:84:19:9e:27:37:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jul 8 10:36:10 2026 GMT
Not After : Jul 7 10:41:10 2027 GMT
Subject: CN=0EB1B8050C240C584C8ED7698587DD23F9860DE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5b:39:73:ad:8a:ad:7f:0e:b0:fd:3e:ba:3b:
de:fe:a5:58:8a:9e:89:e5:ed:30:65:6c:41:ed:b2:
1f:de:ce:0f:ef:2a:9d:0f:08:d8:13:b4:e4:4c:76:
50:df:e3:46:51:4c:52:bb:77:be:30:e3:22:1c:e7:
68:aa:72:57:85:e0:40:e2:25:95:8e:26:3a:1e:97:
a3:ab:c3:d9:2a:42:6e:b4:97:87:e6:c5:c4:1d:b0:
78:aa:9e:d8:b0:f5:2d:be:3f:a1:93:3c:5c:e7:af:
bb:43:dd:7a:f1:f9:b8:3b:48:94:e4:0e:f4:94:5e:
48:89:71:fc:80:92:9b:6d:6b:9c:60:bc:96:1b:e3:
d2:40:8d:1e:22:b2:a8:5e:c4:3a:d6:71:dd:6f:a3:
57:5d:9e:0b:e3:30:b2:c7:f4:00:0b:9c:66:63:37:
ad:9d:7a:8f:67:73:4d:ab:de:2c:7f:5d:0c:2a:2e:
e3:c5:e6:4e:6b:1d:71:4b:3a:02:91:fd:be:e2:c5:
6b:2e:56:0d:11:e2:33:c5:69:06:ac:19:6f:98:3b:
8c:f9:69:de:09:dc:dd:9b:2b:84:45:df:39:dc:29:
34:d8:cb:0a:4c:66:47:a0:6c:e9:d7:18:b0:c7:7f:
dd:19:cf:ff:2f:6d:32:2e:20:7d:76:a0:2d:6e:21:
ea:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B1:B8:05:0C:24:0C:58:4C:8E:D7:69:85:87:DD:23:F9:86:0D:E5
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136382e302f32342d3234203d3e2037323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.168.0/24
Signature Algorithm: sha256WithRSAEncryption
23:79:23:6f:f2:01:9d:27:06:25:83:85:17:25:6a:b2:a8:8c:
f0:f1:2b:09:7a:ea:67:d8:bb:4a:31:c7:2f:b6:65:94:dd:b9:
65:1e:67:d1:09:35:5e:06:5d:43:e6:06:4e:b7:1d:7e:a8:7b:
0f:19:1e:0d:dc:42:c0:d8:ba:a1:c1:17:8e:6d:34:9f:98:24:
97:4b:23:1f:ad:53:d5:c7:3d:ef:a5:4f:4b:9f:7f:1a:b0:3c:
1c:f7:90:48:99:e5:55:69:0d:38:3e:17:c9:fa:72:f7:af:14:
12:54:e9:50:85:0f:e0:36:ca:75:e8:9b:ed:7e:30:d4:14:83:
d6:ae:93:3d:71:3e:f9:78:70:ff:97:43:e7:b6:26:c4:28:33:
29:07:78:fd:c5:f5:72:98:b4:a8:76:f4:e8:9c:e4:41:39:ba:
58:7c:d2:68:9c:de:ad:2b:30:c9:2f:04:8a:b3:bc:a0:59:6a:
05:84:14:13:28:c2:fc:57:19:ae:3c:a4:b3:f6:7f:46:fc:42:
77:27:69:8d:56:29:12:ec:51:36:91:b9:a1:33:6a:e7:8b:4a:
a5:6e:be:aa:fe:e0:25:5a:f1:51:25:2a:87:81:14:05:d1:49:
3d:08:d6:46:47:52:72:df:c0:ef:68:93:5b:7f:eb:b4:4f:4f:
ea:e7:78:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:51:41 2026 by rpki-client