Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231322e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3231322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 33T98pETYVjZQqTBFiLNGPQPETtKZnJCSznZBLkTj7A=
Subject key identifier: 9E:56:3D:14:DD:BD:E9:F5:06:05:0E:82:5D:C3:A9:52:C8:EC:17:A2
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 680792FF84D8E0134B018641661F94D524A75851
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231322e302f32342d3234203d3e20383334.roa
Signing time: Sun 28 Jun 2026 19:29:07 +0000
ROA not before: Sun 28 Jun 2026 19:24:07 +0000
ROA not after: Sun 27 Jun 2027 19:29:07 +0000
asID: 834
IP address blocks: 147.125.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 22:40:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:07:92:ff:84:d8:e0:13:4b:01:86:41:66:1f:94:d5:24:a7:58:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jun 28 19:24:07 2026 GMT
Not After : Jun 27 19:29:07 2027 GMT
Subject: CN=9E563D14DDBDE9F506050E825DC3A952C8EC17A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:e0:6c:4d:f2:eb:51:04:66:c8:25:70:7f:
e5:11:6f:2a:1b:10:a0:c5:fa:c7:41:10:9e:fa:00:
8a:5d:3a:bc:b1:31:40:81:c7:d1:82:33:2a:9d:0e:
0f:84:23:54:f3:73:8e:cd:e4:20:27:70:78:ed:f2:
fe:45:35:99:1b:1f:f3:c6:da:a7:81:a5:98:fc:7f:
0f:e3:91:ce:b6:6a:16:73:be:1a:d5:dc:6c:87:8d:
14:f9:6a:7d:bb:09:83:0e:39:2e:c0:82:4d:35:a0:
09:e8:06:21:07:44:27:ee:b0:d5:fc:f4:4d:61:49:
1a:a6:e0:28:4c:dd:05:96:5b:7e:85:f4:f6:97:74:
8d:f2:56:42:dc:fd:f2:89:d0:97:41:38:b7:08:02:
66:86:49:c5:e1:93:a9:2a:28:ce:d6:7a:51:17:eb:
e8:d5:58:fc:d1:ed:6c:c0:c9:8d:6a:c0:a1:20:1e:
b7:9e:29:ce:0b:9e:21:6b:49:0a:8e:9a:00:1f:9e:
8a:2c:4c:7c:54:4e:ac:95:31:b5:b2:8d:e8:c9:c4:
51:1d:a4:ae:78:d2:6a:dd:a9:bb:2d:a6:fb:74:9c:
51:df:c7:dc:48:92:07:aa:d9:15:e1:a0:86:84:88:
07:6e:17:e5:e9:04:de:ad:06:fd:b9:73:20:0d:14:
56:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:56:3D:14:DD:BD:E9:F5:06:05:0E:82:5D:C3:A9:52:C8:EC:17:A2
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.212.0/24
Signature Algorithm: sha256WithRSAEncryption
52:1e:28:de:6d:11:f9:dd:65:60:2d:83:4a:53:c9:79:91:09:
8f:de:f8:5a:31:57:68:99:d0:87:79:14:63:5d:13:c1:75:51:
91:de:d8:dd:e1:fd:a4:c6:b9:d4:46:09:95:2a:72:2b:ae:4d:
bf:13:f2:16:51:2b:6f:a7:7a:6f:9d:42:ed:fc:da:8c:c2:a2:
fa:4d:81:29:c1:3d:03:0b:e2:8d:80:80:ce:bd:18:02:eb:b2:
03:c0:20:d3:79:be:96:41:c9:08:4e:cd:44:8e:b3:e7:29:5c:
fc:4c:31:fb:74:6c:2e:6b:2b:bc:e5:f8:c2:88:3f:80:d1:8c:
3f:ac:1e:17:02:74:d4:ee:ee:ad:31:35:bd:06:1e:a1:f1:b1:
9a:d9:3b:8a:1b:c6:b9:55:9a:9e:fa:75:85:27:04:98:6b:d3:
ef:5a:36:8e:d7:48:7b:98:80:9b:66:df:6b:fb:f4:4d:fe:7c:
79:e4:2d:34:60:7b:5b:a7:f3:50:46:0b:9a:c4:c4:e5:24:95:
62:a8:04:13:ed:e0:db:2c:55:20:ca:fd:da:51:34:e1:11:20:
06:4c:e1:98:cb:0d:1a:08:0d:4c:29:47:10:03:18:54:9b:e5:
d4:0c:29:0f:ee:34:6d:62:36:e5:8a:e9:7b:9f:b9:0f:36:dd:
d9:30:70:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:02:15 2026 by rpki-client