Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137332e302f32342d3234203d3e20343032323635.roa
File: 3134372e3132352e3137332e302f32342d3234203d3e20343032323635.roa (raw, json)
Hash identifier: pUOMHPjCndTt+FstEDgymGixp+zW1JHRlLF31TIQuCY=
Subject key identifier: 79:FA:A5:4E:AE:35:0F:F5:1D:72:BD:1D:27:54:ED:79:8A:95:8A:FA
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 4EFD180DCDC1323D9E83FDDA4E98BD1B815CC1AB
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137332e302f32342d3234203d3e20343032323635.roa
Signing time: Mon 03 Aug 2026 08:53:19 +0000
ROA not before: Mon 03 Aug 2026 08:48:19 +0000
ROA not after: Mon 02 Aug 2027 08:53:19 +0000
asID: 402265
IP address blocks: 147.125.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 15:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:fd:18:0d:cd:c1:32:3d:9e:83:fd:da:4e:98:bd:1b:81:5c:c1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Aug 3 08:48:19 2026 GMT
Not After : Aug 2 08:53:19 2027 GMT
Subject: CN=79FAA54EAE350FF51D72BD1D2754ED798A958AFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3b:40:93:c0:37:54:e4:b9:03:83:7a:f0:5b:
9a:4c:8e:89:1d:bc:6e:ab:c5:6c:08:e0:90:c6:c5:
76:1b:b5:9b:39:74:4c:6b:06:2f:d8:fb:61:bf:24:
02:bf:a6:5f:15:2c:ec:8e:53:49:7f:96:a7:c6:11:
01:fb:b5:27:ed:d2:17:0c:93:18:80:de:ac:7b:da:
fc:da:1f:7a:3b:ba:a1:d0:5e:27:9d:0d:4b:2e:8e:
4a:c3:c3:7d:be:8d:6b:dc:09:53:9c:52:63:88:5d:
a3:ac:fa:2f:77:af:3d:0c:a4:49:13:2d:45:db:89:
09:9d:0a:42:5d:f3:76:e2:09:e2:d1:1f:2f:db:7f:
3b:4d:4a:74:d4:15:23:3f:c6:b7:2a:68:6e:4a:b3:
5f:4c:69:71:4f:6b:7e:11:0d:f1:02:77:52:38:19:
7d:d0:21:a0:bf:bf:91:57:6b:56:b0:7e:09:40:8c:
3c:80:f7:23:20:91:b0:2c:eb:58:10:b5:d3:90:9e:
35:fe:f8:b1:59:ff:b9:4a:97:77:c4:0e:f7:d3:c2:
4e:26:b2:34:71:14:5f:07:8d:8d:eb:5b:42:bd:60:
f2:82:20:18:33:9a:e3:16:45:5d:c2:0e:eb:f3:8f:
d7:83:1f:a0:b2:f0:ca:f2:f7:79:f5:59:be:04:5e:
d5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FA:A5:4E:AE:35:0F:F5:1D:72:BD:1D:27:54:ED:79:8A:95:8A:FA
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137332e302f32342d3234203d3e20343032323635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.173.0/24
Signature Algorithm: sha256WithRSAEncryption
12:60:b0:da:68:36:d1:b1:b9:85:74:b2:10:86:76:5d:5d:d4:
8d:da:48:b8:df:af:f7:28:42:0f:61:f7:a1:86:15:c5:ed:6a:
71:da:3d:7c:6d:6d:34:f3:92:c9:7d:fb:30:15:d9:5b:8a:16:
7e:63:66:11:02:85:9a:63:b5:52:de:8d:a8:09:41:bf:b5:87:
33:3a:cb:c8:24:96:66:bc:a9:61:b3:99:6f:97:e2:66:fe:b1:
d6:3c:5a:d0:ee:93:8a:33:e3:cc:01:14:7d:bb:31:9c:bc:c7:
6b:cc:48:92:00:b5:18:70:67:7a:58:2c:e4:f9:3f:0d:2d:aa:
b3:24:c1:e3:6d:96:ab:7e:ab:78:f7:73:83:a4:c2:21:dd:9e:
d0:30:06:74:7c:be:42:57:b3:af:10:a2:c7:28:92:82:ae:be:
67:b4:02:b1:e7:b3:84:57:57:19:c7:ec:34:8d:0b:bf:27:e7:
27:d1:1f:12:06:a0:f6:ca:5f:6a:59:28:60:f8:ce:87:37:e1:
d1:f1:6b:cb:10:4f:34:4d:2f:4f:e3:e9:21:f4:ce:28:81:0b:
4a:f3:1f:75:7e:58:c0:cd:49:2f:92:e0:90:dc:ce:af:26:0a:
62:f8:26:d1:b4:d0:e7:66:af:69:7c:eb:87:5b:9f:6e:f1:4d:
de:7f:43:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 06:36:24 2026 by rpki-client