Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230342e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3230342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: u1nHvKHmHuJXBEMwE5AlS5ztKhqOm10sf3PzLPQ7PYA=
Subject key identifier: DD:99:A7:00:83:FE:CA:4F:40:32:EA:9F:C8:0F:88:3F:E9:3C:03:0F
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 6816DE4BA53DD9880F0580EFA79CCB7BF7AC2AD2
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230342e302f32342d3234203d3e20383334.roa
Signing time: Tue 21 Apr 2026 09:09:11 +0000
ROA not before: Tue 21 Apr 2026 09:04:11 +0000
ROA not after: Tue 20 Apr 2027 09:09:11 +0000
asID: 834
IP address blocks: 147.125.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:16:de:4b:a5:3d:d9:88:0f:05:80:ef:a7:9c:cb:7b:f7:ac:2a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Apr 21 09:04:11 2026 GMT
Not After : Apr 20 09:09:11 2027 GMT
Subject: CN=DD99A70083FECA4F4032EA9FC80F883FE93C030F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6d:79:ba:ff:e0:35:35:79:d6:80:5e:2b:8e:
4b:48:24:63:97:8a:73:28:6a:98:67:fe:ee:59:ad:
2c:70:3f:02:23:fd:a0:c6:3f:b5:34:9c:98:63:16:
0f:f4:1c:01:f1:e5:06:7e:1c:22:ce:9e:0a:f4:24:
0c:1c:4d:c4:26:18:79:99:29:26:5b:cb:19:f4:d8:
1f:34:bc:c6:6a:ba:28:1a:ec:3e:b7:ae:29:d0:e0:
7a:29:73:4e:2d:c8:50:a2:e5:58:6a:83:b9:a9:e8:
bf:d8:a8:1f:40:be:a0:38:44:37:76:fd:e1:60:0f:
c2:e6:d3:52:c4:00:1f:56:4d:a4:a3:d3:2a:02:64:
00:7e:be:17:3b:38:a5:cb:07:32:f4:a7:cd:0b:1d:
6e:7b:46:96:be:60:15:e1:25:cf:71:80:d1:04:66:
c4:f2:db:e7:24:8e:74:34:9f:de:23:de:b7:1b:8a:
64:7f:94:72:11:6d:f7:62:da:01:44:01:64:97:6a:
3e:53:d8:d5:1f:ff:f9:2a:06:96:92:37:db:62:dd:
43:e0:98:f9:e9:58:4c:33:ee:31:6f:fb:71:d8:10:
43:4d:b3:44:d4:5b:5f:86:af:d8:4b:02:63:99:34:
87:ce:6b:3a:07:39:b7:13:fb:ae:ea:b2:a3:e2:d0:
5e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:99:A7:00:83:FE:CA:4F:40:32:EA:9F:C8:0F:88:3F:E9:3C:03:0F
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.204.0/24
Signature Algorithm: sha256WithRSAEncryption
62:9b:12:f4:0e:6c:5f:2a:d8:8e:0c:e2:ac:c6:a2:17:56:9b:
80:72:5e:aa:bb:ec:47:24:30:9c:0f:37:b3:e2:ff:e2:f5:3d:
41:c6:75:8a:5e:00:da:42:3f:2f:90:47:eb:a7:0f:0b:fd:e4:
24:5b:a4:ed:05:c8:52:27:59:2e:11:0c:f8:66:98:03:04:cd:
de:16:e3:e3:9c:cd:e0:4f:6d:46:6b:2f:64:b3:59:0d:9d:f1:
ce:7e:5f:8e:9c:98:9b:76:26:31:52:f2:84:b9:db:27:91:78:
cf:92:e7:14:d7:70:bb:b0:fb:0a:5b:17:31:0b:6c:74:31:fb:
87:f5:2a:f6:37:d1:fe:ad:0a:e3:f1:fe:a2:dc:ee:76:b9:c3:
10:53:b8:ad:dc:be:cf:3b:c4:9c:6e:29:f2:24:9c:3a:aa:cc:
8f:f6:b2:cc:af:37:b2:7c:a8:68:5a:6e:0a:fb:77:6b:30:24:
6e:22:b3:3e:ca:27:0c:43:08:ce:59:81:1a:ad:16:ed:5c:f9:
0d:d1:84:df:ee:38:e7:44:86:4f:06:43:16:ef:22:ee:0f:56:
e8:73:4b:cc:94:22:aa:0d:2f:5f:27:35:c4:9b:14:c6:fd:7b:
e1:23:a8:42:7c:72:ef:fc:ce:c2:2d:c9:ef:fb:4d:fb:72:27:
08:82:95:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:34:32 2026 by rpki-client