Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138392e302f32342d3234203d3e20323139313630.roa
File: 3134372e3132352e3138392e302f32342d3234203d3e20323139313630.roa (raw, json)
Hash identifier: Yzyg+LMS20dd1sBhh1HwwsCArmVu0gekWkP9EK7NVdE=
Subject key identifier: 00:36:D3:E2:0B:1A:EE:E8:A2:E7:25:FB:AF:90:3B:93:AF:CA:37:79
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 584ECD36CEDBDCED8DF7175CB3741E1AA23CBFCF
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138392e302f32342d3234203d3e20323139313630.roa
Signing time: Fri 04 Sep 2026 12:17:36 +0000
ROA not before: Fri 04 Sep 2026 12:12:36 +0000
ROA not after: Fri 03 Sep 2027 12:17:36 +0000
asID: 219160
IP address blocks: 147.125.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 07:11:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:4e:cd:36:ce:db:dc:ed:8d:f7:17:5c:b3:74:1e:1a:a2:3c:bf:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 4 12:12:36 2026 GMT
Not After : Sep 3 12:17:36 2027 GMT
Subject: CN=0036D3E20B1AEEE8A2E725FBAF903B93AFCA3779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:84:92:ca:c6:95:72:28:b8:1e:71:b6:27:04:
63:a7:47:24:4f:ac:2b:9c:3c:42:ab:c9:f5:b0:10:
eb:a3:e4:ac:33:4e:83:1a:32:b0:97:6d:6c:51:ef:
16:a5:f2:1b:4a:b5:64:0d:77:bc:69:16:fd:fd:1d:
e9:eb:43:fc:ac:33:17:67:30:eb:5f:8f:a7:95:78:
32:4d:30:c9:74:5e:24:73:56:4b:03:08:73:4b:58:
61:3d:8d:23:4e:e4:33:24:56:6f:a8:e2:e4:cf:74:
af:a7:23:a9:71:56:cf:fc:5f:65:88:7b:6a:8a:88:
95:b2:72:91:d3:dd:6f:a2:c0:1f:3d:4f:64:82:1a:
1e:ef:ed:fc:7e:72:a1:bd:90:89:af:f6:2c:e7:b1:
37:9f:5d:81:aa:cd:c7:c6:be:51:a8:4d:69:a4:9d:
16:3e:cb:cd:b6:fb:f2:18:4b:24:9c:54:a7:54:93:
10:67:31:59:22:2b:ea:c9:47:34:bb:08:a7:75:b1:
df:f1:ee:d7:ad:3a:63:a8:aa:5e:69:76:1d:62:83:
ca:ef:dc:6d:80:eb:ad:ad:d7:f9:e3:37:1b:4c:8f:
3f:85:4a:52:fb:b7:6e:9b:c8:12:45:c1:cb:2d:87:
b9:c2:62:3c:65:74:8c:2f:a9:44:69:52:69:8f:a5:
1c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:36:D3:E2:0B:1A:EE:E8:A2:E7:25:FB:AF:90:3B:93:AF:CA:37:79
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138392e302f32342d3234203d3e20323139313630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.189.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:32:e9:62:29:96:6a:9a:33:bb:0c:62:cb:ed:0b:b0:91:b8:
17:53:54:c4:21:d5:12:e2:27:89:d4:f4:43:aa:08:33:9e:1d:
c1:22:14:40:26:87:3f:89:c5:fc:0a:b6:41:92:e6:9e:e3:8e:
f1:e1:e2:1e:a1:98:16:01:c0:24:67:82:de:f8:94:c4:f0:c1:
40:20:83:3c:f2:31:8f:61:a4:48:5c:fc:38:02:69:d2:a3:e0:
f8:5c:35:11:a2:db:11:e1:93:2f:43:06:03:b9:2c:97:f7:5b:
8a:d6:d5:45:b5:a7:85:a4:8c:7f:28:88:d9:d5:0f:a5:62:6a:
0d:64:7b:d1:34:4f:e9:ec:cd:65:9a:02:53:a7:ec:71:b1:c3:
2c:e5:e8:8c:f4:e5:a9:b0:a7:e9:43:f5:0d:94:d6:d3:77:6f:
a9:a0:d5:1c:d4:39:34:0b:3b:df:5d:22:c8:98:b3:0b:06:f6:
d7:6e:4a:49:5b:91:44:16:1d:67:27:65:cf:d8:1d:94:66:55:
e0:6d:eb:06:0f:92:a9:9c:db:dd:35:24:ef:a6:1b:e2:97:fa:
8f:90:a1:30:9b:19:10:64:19:cd:47:ab:95:c7:ea:8e:4b:f2:
35:a2:48:7a:68:c8:24:3a:fb:36:47:32:58:60:e7:63:61:94:
b3:82:c4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 21:04:04 2026 by rpki-client