Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137342e302f32342d3234203d3e2037323839.roa
File: 3134372e3132352e3137342e302f32342d3234203d3e2037323839.roa (raw, json)
Hash identifier: RBJLWXIKLbq/Be7joFhj/Bpd9b25ULe77ySc7CFhgI0=
Subject key identifier: B9:BB:A8:B0:25:A0:24:6D:40:33:65:8E:67:FE:F0:51:A8:CD:50:72
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 61483DB819E7C7BCBA769B2AFEA08A8AB1CC4632
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137342e302f32342d3234203d3e2037323839.roa
Signing time: Fri 17 Jul 2026 05:39:26 +0000
ROA not before: Fri 17 Jul 2026 05:34:26 +0000
ROA not after: Fri 16 Jul 2027 05:39:26 +0000
asID: 7289
IP address blocks: 147.125.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:48:3d:b8:19:e7:c7:bc:ba:76:9b:2a:fe:a0:8a:8a:b1:cc:46:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jul 17 05:34:26 2026 GMT
Not After : Jul 16 05:39:26 2027 GMT
Subject: CN=B9BBA8B025A0246D4033658E67FEF051A8CD5072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:7c:4b:43:11:0f:33:97:1f:e9:1f:58:a8:
0b:51:fd:3e:a4:55:12:21:c1:bf:c1:49:ef:ff:b3:
d0:b7:03:7f:1f:14:92:52:fc:a2:c2:ac:78:40:aa:
f0:90:98:98:21:42:7a:b1:9c:90:f5:94:c9:3d:df:
ce:9c:fa:97:b1:1f:ca:d8:ac:49:f7:b2:d1:bb:49:
64:60:34:2a:79:4d:1b:78:5f:70:23:14:9c:9f:39:
84:43:d2:ce:e2:5d:ac:4f:4e:54:9b:aa:9b:7c:63:
f6:20:c6:dc:e5:d1:3c:6c:bc:90:3b:ae:f5:56:4d:
78:2c:0a:11:4c:8d:db:23:f4:14:f7:3c:64:33:f5:
88:4b:85:76:75:a4:35:f0:d7:89:f8:cd:79:bf:44:
cb:a1:0c:01:2e:67:15:ac:6d:7b:6c:91:93:cf:d5:
0d:00:57:6b:4c:d8:82:ed:53:2d:57:a0:bb:18:65:
eb:04:aa:ed:36:8d:e3:30:e8:6f:d3:49:4c:fa:76:
58:d0:0f:dc:8a:d5:76:e2:e8:94:3e:82:a7:98:7b:
ff:b8:70:55:a4:7b:fc:b3:83:9f:6c:98:02:20:4d:
54:7f:12:9d:a9:82:73:1e:21:3d:96:c4:a2:ac:87:
e6:e4:de:e0:14:34:29:9a:13:26:69:86:09:e3:0e:
9f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BB:A8:B0:25:A0:24:6D:40:33:65:8E:67:FE:F0:51:A8:CD:50:72
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137342e302f32342d3234203d3e2037323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.174.0/24
Signature Algorithm: sha256WithRSAEncryption
48:06:da:60:7f:e3:f4:f2:b0:ca:ed:cf:cd:72:8b:0a:8b:75:
b5:27:f4:7f:f5:ad:e1:1f:23:e4:01:22:df:38:4a:bf:01:3e:
af:94:2a:67:50:99:40:dc:c2:96:51:ef:cb:0c:f3:c6:b0:3f:
c6:bf:4f:5d:b4:a0:cd:ea:27:54:fd:23:f5:e7:30:3a:67:cf:
3e:48:42:57:ea:f6:af:1c:c4:37:8e:3e:32:b9:b4:0f:7e:7d:
c8:ed:2f:8c:64:bd:2e:ae:8a:03:de:24:e0:28:65:19:dd:df:
de:70:1b:e1:ac:20:64:62:f3:99:9b:99:d0:d6:a9:1c:e4:f0:
23:d9:88:40:d4:18:67:8a:9e:35:8e:ee:6c:75:07:b9:8f:5d:
02:1f:18:0f:49:55:57:66:bf:af:5b:56:dd:75:f5:d4:9c:ca:
73:33:af:a7:75:25:be:fd:46:35:5f:60:5c:66:26:da:dd:36:
fd:38:9c:01:ab:e9:1e:5f:86:cc:50:0e:df:55:06:c5:48:64:
6c:92:1a:9b:0d:e6:e9:83:b6:ab:ef:a7:0c:07:07:aa:a5:c7:
d5:94:94:be:e5:d8:a5:6d:85:54:f3:7a:0e:a7:ea:3d:37:dc:
d5:58:22:0e:16:4f:10:c8:d5:8f:7e:bf:f0:79:5e:d7:b7:f3:
6c:41:cc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:51:41 2026 by rpki-client