Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138302e302f32342d3234203d3e2037323839.roa
File: 3134372e3132352e3138302e302f32342d3234203d3e2037323839.roa (raw, json)
Hash identifier: E+F+wRPUEfiG30K5sT9xu9nPq+3IE2yGO+woTth5WIU=
Subject key identifier: 79:46:F3:D1:E3:FB:52:BE:0F:89:4A:A8:04:9C:62:CE:E8:FD:32:43
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 3549BAD472413A1D022A72DE8AC8AF8DEFD3E103
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138302e302f32342d3234203d3e2037323839.roa
Signing time: Fri 17 Jul 2026 05:39:27 +0000
ROA not before: Fri 17 Jul 2026 05:34:27 +0000
ROA not after: Fri 16 Jul 2027 05:39:27 +0000
asID: 7289
IP address blocks: 147.125.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:49:ba:d4:72:41:3a:1d:02:2a:72:de:8a:c8:af:8d:ef:d3:e1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jul 17 05:34:27 2026 GMT
Not After : Jul 16 05:39:27 2027 GMT
Subject: CN=7946F3D1E3FB52BE0F894AA8049C62CEE8FD3243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:01:32:1b:ad:df:b3:e2:0f:c8:b5:c5:5c:63:
60:2e:0f:e7:f4:b4:77:dd:57:27:c2:4d:17:14:ff:
8c:24:82:41:c2:79:f2:23:3e:3b:cd:c8:9b:7f:90:
df:c2:5f:31:fa:71:03:72:1b:ae:8b:7c:8e:bf:53:
30:bc:84:37:02:0b:4f:e7:b6:7c:b5:ef:e5:e1:74:
90:19:e9:3c:3b:35:5b:17:c3:0e:95:66:cc:fa:d0:
f4:eb:40:b3:05:b0:96:ab:c4:1a:5b:49:f9:0c:25:
e6:c2:7f:44:ca:82:9b:1f:75:91:5d:a6:94:d9:f5:
4e:a6:bd:ab:3a:f1:0b:c4:f9:9d:5c:01:6b:cf:83:
a5:e2:9b:f8:1e:fc:64:ad:3d:6c:30:ad:2c:f3:72:
49:88:a5:fe:9e:09:28:28:b7:74:78:68:79:87:62:
a0:59:50:00:a1:52:24:f4:2f:e5:6d:f9:38:5f:a3:
ea:ae:e5:4a:d6:52:4e:c2:90:da:62:a5:e9:41:36:
be:ab:50:c4:c1:07:fb:7c:59:c3:c4:9b:d5:7c:64:
6f:b4:c4:6c:73:32:03:e2:3c:81:88:6b:00:8b:85:
10:4b:10:75:6a:5f:99:99:4d:69:b1:cb:88:2a:34:
be:cf:e3:97:3a:bc:b7:d7:4e:5b:1f:13:3b:a8:ee:
87:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:46:F3:D1:E3:FB:52:BE:0F:89:4A:A8:04:9C:62:CE:E8:FD:32:43
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138302e302f32342d3234203d3e2037323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.180.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:b5:8c:47:0c:f5:fe:9e:98:4f:dc:f8:b5:e6:9e:22:89:8f:
29:a5:99:32:1b:c0:20:d8:b7:3d:4d:90:16:5a:73:83:e5:85:
59:11:be:bf:a1:4f:94:e9:f1:57:96:cf:45:0b:c4:9b:fe:03:
5f:47:c6:74:1f:fb:21:cd:1e:38:4e:72:23:cf:f9:f3:da:50:
0b:9a:58:86:82:76:af:01:89:44:4a:68:91:81:ec:51:43:2b:
83:94:42:28:ef:63:f0:9e:f0:ea:9e:28:4f:92:76:99:9b:2e:
07:c4:87:99:40:8f:75:a1:94:64:c6:81:ee:6c:e6:a9:76:bd:
ad:51:99:5c:9e:ef:55:3d:11:1b:7e:07:60:ba:d2:04:67:b4:
67:3b:4f:1a:77:1f:3a:2c:46:c0:8c:66:90:3b:19:c6:ce:3d:
ba:4d:ef:1d:b2:58:68:92:54:f9:14:a5:54:81:70:25:41:3b:
0e:8b:6e:01:32:52:2a:2a:93:82:a8:e9:6c:db:e1:9b:ed:91:
4a:9d:24:41:22:cb:27:ff:f7:d3:62:66:38:77:a3:9f:bc:b7:
09:84:66:ed:35:6d:5e:16:fb:bd:2b:f2:5e:a9:7c:b7:b3:81:
a6:99:e8:de:07:a4:7b:3d:bc:7b:35:40:36:13:af:08:af:61:
cf:14:2d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:51:41 2026 by rpki-client