Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137382e302f32342d3234203d3e2037323839.roa
File: 3134372e3132352e3137382e302f32342d3234203d3e2037323839.roa (raw, json)
Hash identifier: hJQd2GooxO/Wy+FZk7OfjxAKbuTW1T8zid1W8D6a9JY=
Subject key identifier: 3E:FA:3E:BF:28:9D:2B:13:4B:49:D3:AD:08:B9:AF:1B:D2:9A:49:FE
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 7DDF171E304EF20DBAB4E7A838D2575B10605CD9
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137382e302f32342d3234203d3e2037323839.roa
Signing time: Fri 17 Jul 2026 05:39:27 +0000
ROA not before: Fri 17 Jul 2026 05:34:27 +0000
ROA not after: Fri 16 Jul 2027 05:39:27 +0000
asID: 7289
IP address blocks: 147.125.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:df:17:1e:30:4e:f2:0d:ba:b4:e7:a8:38:d2:57:5b:10:60:5c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jul 17 05:34:27 2026 GMT
Not After : Jul 16 05:39:27 2027 GMT
Subject: CN=3EFA3EBF289D2B134B49D3AD08B9AF1BD29A49FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:25:62:09:64:5f:c3:63:ef:0e:95:e9:34:f1:
46:bb:6b:9f:e2:2a:bf:d8:da:1d:7d:1f:07:c1:a6:
76:1a:95:78:cb:fe:1e:e1:3a:d9:1f:93:ca:89:af:
a8:b1:8f:a4:d6:49:bf:a9:c7:0e:fc:15:fb:23:03:
d6:ac:f6:1b:f2:f4:f5:6c:71:82:f0:af:8d:4f:c0:
8a:67:14:8f:06:07:92:2f:87:71:df:b7:fb:24:ac:
b7:b0:ce:af:97:ff:a0:b2:ce:ef:c8:6f:fb:ef:69:
d5:1d:d4:79:03:27:55:6a:10:19:1d:c0:3d:13:8e:
de:01:f7:f2:0b:56:49:3f:92:87:c2:6f:3d:05:c2:
e9:7a:72:40:08:63:b5:4d:12:6e:4a:d2:3b:90:b5:
14:42:94:7f:5f:1e:12:7c:06:1e:30:ab:8d:d9:a6:
92:2b:6b:4a:42:09:67:bc:75:c8:a0:b1:d8:de:77:
83:8c:ff:49:46:53:a8:d6:33:cb:f2:47:3a:6c:98:
0e:c4:bd:fe:38:da:83:d9:44:7b:d1:51:99:54:b3:
be:3a:f5:40:31:3d:77:30:79:00:2e:cb:69:97:c5:
4c:62:b3:4b:91:79:5a:0e:cf:fe:24:7c:48:76:22:
b7:fe:b7:05:69:a0:89:29:0c:b6:4d:73:8a:4d:f7:
c3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FA:3E:BF:28:9D:2B:13:4B:49:D3:AD:08:B9:AF:1B:D2:9A:49:FE
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137382e302f32342d3234203d3e2037323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.178.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:9c:b2:4e:c1:10:36:5d:12:37:18:43:c3:d7:c7:83:00:05:
a0:51:a8:8f:b0:fc:ab:27:61:cb:d0:59:81:56:a8:b3:c4:29:
ea:f6:7c:2c:14:c5:e4:db:f0:4d:ba:85:51:ab:b5:69:54:13:
3a:a9:d6:17:a8:8f:a3:39:47:70:53:de:87:22:82:59:7a:cf:
0e:40:59:0a:c9:89:35:e0:7c:58:13:16:ac:0c:dd:45:10:20:
09:48:8a:2a:7b:f9:01:42:b4:af:c4:8a:9e:db:3b:de:af:32:
cf:58:0a:f5:77:d9:2d:ac:3a:41:d7:bb:47:ed:1d:7b:fa:63:
03:d5:23:93:04:95:ae:25:f8:90:fa:b1:c1:ef:db:e9:31:95:
a0:fe:75:2d:4f:8d:e3:a3:de:55:44:e1:a9:dd:c1:af:c3:2b:
20:c5:c3:d3:52:33:e0:0c:ef:6e:cf:65:07:8c:d9:32:f8:a8:
78:10:1e:4e:00:1f:c5:67:73:3d:48:6b:d6:ae:76:4e:ca:78:
a6:81:54:1d:b2:ae:f2:ac:3d:1a:fe:45:a4:24:48:4f:eb:48:
ea:1e:e7:ab:d2:3b:bb:28:ea:bc:dd:30:89:cb:f1:2a:16:c6:
7a:ba:8e:f7:90:bd:02:a5:ea:2d:10:8f:56:5d:d5:d1:bc:ab:
1c:58:57:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:51:40 2026 by rpki-client