Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137312e302f32342d3234203d3e2037323839.roa
File: 3134372e3132352e3137312e302f32342d3234203d3e2037323839.roa (raw, json)
Hash identifier: OfKTffspz6IkNjfBshxamaZ5QzFMXc+0ur/dGtvwvMY=
Subject key identifier: D9:61:79:39:FB:37:68:E4:B7:82:24:34:85:E9:4E:C1:54:94:B7:C0
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 31456218691065B83F15BD229A92FDFFFDC462FB
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137312e302f32342d3234203d3e2037323839.roa
Signing time: Fri 17 Jul 2026 05:39:25 +0000
ROA not before: Fri 17 Jul 2026 05:34:25 +0000
ROA not after: Fri 16 Jul 2027 05:39:25 +0000
asID: 7289
IP address blocks: 147.125.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:45:62:18:69:10:65:b8:3f:15:bd:22:9a:92:fd:ff:fd:c4:62:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jul 17 05:34:25 2026 GMT
Not After : Jul 16 05:39:25 2027 GMT
Subject: CN=D9617939FB3768E4B782243485E94EC15494B7C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a6:17:11:20:83:65:78:a9:bc:7a:0a:10:b9:
6e:cf:70:aa:28:d1:d2:19:2d:b4:04:3a:63:9e:1a:
b7:83:ab:c7:c1:79:30:10:9f:16:75:fd:17:20:18:
a5:e4:20:1b:83:4f:3f:39:ba:89:21:64:e7:2e:36:
44:ad:e5:d3:42:63:f1:30:7f:95:46:25:6a:04:38:
7b:ee:ff:39:87:de:88:30:bb:9d:8a:c5:3d:2c:10:
10:95:b7:47:f7:42:83:41:31:54:e0:f1:e7:5c:cc:
13:4c:3d:8b:fa:a2:e8:f8:c6:29:c2:43:16:eb:ce:
b7:49:c4:f7:46:90:75:fd:e5:d1:76:0a:60:d7:ba:
7b:6c:b8:a3:24:86:6e:eb:12:ff:d0:ab:9c:4e:b1:
8f:b7:c1:7d:32:db:03:4f:bc:a3:a8:c0:d0:06:9c:
b5:9a:ba:49:66:49:f1:c2:1f:66:e8:72:31:c2:04:
56:9d:6a:8d:e5:3e:9a:7f:ea:a3:67:88:de:03:c4:
6d:2e:eb:6c:10:b1:43:bb:8b:a3:d9:30:1c:64:0a:
5f:06:4a:4c:15:81:24:a3:49:a5:1a:32:a4:95:b5:
44:25:d2:ae:36:dc:2c:24:72:e0:1c:7e:97:1e:67:
96:c7:6a:78:32:a4:1b:4d:96:30:0e:e7:aa:a8:c2:
fa:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:61:79:39:FB:37:68:E4:B7:82:24:34:85:E9:4E:C1:54:94:B7:C0
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137312e302f32342d3234203d3e2037323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.171.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:1d:05:60:14:1a:81:bf:db:9a:89:48:8a:51:95:d5:72:52:
59:58:60:58:1b:4d:e7:d1:79:95:8a:d4:8c:3d:66:25:6f:39:
02:92:55:cf:b8:c1:91:25:f8:57:c8:9a:9b:aa:e8:77:74:7e:
20:57:f7:75:7b:d7:06:df:04:fe:8e:b4:0b:ec:34:1d:b0:e1:
6a:74:f3:98:41:4a:4d:ab:43:f6:55:ae:b8:54:68:47:d2:10:
f0:78:57:d1:5e:60:5e:51:df:77:d3:50:21:f5:af:db:2b:14:
8f:92:d9:10:6e:a1:28:a8:f3:92:fe:9d:21:03:64:ee:50:c3:
32:93:ec:59:ec:1c:ae:d7:3b:94:fa:27:d0:1d:11:af:83:4d:
36:80:e3:08:3b:ea:49:ce:63:ed:c5:42:20:3c:e8:dd:98:42:
c6:fb:dc:bc:da:73:c5:50:87:04:04:98:98:df:af:46:b7:01:
2b:50:13:59:44:73:86:cd:17:90:b0:70:55:fd:e7:66:91:ff:
0c:3e:4d:e2:2e:71:5d:85:5c:e6:24:97:61:03:12:7c:b9:4d:
ad:7a:a8:d7:a4:6a:a5:e2:03:75:9a:22:87:87:57:c8:94:17:
59:15:c5:c7:84:7a:57:8a:20:b2:17:9f:e8:1a:34:00:98:2e:
0e:18:9b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:51:42 2026 by rpki-client