Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230372e302f32342d3234203d3e20343032323635.roa
File: 3134372e3132352e3230372e302f32342d3234203d3e20343032323635.roa (raw, json)
Hash identifier: ur1tYjPvu3IKGnuWaNZY7l7dPWpUqcl/51PVOhkJw+0=
Subject key identifier: 6C:C8:08:F3:22:2D:EC:9A:6C:A9:5A:42:97:AE:78:3C:6D:F1:66:0A
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 0A3FB79CC77759C93BA6109B29993D496C2B27D2
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230372e302f32342d3234203d3e20343032323635.roa
Signing time: Mon 03 Aug 2026 16:57:24 +0000
ROA not before: Mon 03 Aug 2026 16:52:24 +0000
ROA not after: Mon 02 Aug 2027 16:57:24 +0000
asID: 402265
IP address blocks: 147.125.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 15:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:3f:b7:9c:c7:77:59:c9:3b:a6:10:9b:29:99:3d:49:6c:2b:27:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Aug 3 16:52:24 2026 GMT
Not After : Aug 2 16:57:24 2027 GMT
Subject: CN=6CC808F3222DEC9A6CA95A4297AE783C6DF1660A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e1:57:15:09:08:43:bb:c0:74:d2:79:83:f3:
37:84:88:ae:68:05:e0:74:dc:ed:9d:e1:84:5c:d0:
5f:a4:b7:1e:a6:ab:83:55:06:09:6d:1c:7d:f6:9a:
1a:1a:3c:10:40:c2:37:fd:75:bc:cb:44:f5:2a:b8:
f8:36:c5:c1:f7:aa:12:52:16:85:5e:25:df:37:81:
38:05:7d:78:be:90:90:92:bc:6d:d0:e4:ea:8e:13:
16:33:97:ea:32:58:ac:a5:54:d8:7f:44:de:9c:13:
47:86:cf:ea:55:87:47:99:1b:11:fe:d8:d9:a2:4f:
18:16:1a:3c:2d:b1:b9:ad:ac:9b:05:76:84:ad:fc:
8b:d4:f4:09:2d:b0:1f:1a:bb:fe:93:4b:6a:1d:19:
5b:e1:4b:e4:df:26:3c:2d:b9:35:2f:31:4e:db:f4:
4b:22:6a:38:a7:8d:c8:93:31:10:22:42:d7:da:75:
50:e2:bb:c8:c1:28:5f:0e:fa:e4:2f:d3:39:f2:13:
f9:95:8d:f7:02:f4:83:29:44:d4:42:d7:69:6a:d5:
9f:37:15:bd:31:49:30:76:8f:b3:95:4a:76:a1:50:
31:69:0a:e8:ed:06:c7:1f:61:a9:ea:1f:49:61:d9:
09:44:71:f4:0d:1c:03:1a:38:17:56:61:28:23:35:
02:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C8:08:F3:22:2D:EC:9A:6C:A9:5A:42:97:AE:78:3C:6D:F1:66:0A
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230372e302f32342d3234203d3e20343032323635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.207.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:bb:19:5c:4a:78:7b:7a:6b:09:76:21:a7:be:70:30:8c:e9:
c5:55:52:7e:85:85:ef:5f:1a:3d:ec:7a:be:00:d4:84:16:cc:
fc:4f:5b:d6:eb:5b:3f:3f:1f:a8:32:ac:8c:d4:33:23:d6:7a:
32:89:5c:5f:7c:3c:70:8a:81:6a:a4:0f:97:c7:b8:97:29:36:
1b:90:38:28:95:a2:61:91:eb:1b:e5:e9:b7:3e:20:09:bb:11:
a3:28:68:66:ac:35:04:31:c9:00:74:7b:6b:48:00:6d:f9:62:
10:f9:07:bb:33:c2:7b:30:38:9d:fc:10:8e:f8:a2:67:07:3b:
24:8a:af:06:a9:4a:bb:f3:77:86:6c:91:fe:48:da:7c:5b:f3:
e4:9f:2e:d6:14:03:ac:c2:c5:a3:ba:de:2b:ad:c9:aa:ef:44:
56:8d:ce:5f:08:be:62:60:00:86:ad:43:05:a3:c9:9a:69:77:
39:88:25:c1:58:4d:d7:de:ba:8b:ce:c8:31:35:7a:ea:5a:a8:
5d:95:37:26:85:d6:bb:eb:d5:7e:ca:2a:37:06:f3:4a:78:14:
2a:49:75:79:15:2a:d4:25:39:ab:51:a2:ce:a0:71:c8:3f:f3:
2f:e5:ab:7d:e3:88:2c:11:50:ce:f5:6b:53:e2:68:4d:08:f6:
ea:76:58:5c
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUCj+3nMd3Wck7phCbKZk9SWwrJ9IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNjA4MDMxNjUyMjRaFw0yNzA4MDIxNjU3MjRaMDMxMTAvBgNV
BAMTKDZDQzgwOEYzMjIyREVDOUE2Q0E5NUE0Mjk3QUU3ODNDNkRGMTY2MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL4VcVCQhDu8B00nmD8zeEiK5o
BeB03O2d4YRc0F+ktx6mq4NVBgltHH32mhoaPBBAwjf9dbzLRPUquPg2xcH3qhJS
FoVeJd83gTgFfXi+kJCSvG3Q5OqOExYzl+oyWKylVNh/RN6cE0eGz+pVh0eZGxH+
2NmiTxgWGjwtsbmtrJsFdoSt/IvU9AktsB8au/6TS2odGVvhS+TfJjwtuTUvMU7b
9EsiajinjciTMRAiQtfadVDiu8jBKF8O+uQv0znyE/mVjfcC9IMpRNRC12lq1Z83
Fb0xSTB2j7OVSnahUDFpCujtBscfYanqH0lh2QlEcfQNHAMaOBdWYSgjNQL/AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUbMgI8yIt7JpsqVpCl654PG3xZgowHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy
MzAzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzAzMjMyMzYzNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAJN9zzANBgkqhkiG9w0BAQsFAAOCAQEAH7sZXEp4e3prCXYhp75wMIzpxVVS
foWF718aPex6vgDUhBbM/E9b1utbPz8fqDKsjNQzI9Z6MolcX3w8cIqBaqQPl8e4
lyk2G5A4KJWiYZHrG+Xptz4gCbsRoyhoZqw1BDHJAHR7a0gAbfliEPkHuzPCezA4
nfwQjviiZwc7JIqvBqlKu/N3hmyR/kjafFvz5J8u1hQDrMLFo7reK63Jqu9EVo3O
Xwi+YmAAhq1DBaPJmml3OYglwVhN1966i87IMTV66lqoXZU3JoXWu+vVfsoqNwbz
SngUKkl1eRUq1CU5q1GizqBxyD/zL+WrfeOILBFQzvVrU+JoTQj26nZYXA==
-----END CERTIFICATE-----
Generated at Wed Aug 12 06:36:25 2026 by rpki-client