Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137322e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3137322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 0NmFEoC4RYI1SgOzck0cOsYdTzZFOv8nxlQuZVIHfbw=
Subject key identifier: 6F:7B:8D:99:FA:A0:27:D0:F4:93:54:EA:2F:84:ED:74:3A:35:EE:BC
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 5F9C46E54E23EE8C75E79C0EE83D64A7C1E6E3B5
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137322e302f32342d3234203d3e20383334.roa
Signing time: Mon 03 Aug 2026 08:53:30 +0000
ROA not before: Mon 03 Aug 2026 08:48:30 +0000
ROA not after: Mon 02 Aug 2027 08:53:30 +0000
asID: 834
IP address blocks: 147.125.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 15:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:9c:46:e5:4e:23:ee:8c:75:e7:9c:0e:e8:3d:64:a7:c1:e6:e3:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Aug 3 08:48:30 2026 GMT
Not After : Aug 2 08:53:30 2027 GMT
Subject: CN=6F7B8D99FAA027D0F49354EA2F84ED743A35EEBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:03:40:a1:2f:b0:8e:db:73:be:4a:e6:b9:d6:
e8:4c:3f:cb:d2:51:50:fe:0a:73:92:22:4d:8c:a9:
da:c4:2e:55:43:1b:22:ed:c3:6a:9f:90:15:21:ee:
6e:29:b1:d3:a9:d8:69:4d:ef:2c:fd:9c:2f:8a:1d:
48:66:fe:e3:45:77:4a:40:8c:0d:5f:2a:df:d0:72:
ed:a8:82:84:e5:8b:df:38:52:87:57:3c:d2:d6:8f:
1c:25:ac:f9:02:4c:25:60:33:28:b1:a3:83:5f:af:
b2:0c:21:e8:d9:a5:06:a4:f7:82:19:1c:44:d4:17:
a2:16:fa:4e:7f:26:d8:b7:10:32:8d:d5:eb:f3:a5:
12:01:70:1e:d1:79:65:6c:d6:fa:f4:e1:21:9c:c6:
9a:b4:45:a8:74:a8:d4:7a:ea:ce:dc:90:b1:9e:e7:
b2:e9:f3:69:3c:3f:bf:7a:a0:6e:66:8f:d1:43:a5:
ec:1f:5c:e8:da:f3:0c:17:fd:92:ed:d7:1b:4a:0f:
49:11:8f:74:85:40:b5:25:94:65:1f:d0:2c:a7:92:
f8:09:14:e4:cc:e8:70:ad:d5:39:43:c5:bb:5f:bc:
4e:38:59:e3:62:0f:65:94:79:1f:35:51:c2:1c:49:
cb:62:a8:46:3e:b3:4c:84:3b:82:b3:0b:89:5b:7b:
48:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7B:8D:99:FA:A0:27:D0:F4:93:54:EA:2F:84:ED:74:3A:35:EE:BC
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.172.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:9c:5c:c2:d4:1a:8d:1a:7e:48:4c:4f:6d:f6:52:66:ad:aa:
58:62:b7:0c:4e:00:0e:cd:e3:7e:43:18:ea:65:ba:82:f3:1a:
e0:d2:7c:ce:f2:dd:4f:f0:76:68:38:89:c8:82:18:f9:46:96:
22:5b:ec:e0:45:5a:49:a1:50:c4:f5:da:3d:86:01:ff:8b:41:
43:a8:29:b2:3e:e2:27:f8:c5:d9:43:b3:52:cd:16:09:f7:3f:
e6:67:6f:93:5e:1a:b7:9a:71:3b:25:89:bb:fc:fb:e7:2a:3c:
fa:dd:7a:80:d6:e8:44:0f:25:dc:2a:be:68:c4:27:96:b2:7e:
3c:cb:35:36:71:70:e3:bf:d6:52:dd:33:51:b0:92:11:44:69:
47:c1:54:b8:e2:19:4c:4c:12:a1:57:0b:44:42:64:6e:47:4f:
0f:7e:0d:d8:4d:f6:ee:66:e3:17:9b:5e:e0:aa:d3:18:64:40:
77:d3:69:6a:6a:eb:bf:6f:e1:84:f9:f1:ca:b0:7c:a7:e9:5c:
d1:b0:e9:08:cc:be:78:68:2a:46:34:20:25:2e:68:c7:19:16:
0b:6a:16:c6:bb:21:82:52:89:2c:a5:05:36:ff:21:9e:cf:19:
93:9d:30:cc:28:1b:30:9e:b8:10:aa:52:b6:00:18:69:ec:8e:
d5:4b:6a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 06:35:51 2026 by rpki-client