Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136382e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3136382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Imlew0MCoVuqBICc7BA6NT7MPRet0XI5jBjIhnX/jpg=
Subject key identifier: D8:EC:D7:49:E2:70:E0:98:16:66:2F:2B:3D:23:CD:0B:C8:35:09:6D
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 6A004234C7DD50593AC8584B4EC4230BC825DA0C
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136382e302f32342d3234203d3e20383334.roa
Signing time: Sat 08 Aug 2026 10:37:20 +0000
ROA not before: Sat 08 Aug 2026 10:32:20 +0000
ROA not after: Sat 07 Aug 2027 10:37:20 +0000
asID: 834
IP address blocks: 147.125.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 15:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:00:42:34:c7:dd:50:59:3a:c8:58:4b:4e:c4:23:0b:c8:25:da:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Aug 8 10:32:20 2026 GMT
Not After : Aug 7 10:37:20 2027 GMT
Subject: CN=D8ECD749E270E09816662F2B3D23CD0BC835096D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ec:f6:62:54:dc:18:b6:f6:6b:25:b9:c5:d9:
27:9f:d3:85:d3:d0:ee:73:9b:80:cb:36:6a:03:86:
89:f1:33:b1:30:4d:8a:53:ad:fd:35:c8:4f:c5:6a:
45:49:19:37:60:b6:58:cc:32:74:ea:e4:42:a9:39:
d6:97:b1:b9:76:fb:4b:aa:b5:f3:bc:62:37:0f:4c:
d3:16:ff:69:d2:57:c3:89:37:8f:ea:e4:f5:ef:30:
45:0f:75:23:31:29:cf:ee:72:12:4d:9e:f6:95:5c:
17:c8:97:4e:02:dc:0f:58:f8:df:ee:20:67:9a:d5:
85:14:35:c2:83:6f:eb:bc:50:2c:e0:0f:57:40:d1:
b9:2e:77:5c:fd:bb:dd:73:6f:09:c4:4a:bd:09:88:
73:e0:c5:57:03:06:9d:25:f0:db:b9:6f:cd:d2:51:
ce:c4:0c:f7:7a:dd:51:b4:60:6b:b0:3f:a5:27:ee:
88:19:92:d9:5f:fb:38:60:19:01:01:74:a1:16:dd:
2f:ef:71:2b:86:22:fe:00:c5:96:6b:3c:20:2c:6d:
11:ff:ee:42:10:b2:25:f4:36:dc:24:62:fe:58:c5:
19:aa:3d:29:7f:75:11:ab:20:01:be:a5:8a:3f:ee:
d4:61:b7:30:2e:53:47:21:78:dd:e4:c2:38:11:86:
87:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EC:D7:49:E2:70:E0:98:16:66:2F:2B:3D:23:CD:0B:C8:35:09:6D
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.168.0/24
Signature Algorithm: sha256WithRSAEncryption
62:47:28:c3:8a:a9:ae:f7:61:4a:d4:aa:d4:17:67:b1:d6:cc:
e4:61:d6:9c:1f:a3:7c:b6:97:b8:41:90:de:6a:ac:a6:04:42:
37:4c:ce:e3:99:96:2b:d6:7c:1d:d6:11:74:57:72:27:bf:11:
c6:09:06:78:0b:f1:31:86:ce:d7:e4:11:1b:b6:e2:8a:80:03:
99:e6:f3:1c:9c:30:e8:a4:6d:ce:28:cb:98:4f:8c:e4:9f:98:
05:6d:9f:7a:4a:2f:87:62:e8:c7:53:3f:aa:38:22:fe:29:98:
e5:18:44:d1:3d:5f:ff:a5:6a:3a:42:81:a3:6e:2a:a3:ac:6b:
d4:34:f5:68:27:67:4f:47:2b:69:55:23:78:3c:b4:40:31:b8:
29:ac:08:ab:d4:d6:c9:be:0c:ec:b7:8c:0c:c0:f6:ad:08:d8:
77:06:9e:e7:4c:64:f1:aa:f8:af:b0:c5:6e:8f:31:e5:86:ae:
73:0a:02:e0:2c:71:de:72:fb:91:68:2c:63:10:0c:fd:2f:d7:
6f:1d:f8:8b:6e:a3:48:90:a0:bf:bc:c9:1c:ed:08:98:fb:e8:
08:6e:ea:4f:7b:6d:a6:f6:95:af:3d:8b:20:bb:fa:89:91:35:
20:b0:a9:db:45:73:9e:9d:c2:b8:8f:0c:72:57:c9:01:3e:90:
3e:c2:fe:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 06:35:54 2026 by rpki-client