Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137322e302f32332d3234203d3e20383334.roa
File: 3134372e3132352e3137322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: +GLyWjtcKPxt6Jnbq168HWL4rJuxEkWxt/jpEPJoGQY=
Subject key identifier: 06:E1:5C:F7:41:03:E1:D6:56:30:2F:7D:0F:06:C5:0B:B0:17:DE:5B
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 567B5947D01B15A67EE176536F4DF44809D9A8B0
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137322e302f32332d3234203d3e20383334.roa
Signing time: Sat 20 Jun 2026 13:57:26 +0000
ROA not before: Sat 20 Jun 2026 13:52:26 +0000
ROA not after: Sat 19 Jun 2027 13:57:26 +0000
asID: 834
IP address blocks: 147.125.172.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 11:39:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:7b:59:47:d0:1b:15:a6:7e:e1:76:53:6f:4d:f4:48:09:d9:a8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jun 20 13:52:26 2026 GMT
Not After : Jun 19 13:57:26 2027 GMT
Subject: CN=06E15CF74103E1D656302F7D0F06C50BB017DE5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:1f:c8:8d:f7:eb:88:79:0c:f3:fd:a4:50:
a8:f9:35:6c:8a:b6:2c:59:bb:69:b8:88:78:a4:43:
f3:c5:cf:8c:f4:39:a5:0e:67:56:3e:0c:b7:79:fc:
86:0d:20:1c:c1:85:d8:6c:65:14:c6:05:b7:56:9e:
66:a0:c5:cc:07:34:f3:e5:db:97:ef:0d:b0:df:33:
c3:05:e0:4b:e9:c1:ad:00:97:23:04:d1:64:6c:71:
5f:62:45:c3:fe:00:eb:28:43:00:e6:35:b5:19:74:
e7:92:6e:3b:6b:64:ba:30:74:30:24:6d:35:30:95:
a6:b0:e2:76:43:30:99:c9:e8:61:cc:d7:10:32:77:
8f:8f:4a:a2:9c:ca:af:df:d5:b0:b1:70:79:0f:97:
76:3f:35:93:c6:71:57:8b:84:58:09:ea:04:8e:c8:
02:62:67:7a:87:f2:99:e8:56:14:4a:21:66:59:11:
8a:50:bc:78:0f:9f:60:d1:7f:02:78:f8:8d:e5:cb:
9b:4e:41:49:46:55:92:2d:fd:e0:a4:3e:c5:64:c6:
76:84:f1:0a:92:70:55:d8:47:36:33:b1:27:d8:b4:
4d:6f:47:1e:33:de:32:73:0c:e5:e8:2c:4e:75:e5:
fd:02:24:03:9a:d0:94:86:6f:88:97:ad:d9:25:58:
5b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E1:5C:F7:41:03:E1:D6:56:30:2F:7D:0F:06:C5:0B:B0:17:DE:5B
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.172.0/23
Signature Algorithm: sha256WithRSAEncryption
25:38:57:62:c1:8c:84:a2:db:fa:0e:9e:75:d7:c7:14:f4:8e:
e8:eb:f5:c1:80:fb:01:d3:60:8e:9e:77:5a:18:37:cb:05:88:
ba:06:5f:11:e1:e6:02:77:b1:ff:92:93:39:e5:7f:51:54:90:
e6:26:f4:8e:5b:a9:27:4d:69:17:96:ac:07:e1:72:d1:b7:0e:
68:d3:46:a5:2a:b2:e4:7f:44:a2:8b:07:02:c7:2e:35:a8:f6:
ff:b0:5a:8f:5c:b7:84:39:8e:dc:a5:e2:c0:c7:2f:ff:40:6a:
81:b4:31:29:8e:6c:d4:60:0a:9f:74:60:de:bc:e8:f6:69:b1:
fa:e3:c2:3a:7c:08:be:13:e0:14:0d:c3:3c:96:66:fb:0a:1e:
22:30:0d:71:cc:a2:35:09:ac:6f:85:b1:92:04:ab:81:1a:d9:
8f:69:f5:c4:f8:68:15:c4:cb:11:ee:99:ca:02:5e:f6:fb:45:
30:47:52:cb:c0:00:d2:c0:0e:60:7a:3c:a4:41:6b:09:e3:e8:
a1:9d:b7:33:44:a9:00:53:15:1b:ac:17:61:93:39:60:9b:f9:
90:20:e5:b5:e0:76:3e:d2:0b:3c:5f:0c:c3:eb:a3:79:cb:6c:
be:65:2c:92:1e:13:3b:3b:40:ea:a7:b7:ab:94:20:8e:7d:fb:
d0:e9:38:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 00:42:24 2026 by rpki-client