Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139342e302f32342d3234203d3e20323033303534.roa
File: 3134372e3132352e3139342e302f32342d3234203d3e20323033303534.roa (raw, json)
Hash identifier: +pTVbPRHHo5C3jISfoxENAehHHASrsGjug0MGpkIg7s=
Subject key identifier: 76:57:EA:F1:CD:B1:51:9B:6F:7F:E6:78:C9:08:18:5C:9F:E7:85:DB
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 014B8926D109DAE84E390BC722F647119B01816F
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139342e302f32342d3234203d3e20323033303534.roa
Signing time: Wed 03 Jun 2026 12:38:27 +0000
ROA not before: Wed 03 Jun 2026 12:33:27 +0000
ROA not after: Wed 02 Jun 2027 12:38:27 +0000
asID: 203054
IP address blocks: 147.125.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:4b:89:26:d1:09:da:e8:4e:39:0b:c7:22:f6:47:11:9b:01:81:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jun 3 12:33:27 2026 GMT
Not After : Jun 2 12:38:27 2027 GMT
Subject: CN=7657EAF1CDB1519B6F7FE678C908185C9FE785DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d1:dd:70:9d:60:b4:59:d7:d1:41:db:78:88:
08:82:e0:ff:cf:df:f0:41:90:2a:7a:9a:22:d8:3c:
24:ec:13:03:ef:36:14:43:b3:0c:4a:cf:17:d7:99:
51:fd:38:16:77:a4:83:7f:f6:f0:8f:b8:71:ca:64:
b0:f7:5d:aa:6f:87:b7:67:8a:a1:2a:8b:5f:6f:5b:
49:0f:76:f6:f7:88:37:de:2b:88:87:44:bd:a1:97:
c9:c5:f2:2a:0e:80:4c:aa:dc:5d:14:15:e6:0d:37:
23:dd:09:bf:c9:9f:ed:cf:63:16:79:12:46:5e:00:
7a:73:cf:0f:01:f3:6a:fe:18:9f:21:0e:45:0c:0b:
ff:7c:f6:1d:e4:09:88:fa:ca:02:55:72:76:6d:c2:
6e:77:89:5e:f3:9d:24:a1:62:fe:15:71:0a:61:8b:
eb:f6:3e:56:f3:dd:9e:ba:3f:75:57:3c:0d:d1:54:
74:20:41:a5:b7:25:a1:d6:80:e1:f6:4c:b9:a0:6c:
78:eb:8d:21:f7:79:11:c5:4f:62:80:ab:42:ab:46:
80:67:64:b0:d0:43:91:7f:d4:30:ec:49:88:f1:a0:
60:79:fd:dc:e3:6c:21:3e:d3:f4:38:9c:ea:41:cf:
49:dd:d1:91:ef:df:14:5b:ce:d9:c6:a2:d4:ce:09:
a7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:57:EA:F1:CD:B1:51:9B:6F:7F:E6:78:C9:08:18:5C:9F:E7:85:DB
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139342e302f32342d3234203d3e20323033303534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.194.0/24
Signature Algorithm: sha256WithRSAEncryption
46:32:87:ba:93:51:fe:b7:36:93:1e:a5:f8:0d:65:21:0d:5c:
06:93:6c:66:c0:84:b8:e9:6b:05:a6:fa:24:fe:7a:e6:65:cc:
6f:f4:ff:10:a6:90:d0:9d:cd:2a:57:65:ab:11:64:52:e3:8d:
68:27:db:8a:d0:89:c1:64:56:7b:d3:09:9b:2b:89:0d:12:5d:
7d:21:99:49:b1:07:11:a8:84:f8:36:85:05:df:04:79:5a:03:
4a:14:83:a2:cb:82:1d:8a:b4:6b:68:3c:b9:63:60:b7:b4:23:
c1:5f:80:17:e3:bc:0a:40:d5:42:19:1c:63:af:c3:62:1c:10:
65:8b:d8:c5:a0:5f:5e:00:4d:52:27:4e:16:68:c2:f1:38:56:
8b:4f:27:25:eb:f2:b3:d4:8b:22:d8:9f:03:81:60:2e:cd:5f:
4c:9d:ef:fd:6d:1e:71:45:06:34:ad:4f:97:f9:ee:82:d3:5e:
7f:fa:c1:5e:4a:86:8f:46:f1:ce:b9:0e:81:2d:91:ae:d7:f1:
20:cf:22:b1:e6:f4:68:36:70:35:74:cb:9b:63:fe:5c:91:e0:
54:db:ff:81:8a:0a:40:00:01:e7:70:8f:7f:5c:1d:cf:9f:db:
89:7a:ae:40:d4:bc:f5:bc:ce:2e:4a:9e:46:b0:a6:92:4f:c2:
4b:f3:50:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:12:41 2026 by rpki-client